shieldcortex 3.0.4 → 3.1.0

package/dist/database/init.js

@@ -7,6 +7,7 @@ import { dirname, join } from 'path';
 import { homedir } from 'os';
 import { fileURLToPath } from 'url';
 import { execSync } from 'child_process';
+import { randomUUID } from 'crypto';
 const _currentFile = fileURLToPath(import.meta.url);
 const _currentDir = dirname(_currentFile);
 let db = null;
@@ -260,6 +261,25 @@ function runMigrations(database) {
     if (!columnNames.has('source')) {
         database.exec("ALTER TABLE memories ADD COLUMN source TEXT DEFAULT 'user:direct'");
     }
+    if (!columnNames.has('uuid')) {
+        database.exec("ALTER TABLE memories ADD COLUMN uuid TEXT");
+    }
+    if (!columnNames.has('updated_at')) {
+        database.exec('ALTER TABLE memories ADD COLUMN updated_at TIMESTAMP');
+    }
+    try {
+        const rowsWithoutUuid = database.prepare('SELECT id FROM memories WHERE uuid IS NULL OR uuid = ?').all('');
+        const setUuid = database.prepare('UPDATE memories SET uuid = ? WHERE id = ?');
+        for (const row of rowsWithoutUuid) {
+            setUuid.run(randomUUID(), row.id);
+        }
+        database.exec('UPDATE memories SET updated_at = COALESCE(updated_at, created_at, CURRENT_TIMESTAMP) WHERE updated_at IS NULL');
+        database.exec('CREATE UNIQUE INDEX IF NOT EXISTS idx_memories_uuid ON memories(uuid)');
+        database.exec('CREATE INDEX IF NOT EXISTS idx_memories_updated ON memories(updated_at DESC)');
+    }
+    catch {
+        // Safe to ignore on partially migrated databases
+    }
     // Migration: Defence tables (defence_audit, quarantine, fragmentation_entities)
     try {
         database.exec(`
@@ -673,6 +693,7 @@ function getInlineSchema() {
     return `
     CREATE TABLE IF NOT EXISTS memories (
       id INTEGER PRIMARY KEY AUTOINCREMENT,
+      uuid TEXT NOT NULL UNIQUE,
       type TEXT NOT NULL CHECK(type IN ('short_term', 'long_term', 'episodic')),
       category TEXT NOT NULL DEFAULT 'note',
       title TEXT NOT NULL,
@@ -684,6 +705,7 @@ function getInlineSchema() {
       access_count INTEGER DEFAULT 0,
       last_accessed TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
       created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+      updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
       metadata TEXT DEFAULT '{}',
       embedding BLOB,
       scope TEXT DEFAULT 'project',
@@ -721,11 +743,13 @@ function getInlineSchema() {
     END;
 
     CREATE INDEX IF NOT EXISTS idx_memories_type ON memories(type);
+    CREATE UNIQUE INDEX IF NOT EXISTS idx_memories_uuid ON memories(uuid);
     CREATE INDEX IF NOT EXISTS idx_memories_project ON memories(project);
     CREATE INDEX IF NOT EXISTS idx_memories_category ON memories(category);
     CREATE INDEX IF NOT EXISTS idx_memories_salience ON memories(salience DESC);
     CREATE INDEX IF NOT EXISTS idx_memories_decayed_score ON memories(decayed_score DESC);
     CREATE INDEX IF NOT EXISTS idx_memories_last_accessed ON memories(last_accessed DESC);
+    CREATE INDEX IF NOT EXISTS idx_memories_updated ON memories(updated_at DESC);
 
     CREATE TABLE IF NOT EXISTS sessions (
       id INTEGER PRIMARY KEY AUTOINCREMENT,

package/dist/graph/backfill.js

@@ -1,8 +1,8 @@
 import { getDatabase } from '../database/init.js';
 import { extractFromMemory } from './extract.js';
-import { processExtractionResult } from './resolve.js';
+import { replaceMemoryGraph } from './resolve.js';
 /** Bump this when extract.ts logic changes to force re-extraction */
-const EXTRACTION_VERSION = 2;
+const EXTRACTION_VERSION = 3;
 export function backfillGraph(options) {
     const db = getDatabase();
     const force = options?.force ?? false;
@@ -32,9 +32,7 @@ export function backfillGraph(options) {
     for (const mem of memories) {
         try {
             const extraction = extractFromMemory(mem.title, mem.content, mem.category);
-            if (extraction.entities.length > 0) {
-                processExtractionResult(extraction, mem.id);
-            }
+            replaceMemoryGraph(mem.id, extraction);
             // Mark this memory as extracted at the current version
             if (updateVersion) {
                 updateVersion.run(EXTRACTION_VERSION, mem.id);

