shieldcortex 2.19.1 → 2.20.0

package/dist/api/events.js.map

@@ -1 +1 @@
-{"version":3,"file":"events.js","sourceRoot":"","sources":["../../src/api/events.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAwHlD,yCAAyC;AACzC,MAAM,kBAAmB,SAAQ,YAAY;IAC3C,IAAI,CAAC,KAAsB,EAAE,IAAyB;QACpD,MAAM,OAAO,GAAgB;YAC3B,IAAI,EAAE,KAAK;YACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,IAAI;SACL,CAAC;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED,aAAa,CAAC,QAAsC;QAClD,IAAI,CAAC,EAAE,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED,cAAc,CAAC,QAAsC;QACnD,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;CACF;AAED,qBAAqB;AACrB,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,kBAAkB,EAAE,CAAC;AAErD,kCAAkC;AAClC,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,WAAmB;IACpE,YAAY,CAAC,IAAI,CAAC,iBAAiB,EAAE;QACnC,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,MAAM;QACN,WAAW;KACZ,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,KAAa;IAC/D,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAA2B,EAC3B,mBAA6B,EAAE,EAC/B,kBAA4B,EAAE;IAE9B,YAAY,CAAC,IAAI,CAAC,wBAAwB,EAAE;QAC1C,GAAG,MAAM;QACT,gBAAgB;QAChB,eAAe;KAChB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,OAAwE;IAExE,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,iCAAiC;AACjC,MAAM,UAAU,mBAAmB,CAAC,IAInC;IACC,YAAY,CAAC,IAAI,CAAC,mBAAmB,EAAE;QACrC,GAAG,IAAI;QACP,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;KACxC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAMpC;IACC,YAAY,CAAC,IAAI,CAAC,oBAAoB,EAAE;QACtC,GAAG,IAAI;QACP,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;KACxC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAKlC;IACC,YAAY,CAAC,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAShC;IACC,YAAY,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,IAI3C;IACC,YAAY,CAAC,IAAI,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC;AACtD,CAAC;AAED,+EAA+E;AAC/E,iCAAiC;AACjC,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAAqB,EAAE,IAAc;IAChE,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC;;;KAGvB,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,yDAAyD;QACzD,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAK,GAAG,GAAG;IAM9C,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC;;;;;;KAMvB,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAKzB,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACtB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAuB;YACjC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;YAC5C,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;QACvD,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAa;IAC/C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC7B,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClD,EAAE,CAAC,OAAO,CAAC,gDAAgD,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;IAC1F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACxE,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,0DAA0D,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClG,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,uBAAuB,MAAM,CAAC,OAAO,aAAa,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC"}
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../src/api/events.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AA2HlD,yCAAyC;AACzC,MAAM,kBAAmB,SAAQ,YAAY;IAC3C,IAAI,CAAC,KAAsB,EAAE,IAAyB;QACpD,MAAM,OAAO,GAAgB;YAC3B,IAAI,EAAE,KAAK;YACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,IAAI;SACL,CAAC;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED,aAAa,CAAC,QAAsC;QAClD,IAAI,CAAC,EAAE,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED,cAAc,CAAC,QAAsC;QACnD,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;CACF;AAED,qBAAqB;AACrB,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,kBAAkB,EAAE,CAAC;AAErD,kCAAkC;AAClC,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,WAAmB;IACpE,YAAY,CAAC,IAAI,CAAC,iBAAiB,EAAE;QACnC,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,MAAM;QACN,WAAW;KACZ,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,KAAa;IAC/D,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAA2B,EAC3B,mBAA6B,EAAE,EAC/B,kBAA4B,EAAE;IAE9B,YAAY,CAAC,IAAI,CAAC,wBAAwB,EAAE;QAC1C,GAAG,MAAM;QACT,gBAAgB;QAChB,eAAe;KAChB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,OAAwE;IAExE,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,iCAAiC;AACjC,MAAM,UAAU,mBAAmB,CAAC,IAInC;IACC,YAAY,CAAC,IAAI,CAAC,mBAAmB,EAAE;QACrC,GAAG,IAAI;QACP,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;KACxC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAMpC;IACC,YAAY,CAAC,IAAI,CAAC,oBAAoB,EAAE;QACtC,GAAG,IAAI;QACP,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;KACxC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAKlC;IACC,YAAY,CAAC,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAShC;IACC,YAAY,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,IAI3C;IACC,YAAY,CAAC,IAAI,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC;AACtD,CAAC;AAED,6BAA6B;AAC7B,MAAM,UAAU,uBAAuB,CAAC,IAMvC;IACC,YAAY,CAAC,IAAI,CAAC,uBAAuB,EAAE,IAAI,CAAC,CAAC;IACjD,YAAY,CAAC,uBAAuB,EAAE,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,IAGzC;IACC,YAAY,CAAC,IAAI,CAAC,yBAAyB,EAAE,IAAI,CAAC,CAAC;IACnD,YAAY,CAAC,yBAAyB,EAAE,IAAI,CAAC,CAAC;AAChD,CAAC;AAED,+EAA+E;AAC/E,iCAAiC;AACjC,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAAqB,EAAE,IAAc;IAChE,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC;;;KAGvB,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,yDAAyD;QACzD,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAK,GAAG,GAAG;IAM9C,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC;;;;;;KAMvB,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAKzB,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACtB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAuB;YACjC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;YAC5C,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;QACvD,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAa;IAC/C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC7B,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClD,EAAE,CAAC,OAAO,CAAC,gDAAgD,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;IAC1F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACxE,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,0DAA0D,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClG,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,uBAAuB,MAAM,CAAC,OAAO,aAAa,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC"}

package/dist/api/visualization-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"visualization-server.d.ts","sourceRoot":"","sources":["../../src/api/visualization-server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAqGH;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CA62E9D"}
+{"version":3,"file":"visualization-server.d.ts","sourceRoot":"","sources":["../../src/api/visualization-server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAqGH;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAmoF9D"}

package/dist/api/visualization-server.js

@@ -21,7 +21,7 @@ import { detectContradictions, getContradictionsFor } from '../memory/contradict
 import { enrichMemory } from '../memory/store.js';
 import { memoryEvents, emitDecayTick, emitConsolidation, getUnprocessedEvents, markEventsProcessed, cleanupOldEvents, } from './events.js';
 import { BrainWorker } from '../worker/brain-worker.js';
-import { pause, resume, getControlStatus } from './control.js';
+import { pause, resume, getControlStatus, isKillSwitchActive, getKillSwitchMeta, activateKillSwitch, deactivateKillSwitch } from './control.js';
 import { getCurrentVersion, getRunningVersion, checkForUpdates, performUpdate, scheduleRestart } from './version.js';
 import { runDefencePipeline } from '../defence/pipeline.js';
 import { DEFAULT_DEFENCE_CONFIG } from '../defence/types.js';
@@ -129,6 +129,23 @@ export function startVisualizationServer(dbPath) {
         res.json({ token });
     });
     // ============================================
+    // KILL SWITCH GUARD MIDDLEWARE
+    // ============================================
+    /**
+     * Express middleware that blocks requests when the kill switch is active.
+     * Returns 423 Locked with kill switch metadata.