package/dist/graph/resolve.d.ts

@@ -2,4 +2,14 @@ import type { EntityType, ExtractionResult } from './extract.js';
 export declare function levenshtein(a: string, b: string): number;
 export declare function resolveEntity(name: string, type: EntityType): number;
 export declare function mergeEntities(keepId: number, removeId: number): void;
+export declare function removeMemoryGraph(memoryId: number): {
+    removedEntityLinks: number;
+    removedTriples: number;
+    orphanEntitiesPruned: number;
+};
+export declare function replaceMemoryGraph(memoryId: number, result: ExtractionResult): {
+    removedEntityLinks: number;
+    removedTriples: number;
+    orphanEntitiesPruned: number;
+};
 export declare function processExtractionResult(result: ExtractionResult, memoryId: number): void;

package/dist/graph/resolve.js

@@ -93,7 +93,7 @@ export function mergeEntities(keepId, removeId) {
         db.prepare('DELETE FROM entities WHERE id = ?').run(removeId);
     })();
 }
-export function processExtractionResult(result, memoryId) {
+function applyExtractionResult(result, memoryId) {
     const db = getDatabase();
     const nameToId = new Map();
     // 1. Resolve all entities
@@ -123,3 +123,65 @@ export function processExtractionResult(result, memoryId) {
         updateCount.run(id);
     }
 }
+function pruneOrphanEntities(candidateIds) {
+    if (candidateIds.length === 0)
+        return 0;
+    const db = getDatabase();
+    const placeholders = candidateIds.map(() => '?').join(', ');
+    const orphanRows = db.prepare(`
+    SELECT e.id
+    FROM entities e
+    WHERE e.id IN (${placeholders})
+      AND NOT EXISTS (SELECT 1 FROM memory_entities me WHERE me.entity_id = e.id)
+      AND NOT EXISTS (SELECT 1 FROM triples t WHERE t.subject_id = e.id OR t.object_id = e.id)
+  `).all(...candidateIds);
+    if (orphanRows.length === 0)
+        return 0;
+    const orphanIds = orphanRows.map((row) => row.id);
+    const orphanPlaceholders = orphanIds.map(() => '?').join(', ');
+    db.prepare(`DELETE FROM entities WHERE id IN (${orphanPlaceholders})`).run(...orphanIds);
+    return orphanIds.length;
+}
+function clearMemoryGraphSlice(memoryId) {
+    const db = getDatabase();
+    const linkedEntityRows = db.prepare(`
+    SELECT DISTINCT entity_id
+    FROM memory_entities
+    WHERE memory_id = ?
+  `).all(memoryId);
+    const linkedEntityIds = linkedEntityRows.map((row) => row.entity_id);
+    const removedTriples = Number(db.prepare('DELETE FROM triples WHERE source_memory_id = ?').run(memoryId).changes ?? 0);
+    const removedEntityLinks = Number(db.prepare('DELETE FROM memory_entities WHERE memory_id = ?').run(memoryId).changes ?? 0);
+    if (linkedEntityIds.length > 0) {
+        const placeholders = linkedEntityIds.map(() => '?').join(', ');
+        db.prepare(`
+      UPDATE entities
+      SET memory_count = CASE WHEN memory_count > 0 THEN memory_count - 1 ELSE 0 END
+      WHERE id IN (${placeholders})
+    `).run(...linkedEntityIds);
+    }
+    const orphanEntitiesPruned = pruneOrphanEntities(linkedEntityIds);
+    return {
+        removedEntityLinks,
+        removedTriples,
+        orphanEntitiesPruned,
+    };
+}
+export function removeMemoryGraph(memoryId) {
+    const db = getDatabase();
+    return db.transaction(() => clearMemoryGraphSlice(memoryId))();
+}
+export function replaceMemoryGraph(memoryId, result) {
+    const db = getDatabase();
+    return db.transaction(() => {
+        const cleared = clearMemoryGraphSlice(memoryId);
+        if (result.entities.length > 0) {
+            applyExtractionResult(result, memoryId);
+        }
+        return cleared;
+    })();
+}
+export function processExtractionResult(result, memoryId) {
+    const db = getDatabase();
+    db.transaction(() => applyExtractionResult(result, memoryId))();
+}

package/dist/index.d.ts

@@ -25,6 +25,7 @@
  *   shieldcortex hook session-start      # Run session-start hook (for settings.json)
  *   shieldcortex hook session-end        # Run session-end hook (for settings.json)
  *   shieldcortex service install         # Auto-start dashboard on login
+ *   shieldcortex service repair          # Rebuild auto-start service with current install path
  *   shieldcortex service uninstall       # Remove auto-start
  *   shieldcortex service status          # Check service status
  *   shieldcortex openclaw install        # Install OpenClaw hook
@@ -32,6 +33,7 @@
  *   shieldcortex openclaw status         # Check OpenClaw hook status
  *   shieldcortex config --openclaw-auto-memory true   # Enable OpenClaw auto-memory extraction
  *   shieldcortex config --openclaw-auto-memory false  # Disable OpenClaw auto-memory extraction
+ *   shieldcortex cloud sync --full      # Backfill local memories + graph to ShieldCortex Cloud
  *   shieldcortex copilot install         # Configure MCP server for VS Code + Cursor
  *   shieldcortex copilot uninstall       # Remove MCP server configuration
  *   shieldcortex copilot status          # Check MCP server configuration

package/dist/index.js

@@ -25,6 +25,7 @@
  *   shieldcortex hook session-start      # Run session-start hook (for settings.json)
  *   shieldcortex hook session-end        # Run session-end hook (for settings.json)
  *   shieldcortex service install         # Auto-start dashboard on login
+ *   shieldcortex service repair          # Rebuild auto-start service with current install path
  *   shieldcortex service uninstall       # Remove auto-start
  *   shieldcortex service status          # Check service status
  *   shieldcortex openclaw install        # Install OpenClaw hook
@@ -32,6 +33,7 @@
  *   shieldcortex openclaw status         # Check OpenClaw hook status
  *   shieldcortex config --openclaw-auto-memory true   # Enable OpenClaw auto-memory extraction
  *   shieldcortex config --openclaw-auto-memory false  # Disable OpenClaw auto-memory extraction
+ *   shieldcortex cloud sync --full      # Backfill local memories + graph to ShieldCortex Cloud
  *   shieldcortex copilot install         # Configure MCP server for VS Code + Cursor
  *   shieldcortex copilot uninstall       # Remove MCP server configuration
  *   shieldcortex copilot status          # Check MCP server configuration
@@ -47,6 +49,7 @@
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 import { spawn } from 'child_process';
 import { fileURLToPath } from 'url';
+import http from 'http';
 import path from 'path';
 import fs from 'fs';
 import { createServer } from './server.js';
@@ -295,6 +298,25 @@ function startDashboard() {
     });
     return dashboard;
 }
+function checkLocalHttp(url, expectedStatus = [200], timeoutMs = 1200) {
+    return new Promise((resolve) => {
+        const req = http.get(url, { timeout: timeoutMs }, (res) => {
+            res.resume();
+            resolve(Boolean(res.statusCode && expectedStatus.includes(res.statusCode)));
+        });
+        req.on('timeout', () => {
+            req.destroy();
+            resolve(false);
+        });
+        req.on('error', () => resolve(false));
+    });
+}
+async function isLocalApiRunning() {
+    return checkLocalHttp('http://127.0.0.1:3001/api/health');
+}
+async function isLocalDashboardRunning() {
+    return checkLocalHttp('http://127.0.0.1:3030', [200, 307, 308]);
+}
 /**
  * Main entry point
  */
@@ -321,6 +343,7 @@ ${bold}COMMANDS${reset}
   ${cyan}doctor${reset}                Diagnose installation issues
   ${cyan}quickstart${reset} [target]    Detect the fastest setup path
   ${cyan}config${reset} [options]      Configure cloud sync and settings
+  ${cyan}cloud${reset} sync --full     Backfill local memories + graph to ShieldCortex Cloud
   ${cyan}license${reset} <action>      Manage licence key (activate, status, deactivate)
   ${cyan}iron-dome${reset} <action>    Manage behaviour protection layer
   ${cyan}audit${reset} [options]       Run a full security audit
@@ -343,6 +366,7 @@ ${bold}EXAMPLES${reset}
   shieldcortex dashboard
   shieldcortex license activate sc_pro_...
   shieldcortex config --cloud-enable --cloud-api-key <key>
+  shieldcortex cloud sync --full
 