+     */
+    function requireNotLocked(_req, res, next) {
+        if (!isKillSwitchActive())
+            return next();
+        const meta = getKillSwitchMeta();
+        res.status(423).json({
+            error: 'Kill switch active — operation blocked',
+            code: 'KILL_SWITCH_ACTIVE',
+            killSwitch: meta,
+        });
+    }
+    // ============================================
     // REST API ENDPOINTS
     // ============================================
     // Health check
@@ -142,7 +159,7 @@ export function startVisualizationServer(dbPath) {
         res.json({ total, byFeature: { ...gatedCounters } });
     });
     // Get all memories with filters and pagination
-    app.get('/api/memories', async (req, res) => {
+    app.get('/api/memories', requireNotLocked, async (req, res) => {
         try {
             // Extract query params as strings
             const project = typeof req.query.project === 'string' ? req.query.project : undefined;
@@ -204,7 +221,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Activity data for heatmap (must be before :id route)
-    app.get('/api/memories/activity', (req, res) => {
+    app.get('/api/memories/activity', requireNotLocked, (req, res) => {
         try {
             const project = typeof req.query.project === 'string' ? req.query.project : undefined;
             const db = getDatabase();
@@ -229,7 +246,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Memory quality analysis (must be before :id route)
-    app.get('/api/memories/quality', (req, res) => {
+    app.get('/api/memories/quality', requireNotLocked, (req, res) => {
         try {
             const project = typeof req.query.project === 'string' ? req.query.project : undefined;
             const db = getDatabase();
@@ -265,7 +282,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Get single memory by ID
-    app.get('/api/memories/:id', (req, res) => {
+    app.get('/api/memories/:id', requireNotLocked, (req, res) => {
         try {
             const id = parseInt(req.params.id);
             const memory = getMemoryById(id);
@@ -282,7 +299,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Create memory
-    app.post('/api/memories', (req, res) => {
+    app.post('/api/memories', requireNotLocked, (req, res) => {
         try {
             const { title, content, type, category, project, tags, salience } = req.body;
             if (!title || !content) {
@@ -312,7 +329,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Delete memory
-    app.delete('/api/memories/:id', (req, res) => {
+    app.delete('/api/memories/:id', requireNotLocked, (req, res) => {
         try {
             const id = parseInt(req.params.id);
             const success = deleteMemory(id);
@@ -326,7 +343,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Access/reinforce memory
-    app.post('/api/memories/:id/access', (req, res) => {
+    app.post('/api/memories/:id/access', requireNotLocked, (req, res) => {
         try {
             const id = parseInt(req.params.id);
             const memory = accessMemory(id);
@@ -381,8 +398,81 @@ export function startVisualizationServer(dbPath) {
             res.status(500).json({ error: error.message });
         }
     });
+    // Memory health score (composite metric)
+    app.get('/api/health-score', requireNotLocked, (_req, res) => {
+        try {
+            const db = getDatabase();
+            // ── Freshness ──
+            const totalCount = db.prepare('SELECT COUNT(*) as count FROM memories').get().count;
+            const freshCount = db.prepare('SELECT COUNT(*) as count FROM memories WHERE decayed_score > 0.3').get().count;
+            const freshnessScore = totalCount > 0 ? Math.round((freshCount / totalCount) * 100) : 100;
+            const freshPct = totalCount > 0 ? Math.round((freshCount / totalCount) * 100) : 100;
+            // ── Coverage ──
+            const linkedCount = db.prepare('SELECT COUNT(DISTINCT memory_id) as count FROM memory_entities').get().count;
+            const coverageScore = totalCount > 0 ? Math.round((linkedCount / totalCount) * 100) : 0;
+            // ── Consistency ──
+            const contradictionCount = db.prepare("SELECT COUNT(*) as count FROM memory_links WHERE relationship = 'contradicts'").get().count;
+            const consistencyScore = Math.max(0, 100 - (contradictionCount * 10));
+            // ── Consolidation ──
+            const lastConsolidated = db.prepare("SELECT created_at FROM memories WHERE type = 'long_term' AND tags LIKE '%auto-consolidated%' ORDER BY created_at DESC LIMIT 1").get();
+            let consolidationScore = 25;
+            if (lastConsolidated) {
+                const hoursAgo = (Date.now() - new Date(lastConsolidated.created_at).getTime()) / (1000 * 60 * 60);
+                if (hoursAgo <= 4)
+                    consolidationScore = 100;
+                else if (hoursAgo <= 8)
+                    consolidationScore = 75;
+                else if (hoursAgo <= 24)
+                    consolidationScore = 50;
+                else
+                    consolidationScore = 25;
+            }
+            // ── Overall (weighted average) ──
+            const overall = Math.round(freshnessScore * 0.3 +
+                coverageScore * 0.25 +
+                consistencyScore * 0.25 +
+                consolidationScore * 0.2);
+            // ── Consolidation detail text ──
+            let consolidationDetail = 'No consolidated memories found';
+            if (lastConsolidated) {
+                const hoursAgo = (Date.now() - new Date(lastConsolidated.created_at).getTime()) / (1000 * 60 * 60);
+                if (hoursAgo < 1)
+                    consolidationDetail = 'Last consolidated less than 1 hour ago';
+                else
+                    consolidationDetail = `Last consolidated ${Math.round(hoursAgo)} hours ago`;
+            }
+            res.json({
+                overall,
+                components: {
+                    freshness: {
+                        score: freshnessScore,
+                        label: 'Memory Freshness',
+                        detail: `${freshPct}% of memories above decay threshold`,
+                    },
+                    coverage: {
+                        score: coverageScore,
+                        label: 'Graph Coverage',
+                        detail: `${coverageScore}% of memories have entity links`,
+                    },
+                    consistency: {
+                        score: consistencyScore,
+                        label: 'Consistency',
+                        detail: `${contradictionCount} contradictions detected`,
+                    },
+                    consolidation: {
+                        score: consolidationScore,
+                        label: 'Consolidation',
+                        detail: consolidationDetail,
+                    },
+                },
+            });
+        }
+        catch (error) {
+            res.status(500).json({ error: error.message });
+        }
+    });
     // Get currently activated memories (spreading activation)
-    app.get('/api/activation', (_req, res) => {
+    app.get('/api/activation', requireNotLocked, (_req, res) => {
         try {
             const activeMemories = getActiveMemories();
             const stats = getActivationStats();
@@ -400,7 +490,7 @@ export function startVisualizationServer(dbPath) {
     // ORGANIC BRAIN ENDPOINTS (Phase 3)
     // ============================================
     // Get detected contradictions
-    app.get('/api/contradictions', (req, res) => {
+    app.get('/api/contradictions', requireNotLocked, (req, res) => {
         try {
             const project = typeof req.query.project === 'string' ? req.query.project : undefined;
             const category = typeof req.query.category === 'string' ? req.query.category : undefined;
@@ -433,7 +523,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Get contradictions for a specific memory
-    app.get('/api/memories/:id/contradictions', (req, res) => {
+    app.get('/api/memories/:id/contradictions', requireNotLocked, (req, res) => {
         try {
             const id = parseInt(req.params.id);
             if (isNaN(id)) {
@@ -457,7 +547,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Manually enrich a memory with new context
-    app.post('/api/memories/:id/enrich', (req, res) => {
+    app.post('/api/memories/:id/enrich', requireNotLocked, (req, res) => {
         try {
             const id = parseInt(req.params.id);
             if (isNaN(id)) {
@@ -513,9 +603,12 @@ export function startVisualizationServer(dbPath) {
             res.status(500).json({ error: error.message });
         }
     });
-    // Pause memory creation
+    // Pause memory creation (soft pause — kill switch takes precedence)
     app.post('/api/control/pause', (_req, res) => {
         try {
+            if (isKillSwitchActive()) {
+                return res.status(409).json({ error: 'Kill switch is active — use /api/iron-dome/resume to deactivate first', code: 'KILL_SWITCH_ACTIVE' });
+            }
             pause();
             res.json({ paused: true, message: 'Memory creation paused' });
         }
@@ -523,9 +616,12 @@ export function startVisualizationServer(dbPath) {
             res.status(500).json({ error: error.message });
         }
     });
-    // Resume memory creation
+    // Resume memory creation (soft resume — cannot override kill switch)
     app.post('/api/control/resume', (_req, res) => {
         try {
+            if (isKillSwitchActive()) {