 ${bold}DOCS${reset}
   https://shieldcortex.ai/docs
@@ -423,6 +447,12 @@ ${bold}DOCS${reset}
         handleCloudConfig(process.argv.slice(3));
         return;
     }
+    // Handle "cloud" subcommand
+    if (process.argv[2] === 'cloud') {
+        const { handleCloudCommand } = await import('./cloud/cli.js');
+        await handleCloudCommand(process.argv.slice(3));
+        return;
+    }
     // Handle "status" subcommand
     if (process.argv[2] === 'status') {
         const { handleStatusCommand } = await import('./setup/status.js');
@@ -602,7 +632,7 @@ ${bold}DOCS${reset}
     const knownCommands = new Set([
         'doctor', 'quickstart', 'setup', 'install', 'migrate', 'uninstall', 'hook',
         'openclaw', 'clawdbot', 'copilot', 'service', 'config', 'status',
-        'graph', 'license', 'licence', 'audit', 'iron-dome', 'scan',
+        'graph', 'license', 'licence', 'audit', 'iron-dome', 'scan', 'cloud',
         'scan-skill', 'scan-skills', 'dashboard', 'api',
     ]);
     const arg = process.argv[2];
@@ -615,14 +645,36 @@ ${bold}DOCS${reset}
     let dashboardProcess = null;
     if (mode === 'api') {
         // API mode only - for dashboard visualization
+        if (await isLocalApiRunning()) {
+            console.log('ShieldCortex API is already running at http://localhost:3001');
+            return;
+        }
         console.log('Starting ShieldCortex in API mode...');
         startVisualizationServer(dbPath);
     }
     else if (mode === 'dashboard') {
         // Dashboard mode - API + Next.js dashboard
         console.log('Starting ShieldCortex with Dashboard...');
-        startVisualizationServer(dbPath);
-        dashboardProcess = startDashboard();
+        const apiRunning = await isLocalApiRunning();
+        const dashboardRunning = await isLocalDashboardRunning();
+        if (apiRunning && dashboardRunning) {
+            console.log('ShieldCortex dashboard is already running.');
+            console.log('Dashboard: http://localhost:3030');
+            console.log('API:       http://localhost:3001');
+            return;
+        }
+        if (!apiRunning) {
+            startVisualizationServer(dbPath);
+        }
+        else {
+            console.log('Reusing existing local ShieldCortex API on http://localhost:3001');
+        }
+        if (!dashboardRunning) {
+            dashboardProcess = startDashboard();
+        }
+        else {
+            console.log('Dashboard UI is already running on http://localhost:3030');
+        }
         // Kill dashboard child process on any exit (prevents orphans)
         const killDashboard = () => {
             if (dashboardProcess && !dashboardProcess.killed) {
@@ -648,7 +700,12 @@ ${bold}DOCS${reset}
     else if (mode === 'both') {
         // Both modes - API in background, MCP in foreground
         console.log('Starting ShieldCortex in both modes...');
-        startVisualizationServer(dbPath);
+        if (!(await isLocalApiRunning())) {
+            startVisualizationServer(dbPath);
+        }
+        else {
+            console.log('Reusing existing local ShieldCortex API on http://localhost:3001');
+        }
         await startMcpServer(dbPath);
     }
     else {