+                return res.status(409).json({ error: 'Kill switch is active — use /api/iron-dome/resume to deactivate first', code: 'KILL_SWITCH_ACTIVE' });
+            }
             resume();
             res.json({ paused: false, message: 'Memory creation resumed' });
         }
@@ -727,7 +823,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Get memory links/relationships
-    app.get('/api/links', (req, res) => {
+    app.get('/api/links', requireNotLocked, (req, res) => {
         try {
             const project = typeof req.query.project === 'string' ? req.query.project : undefined;
             const db = getDatabase();
@@ -780,7 +876,7 @@ export function startVisualizationServer(dbPath) {
     // SQL CONSOLE ENDPOINT
     // ============================================
     // Execute SQL query (with safety restrictions)
-    app.post('/api/sql', (req, res) => {
+    app.post('/api/sql', requireNotLocked, (req, res) => {
         try {
             const { query, allowWrite } = req.body;
             if (!query || typeof query !== 'string') {
@@ -837,7 +933,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Trigger consolidation
-    app.post('/api/consolidate', (_req, res) => {
+    app.post('/api/consolidate', requireNotLocked, (_req, res) => {
         try {
             const result = consolidate();
             // Emit event for Activity log
@@ -852,7 +948,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Get context summary
-    app.get('/api/context', async (req, res) => {
+    app.get('/api/context', requireNotLocked, async (req, res) => {
         try {
             const project = typeof req.query.project === 'string' ? req.query.project : undefined;
             const summary = await generateContextSummary(project);
@@ -867,7 +963,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Get search suggestions (for autocomplete)
-    app.get('/api/suggestions', (req, res) => {
+    app.get('/api/suggestions', requireNotLocked, (req, res) => {
         try {
             const query = typeof req.query.q === 'string' ? req.query.q : '';
             const limit = typeof req.query.limit === 'string' ? parseInt(req.query.limit) : 10;
@@ -926,7 +1022,7 @@ export function startVisualizationServer(dbPath) {
     // GRAPH / ONTOLOGY ENDPOINTS
     // ============================================
     // List entities with optional filters and pagination
-    app.get('/api/graph/entities', (req, res) => {
+    app.get('/api/graph/entities', requireNotLocked, (req, res) => {
         try {
             const db = getDatabase();
             const type = typeof req.query.type === 'string' ? req.query.type : undefined;
@@ -971,7 +1067,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Get triples for a specific entity
-    app.get('/api/graph/entities/:id/triples', (req, res) => {
+    app.get('/api/graph/entities/:id/triples', requireNotLocked, (req, res) => {
         try {
             const db = getDatabase();
             const id = parseInt(req.params.id);
@@ -994,7 +1090,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Get memories linked to a specific entity
-    app.get('/api/graph/entities/:id/memories', (req, res) => {
+    app.get('/api/graph/entities/:id/memories', requireNotLocked, (req, res) => {
         try {
             const db = getDatabase();
             const id = parseInt(req.params.id);
@@ -1015,12 +1111,112 @@ export function startVisualizationServer(dbPath) {
             res.status(500).json({ error: error.message });
         }
     });
+    // Get neighbourhood of an entity: the entity, its direct neighbours, and connecting triples
+    app.get('/api/graph/entities/:id/neighbourhood', requireNotLocked, (req, res) => {
+        try {
+            const db = getDatabase();
+            const id = parseInt(req.params.id);
+            if (isNaN(id)) {
+                return res.status(400).json({ error: 'Invalid entity ID' });
+            }
+            // Get the focal entity
+            const focal = db.prepare('SELECT id, name, type, memory_count as memoryCount, aliases FROM entities WHERE id = ?').get(id);
+            if (!focal) {
+                return res.status(404).json({ error: 'Entity not found' });
+            }
+            focal.aliases = JSON.parse(focal.aliases || '[]');
+            // Get all triples involving this entity (exclude related_to noise — only meaningful predicates)
+            const triplesAll = db.prepare(`
+        SELECT t.id, t.subject_id, t.object_id, t.predicate,
+               s.name as subject_name, s.type as subject_type, s.memory_count as subject_count,
+               o.name as object_name, o.type as object_type, o.memory_count as object_count
+        FROM triples t
+        JOIN entities s ON s.id = t.subject_id
+        JOIN entities o ON o.id = t.object_id
+        WHERE (t.subject_id = ? OR t.object_id = ?)
+        ORDER BY
+          CASE WHEN t.predicate != 'related_to' THEN 0 ELSE 1 END,
+          CASE WHEN t.subject_id = ? THEN o.memory_count ELSE s.memory_count END DESC
+      `).all(id, id, id);
+            // Collect unique neighbour IDs, prioritising meaningful predicates
+            const neighbourIds = new Map();
+            const meaningfulTriples = [];
+            const relatedToTriples = [];
+            for (const t of triplesAll) {
+                const neighbourId = t.subject_id === id ? t.object_id : t.subject_id;
+                const count = t.subject_id === id ? t.object_count : t.subject_count;
+                if (neighbourId === id)
+                    continue;
+                if (t.predicate !== 'related_to') {
+                    meaningfulTriples.push(t);
+                    if (!neighbourIds.has(neighbourId)) {
+                        neighbourIds.set(neighbourId, { predicate: t.predicate, count });
+                    }
+                }
+                else {
+                    relatedToTriples.push(t);
+                }
+            }
+            // Add related_to neighbours up to a cap (prefer high memory count)
+            for (const t of relatedToTriples) {
+                if (neighbourIds.size >= 25)
+                    break;
+                const neighbourId = t.subject_id === id ? t.object_id : t.subject_id;
+                const count = t.subject_id === id ? t.object_count : t.subject_count;
+                if (!neighbourIds.has(neighbourId)) {
+                    neighbourIds.set(neighbourId, { predicate: 'related_to', count });
+                }
+            }
+            // Build triples list (only for included neighbours)
+            const includedTriples = [
+                ...meaningfulTriples.filter(t => {
+                    const nid = t.subject_id === id ? t.object_id : t.subject_id;
+                    return neighbourIds.has(nid);
+                }),
+                ...relatedToTriples.filter(t => {
+                    const nid = t.subject_id === id ? t.object_id : t.subject_id;
+                    return neighbourIds.has(nid);
+                }),
+            ];
+            // Deduplicate triples by id
+            const seenTriples = new Set();
+            const uniqueTriples = includedTriples.filter(t => {
+                if (seenTriples.has(t.id))
+                    return false;
+                seenTriples.add(t.id);
+                return true;
+            });
+            // Fetch neighbour entities
+            const neighbourEntities = [];
+            if (neighbourIds.size > 0) {
+                const ids = [...neighbourIds.keys()];
+                const placeholders = ids.map(() => '?').join(',');
+                const rows = db.prepare(`
+          SELECT id, name, type, memory_count as memoryCount, aliases
+          FROM entities WHERE id IN (${placeholders})
+        `).all(...ids);
+                for (const r of rows) {
+                    r.aliases = JSON.parse(r.aliases || '[]');
+                    neighbourEntities.push(r);
+                }
+            }
+            res.json({
+                focal,
+                neighbours: neighbourEntities,
+                triples: uniqueTriples,
+                totalConnections: triplesAll.length,
+            });
+        }
+        catch (error) {
+            res.status(500).json({ error: error.message });
+        }
+    });
     // List triples with optional predicate filter and pagination
-    app.get('/api/graph/triples', (req, res) => {
+    app.get('/api/graph/triples', requireNotLocked, (req, res) => {
         try {
             const db = getDatabase();
             const predicate = typeof req.query.predicate === 'string' ? req.query.predicate : undefined;
-            const limit = typeof req.query.limit === 'string' ? Math.min(parseInt(req.query.limit), 500) : 100;
+            const limit = typeof req.query.limit === 'string' ? Math.min(parseInt(req.query.limit), 10000) : 100;
             const offset = typeof req.query.offset === 'string' ? parseInt(req.query.offset) : 0;
             let whereClause = '';
             const params = [];
@@ -1028,6 +1224,8 @@ export function startVisualizationServer(dbPath) {
                 whereClause = 'WHERE t.predicate = ?';
                 params.push(predicate);
             }
+            // For large triple sets, only return triples involving the top 500 entities