package/dist/memory/store.js

@@ -4,6 +4,7 @@
  * Core CRUD operations for the memory database.
  * Handles storage, retrieval, and management of memories.
  */
+import { randomUUID } from 'crypto';
 import { getDatabase, isDatabaseInitialized } from '../database/init.js';
 import { DEFAULT_CONFIG, } from './types.js';
 import { calculateSalience, suggestCategory, extractTags, } from './salience.js';
@@ -14,9 +15,11 @@ import { emitMemoryCreated, emitMemoryAccessed, emitMemoryDeleted, emitMemoryUpd
 import { generateEmbedding, cosineSimilarity } from '../embeddings/index.js';
 import { isPaused } from '../api/control.js';
 import { extractFromMemory } from '../graph/extract.js';
-import { processExtractionResult } from '../graph/resolve.js';
+import { processExtractionResult, removeMemoryGraph, replaceMemoryGraph } from '../graph/resolve.js';
 import { runDefencePipeline, storeFragmentationData } from '../defence/index.js';
 import { syncQuarantineToCloud } from '../cloud/quarantine-sync.js';
+import { syncGraphDeleteForMemoryToCloud, syncGraphForMemoryToCloud } from '../cloud/graph-sync.js';
+import { syncMemoryDeleteToCloud, syncMemoryUpsertToCloud } from '../cloud/memory-sync.js';
 import { isFeatureEnabled } from '../license/gate.js';
 import { checkAccess } from '../defence/trust/access-control.js';
 import { scoreSource } from '../defence/trust/source-scorer.js';
@@ -125,6 +128,7 @@ function safeJsonParse(value, fallback) {
 export function rowToMemory(row) {
     return {
         id: row.id,
+        uuid: row.uuid,
         type: row.type,
         category: row.category,
         title: row.title,
@@ -135,6 +139,7 @@ export function rowToMemory(row) {
         accessCount: row.access_count,
         lastAccessed: new Date(row.last_accessed),
         createdAt: new Date(row.created_at),
+        updatedAt: new Date(row.updated_at ?? row.created_at),
         decayedScore: row.decayed_score ?? row.salience,
         metadata: safeJsonParse(row.metadata, {}),
         embedding: row.embedding,
@@ -353,8 +358,8 @@ export function addMemory(input, config = DEFAULT_CONFIG, source) {
         (detectGlobalPattern(input.content, category, tags) ? 'global' : 'project');
     const transferable = input.transferable ?? (scope === 'global' ? 1 : 0);
     const stmt = db.prepare(`
-    INSERT INTO memories (type, category, title, content, project, tags, salience, metadata, scope, transferable)
-    VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+    INSERT INTO memories (uuid, type, category, title, content, project, tags, salience, metadata, scope, transferable, updated_at)
+    VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, CURRENT_TIMESTAMP)
   `);
     // Anti-bloat: Truncate content if too large
     const truncationResult = truncateContent(input.content);
@@ -366,7 +371,8 @@ export function addMemory(input, config = DEFAULT_CONFIG, source) {
     };
     // Transaction: INSERT + defence UPDATE must be atomic to prevent wrong trust scores
     const insertedId = db.transaction(() => {
-        const result = stmt.run(type, category, input.title, truncationResult.content, input.project || null, JSON.stringify(tags), salience, JSON.stringify(input.metadata || {}), scope, transferable);
+        const memoryUuid = randomUUID();
+        const result = stmt.run(memoryUuid, type, category, input.title, truncationResult.content, input.project || null, JSON.stringify(tags), salience, JSON.stringify(input.metadata || {}), scope, transferable);