+            // to keep response sizes manageable
             const totalRow = db.prepare(`SELECT COUNT(*) as count FROM triples t ${whereClause}`).get(...params);
             const total = totalRow.count;
             const rows = db.prepare(`
@@ -1047,7 +1245,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Search entities by name
-    app.get('/api/graph/search', (req, res) => {
+    app.get('/api/graph/search', requireNotLocked, (req, res) => {
         try {
             const db = getDatabase();
             const q = typeof req.query.q === 'string' ? req.query.q : '';
@@ -1078,7 +1276,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Find path between two entities using BFS
-    app.get('/api/graph/paths', (req, res) => {
+    app.get('/api/graph/paths', requireNotLocked, (req, res) => {
         try {
             const db = getDatabase();
             const fromName = typeof req.query.from === 'string' ? req.query.from : '';
@@ -1164,7 +1362,7 @@ export function startVisualizationServer(dbPath) {
     // BRAIN CONTROL CENTRE
     // ============================================
     // Boost memory salience (+0.15, capped at 1.0)
-    app.post('/api/memories/:id/boost', (req, res) => {
+    app.post('/api/memories/:id/boost', requireNotLocked, (req, res) => {
         try {
             const id = parseInt(req.params.id);
             const memory = getMemoryById(id);
@@ -1180,7 +1378,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Demote memory salience (-0.15, floor at 0.05)
-    app.post('/api/memories/:id/demote', (req, res) => {
+    app.post('/api/memories/:id/demote', requireNotLocked, (req, res) => {
         try {
             const id = parseInt(req.params.id);
             const memory = getMemoryById(id);
@@ -1196,7 +1394,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Promote memory from STM to LTM
-    app.post('/api/memories/:id/promote', (req, res) => {
+    app.post('/api/memories/:id/promote', requireNotLocked, (req, res) => {
         try {
             const id = parseInt(req.params.id);
             const memory = promoteMemory(id);
@@ -1209,11 +1407,51 @@ export function startVisualizationServer(dbPath) {
             res.status(500).json({ error: error.message });
         }
     });
-    // Update memory (partial: title, content, tags, category)
-    app.patch('/api/memories/:id', (req, res) => {
+    // Update memory (partial: title, content, tags, category, importance/salience)
+    app.patch('/api/memories/:id', requireNotLocked, (req, res) => {
         try {
             const id = parseInt(req.params.id);
-            const updated = updateMemory(id, req.body);
+            const { title, content, category, tags, importance } = req.body;
+            // Validate provided fields
+            if (title !== undefined) {
+                if (typeof title !== 'string' || title.trim().length === 0) {
+                    return res.status(400).json({ error: 'Title must be a non-empty string' });
+                }
+            }
+            if (content !== undefined) {
+                if (typeof content !== 'string') {
+                    return res.status(400).json({ error: 'Content must be a string' });
+                }
+            }
+            const validCategories = ['architecture', 'pattern', 'preference', 'error', 'context', 'learning', 'todo', 'note', 'relationship', 'custom'];
+            if (category !== undefined) {
+                if (!validCategories.includes(category)) {
+                    return res.status(400).json({ error: `Category must be one of: ${validCategories.join(', ')}` });
+                }
+            }
+            if (tags !== undefined) {
+                if (!Array.isArray(tags) || !tags.every((t) => typeof t === 'string')) {
+                    return res.status(400).json({ error: 'Tags must be an array of strings' });
+                }
+            }
+            if (importance !== undefined) {
+                if (typeof importance !== 'number' || importance < 0 || importance > 1) {
+                    return res.status(400).json({ error: 'Importance must be a number between 0 and 1' });
+                }
+            }
+            // Build clean updates object (map importance → salience)
+            const updates = {};
+            if (title !== undefined)
+                updates.title = title.trim();
+            if (content !== undefined)
+                updates.content = content;
+            if (category !== undefined)
+                updates.category = category;
+            if (tags !== undefined)
+                updates.tags = tags;
+            if (importance !== undefined)
+                updates.salience = importance;
+            const updated = updateMemory(id, updates);
             if (!updated) {
                 return res.status(404).json({ error: 'Memory not found' });
             }
@@ -1224,7 +1462,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Quarantine a memory (move to quarantine table, delete original)
-    app.post('/api/memories/:id/quarantine', (req, res) => {
+    app.post('/api/memories/:id/quarantine', requireNotLocked, (req, res) => {
         try {
             const id = parseInt(req.params.id);
             const memory = getMemoryById(id);
@@ -1242,7 +1480,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Create a manual link between two memories
-    app.post('/api/links', (req, res) => {
+    app.post('/api/links', requireNotLocked, (req, res) => {
         try {
             const { sourceId, targetId, relationship, strength } = req.body;
             if (!sourceId || !targetId || !relationship) {
@@ -1447,6 +1685,35 @@ export function startVisualizationServer(dbPath) {
             res.status(500).json({ error: error.message });
         }
     });
+    // Emergency Stop — activates kill switch, blocks ALL agent operations
+    app.post('/api/iron-dome/emergency-stop', (_req, res) => {
+        try {
+            activateKillSwitch({ source: 'manual' });
+            res.json({
+                stopped: true,
+                killSwitchActive: true,
+                message: 'Kill switch activated. All agent operations blocked. Iron Dome remains active. Investigate before resuming.',
+            });
+        }
+        catch (error) {
+            res.status(500).json({ error: error.message });
+        }
+    });
+    // Resume agent operations after investigation (requires reason)
+    app.post('/api/iron-dome/resume', (req, res) => {
+        try {
+            const reason = req.body?.reason || 'Resumed via dashboard';
+            deactivateKillSwitch(reason);
+            res.json({
+                resumed: true,
+                killSwitchActive: false,
+                message: 'Kill switch deactivated. Agent operations resumed. Iron Dome continues protecting.',
+            });
+        }
+        catch (error) {
+            res.status(500).json({ error: error.message });
+        }
+    });
     app.post('/api/iron-dome/scan', (req, res) => {
         try {
             const { text } = req.body;
@@ -1648,7 +1915,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Approve quarantined item
-    app.post('/api/v1/quarantine/:id/approve', (req, res) => {
+    app.post('/api/v1/quarantine/:id/approve', requireNotLocked, (req, res) => {
         try {
             const db = getDatabase();
             const id = parseInt(req.params.id, 10);
@@ -1664,7 +1931,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Reject quarantined item
-    app.post('/api/v1/quarantine/:id/reject', (req, res) => {
+    app.post('/api/v1/quarantine/:id/reject', requireNotLocked, (req, res) => {
         try {
             const db = getDatabase();
             const id = parseInt(req.params.id, 10);
@@ -1681,7 +1948,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Retroactive sync: push existing quarantine items to cloud
-    app.post('/api/quarantine/sync-to-cloud', async (_req, res) => {
+    app.post('/api/quarantine/sync-to-cloud', requireNotLocked, async (_req, res) => {
         try {
             const config = getCloudConfig();
             if (!config.cloudEnabled || !config.cloudApiKey) {
@@ -1752,7 +2019,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Manually trigger light tick (for testing)
-    app.post('/api/worker/trigger-light', async (_req, res) => {
+    app.post('/api/worker/trigger-light', requireNotLocked, async (_req, res) => {
         try {
             const result = await brainWorker.triggerLightTick();
             res.json({
@@ -1766,7 +2033,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Manually trigger medium tick (for testing)
-    app.post('/api/worker/trigger-medium', async (_req, res) => {
+    app.post('/api/worker/trigger-medium', requireNotLocked, async (_req, res) => {
         try {
             const result = await brainWorker.triggerMediumTick();
             res.json({