         if (defenceResult) {
             db.prepare(`UPDATE memories SET trust_score = ?, sensitivity_level = ?, source = ? WHERE id = ?`)
                 .run(defenceResult.trust.score, defenceResult.sensitivity.level, `${source.type}:${source.identifier}`, result.lastInsertRowid);
@@ -380,6 +386,9 @@ export function addMemory(input, config = DEFAULT_CONFIG, source) {
     persistEvent('memory_created', { memory });
     // Webhook notification (fire-and-forget)
     dispatchWebhook('memory_created', { id: memory.id, title: memory.title, category: memory.category });
+    if (isFeatureEnabled('cloud_sync')) {
+        syncMemoryUpsertToCloud(memory);
+    }
     // ORGANIC FEATURE: Auto-link to related memories
     // This builds the knowledge graph automatically as memories are created
     try {
@@ -397,6 +406,9 @@ export function addMemory(input, config = DEFAULT_CONFIG, source) {
         const extraction = extractFromMemory(input.title, truncationResult.content, category);
         if (extraction.entities.length > 0) {
             processExtractionResult(extraction, memory.id);
+            if (isFeatureEnabled('cloud_sync')) {
+                syncGraphForMemoryToCloud(memory.id);
+            }
         }
     }
     catch (e) {
@@ -532,12 +544,28 @@ export function updateMemory(id, updates) {
     if (fields.length === 0)
         return existing;
     values.push(id);
-    db.prepare(`UPDATE memories SET ${fields.join(', ')} WHERE id = ?`).run(...values);
+    db.prepare(`UPDATE memories SET ${fields.join(', ')}, updated_at = CURRENT_TIMESTAMP WHERE id = ?`).run(...values);
     const updatedMemory = getMemoryById(id);
+    const shouldRefreshGraph = updates.title !== undefined ||
+        updates.content !== undefined ||
+        updates.category !== undefined;
+    if (shouldRefreshGraph) {
+        try {
+            const extraction = extractFromMemory(updatedMemory.title, updatedMemory.content, updatedMemory.category);
+            replaceMemoryGraph(updatedMemory.id, extraction);
+        }
+        catch (e) {
+            console.error('[shieldcortex] Entity extraction refresh failed:', e);
+        }
+    }
     // Emit event for real-time dashboard (in-process)
     emitMemoryUpdated(updatedMemory);
     // Persist event for cross-process IPC (MCP → Dashboard)
     persistEvent('memory_updated', { memory: updatedMemory });
+    if (isFeatureEnabled('cloud_sync')) {
+        syncMemoryUpsertToCloud(updatedMemory);
+        syncGraphForMemoryToCloud(updatedMemory.id);
+    }
     return updatedMemory;
 }
 /**
@@ -558,9 +586,21 @@ export function deleteMemory(id, source) {
     }
     // Get memory before deletion for event
     const memory = getMemoryById(id);
+    if (memory) {
+        try {
+            removeMemoryGraph(id);
+        }
+        catch (e) {
+            console.error('[shieldcortex] Graph cleanup before delete failed:', e);
+        }
+    }
     const result = db.prepare('DELETE FROM memories WHERE id = ?').run(id);
     // Emit event for real-time dashboard (in-process)
     if (result.changes > 0 && memory) {
+        if (isFeatureEnabled('cloud_sync')) {
+            syncMemoryDeleteToCloud(memory);
+            syncGraphDeleteForMemoryToCloud(memory);
+        }
         emitMemoryDeleted(id, memory.title);
         // Persist event for cross-process IPC (MCP → Dashboard)
         persistEvent('memory_deleted', { memoryId: id, title: memory.title });

package/dist/memory/types.d.ts

@@ -5,6 +5,7 @@ export type MemoryType = 'short_term' | 'long_term' | 'episodic';
 export type MemoryCategory = 'architecture' | 'pattern' | 'preference' | 'error' | 'context' | 'learning' | 'todo' | 'note' | 'relationship' | 'custom';
 export interface Memory {
     id: number;
+    uuid: string;
     type: MemoryType;
     category: MemoryCategory;
     title: string;
@@ -15,6 +16,7 @@ export interface Memory {
     accessCount: number;
     lastAccessed: Date;
     createdAt: Date;
+    updatedAt: Date;
     decayedScore: number;
     metadata: Record<string, unknown>;
     embedding?: Buffer;

package/dist/service/install.d.ts

@@ -7,6 +7,7 @@
  *  - Windows: VBS script in Startup folder
  */
 export declare function installService(): Promise<void>;
+export declare function repairService(): Promise<void>;
 export declare function uninstallService(options?: {
     cleanLogs?: boolean;
 }): Promise<void>;

package/dist/service/install.js

@@ -31,6 +31,33 @@ function getServiceConfig() {
         logsDir,
     };
 }
+function inspectServiceEntryPoint(platform, servicePath) {
+    if (!fs.existsSync(servicePath)) {
+        return { entryPoint: null, stale: false };
+    }
+    try {
+        const content = fs.readFileSync(servicePath, 'utf-8');
+        let entryPoint = null;
+        if (platform === 'macos') {
+            const matches = [...content.matchAll(/<string>([^<]+)<\/string>/g)].map((match) => match[1]);
+            entryPoint = matches.find((value) => value.endsWith('index.js')) ?? null;
+        }
+        else if (platform === 'linux') {
+            const match = content.match(/ExecStart=\S+\s+(\S+index\.js)/);
+            entryPoint = match?.[1] ?? null;
+        }
+        else {
+            const match = content.match(/Run\s+\"\"[^\"]+\"\"\s+\"\"([^\"]+index\.js)\"\"/);
+            entryPoint = match?.[1] ?? null;
+        }
+        const currentEntryPoint = getServiceConfig().entryPoint;
+        const stale = !!entryPoint && (entryPoint.includes('/.npm/_npx/') || entryPoint !== currentEntryPoint);
+        return { entryPoint, stale };
+    }
+    catch {
+        return { entryPoint: null, stale: false };
+    }
+}
 function getServicePath(platform) {
     switch (platform) {
         case 'macos':
@@ -91,6 +118,10 @@ export async function installService() {
     console.log(`  API:       http://localhost:3001`);
     console.log(`  Dashboard: http://localhost:3030`);
 }
+export async function repairService() {
+    await uninstallService();
+    await installService();
+}
 function cleanLogsDirectory() {
     const logsDir = path.join(os.homedir(), '.shieldcortex', 'logs');
     if (fs.existsSync(logsDir)) {
@@ -131,9 +162,14 @@ export async function serviceStatus() {
     const platform = detectPlatform();
     const servicePath = getServicePath(platform);
     const installed = fs.existsSync(servicePath);
+    const inspection = inspectServiceEntryPoint(platform, servicePath);
     console.log(`Platform:  ${platform}`);
     console.log(`Installed: ${installed ? 'yes' : 'no'}`);
     console.log(`Path:      ${servicePath}`);
+    if (inspection.entryPoint) {
+        console.log(`Entry:     ${inspection.entryPoint}`);
+        console.log(`Healthy:   ${inspection.stale ? 'no (repair recommended)' : 'yes'}`);
+    }
     if (!installed)
         return;
     // Check if running
@@ -158,12 +194,18 @@ export async function serviceStatus() {
     catch {
         console.log('Running:   no');
     }
+    if (inspection.stale) {
+        console.log('Repair:    shieldcortex service repair');
+    }
 }
 export async function handleServiceCommand(subcommand) {
     switch (subcommand) {
         case 'install':
             await installService();
             break;
+        case 'repair':
+            await repairService();
+            break;
         case 'uninstall':
             await uninstallService({ cleanLogs: process.argv.includes('--clean-logs') });
             break;
@@ -171,7 +213,7 @@ export async function handleServiceCommand(subcommand) {
             await serviceStatus();
             break;
         default:
-            console.log('Usage: shieldcortex service <install|uninstall|status>');
+            console.log('Usage: shieldcortex service <install|repair|uninstall|status>');
             process.exit(1);
     }
 }

package/dist/tools/forget.d.ts

@@ -32,8 +32,8 @@ export declare const forgetSchema: z.ZodObject<{
     } | undefined;
     project?: string | undefined;
     id?: number | undefined;
-    query?: string | undefined;
     category?: "architecture" | "pattern" | "preference" | "error" | "context" | "learning" | "todo" | "note" | "relationship" | "custom" | undefined;
+    query?: string | undefined;
     olderThan?: number | undefined;
     belowSalience?: number | undefined;
 }, {
@@ -43,8 +43,8 @@ export declare const forgetSchema: z.ZodObject<{
     } | undefined;
     project?: string | undefined;
     id?: number | undefined;
-    query?: string | undefined;
     category?: "architecture" | "pattern" | "preference" | "error" | "context" | "learning" | "todo" | "note" | "relationship" | "custom" | undefined;
+    query?: string | undefined;
     olderThan?: number | undefined;
     belowSalience?: number | undefined;
     dryRun?: boolean | undefined;

package/dist/tools/recall.d.ts

@@ -37,9 +37,9 @@ export declare const recallSchema: z.ZodObject<{
     } | undefined;
     project?: string | undefined;
     type?: "short_term" | "long_term" | "episodic" | undefined;
-    query?: string | undefined;
     category?: "architecture" | "pattern" | "preference" | "error" | "context" | "learning" | "todo" | "note" | "relationship" | "custom" | undefined;
     tags?: string[] | undefined;
+    query?: string | undefined;
 }, {
     source?: {
         type: "api" | "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "tool_response";
@@ -48,10 +48,10 @@ export declare const recallSchema: z.ZodObject<{
     project?: string | undefined;
     mode?: "search" | "important" | "recent" | undefined;
     type?: "short_term" | "long_term" | "episodic" | undefined;
-    limit?: number | undefined;
-    query?: string | undefined;
     category?: "architecture" | "pattern" | "preference" | "error" | "context" | "learning" | "todo" | "note" | "relationship" | "custom" | undefined;
     tags?: string[] | undefined;
+    limit?: number | undefined;
+    query?: string | undefined;
     includeDecayed?: boolean | undefined;
     includeGlobal?: boolean | undefined;
 }>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shieldcortex",
-  "version": "3.0.4",
+  "version": "3.1.0",
   "description": "Persistent brain for AI agents. Knowledge graphs, memory decay, contradiction detection, Iron Dome behaviour protection — plus the only defence pipeline that stops memory poisoning. Works with Claude Code, OpenClaw, LangChain, and any MCP agent.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",