shieldcortex 3.4.9 → 3.4.11

package/dist/database/init.d.ts

@@ -4,9 +4,11 @@
 import Database from 'better-sqlite3';
 declare function isLikelyFtsIntegrityIssue(integrityResult: string): boolean;
 declare function attemptFtsRecovery(database: Database.Database): boolean;
+declare function verifyOnDiskIntegrity(dbPath: string): string;
 export declare const __databaseTestUtils: {
     isLikelyFtsIntegrityIssue: typeof isLikelyFtsIntegrityIssue;
     attemptFtsRecovery: typeof attemptFtsRecovery;
+    verifyOnDiskIntegrity: typeof verifyOnDiskIntegrity;
 };
 /**
  * Initialize the database connection

package/dist/database/init.js

@@ -163,9 +163,31 @@ function attemptFtsRecovery(database) {
         return false;
     }
 }
+function verifyOnDiskIntegrity(dbPath) {
+    let verificationDb = null;
+    try {
+        verificationDb = new Database(dbPath, {
+            readonly: true,
+            fileMustExist: true,
+        });
+        return runIntegrityCheck(verificationDb);
+    }
+    catch (error) {
+        return `fresh integrity check threw: ${error}`;
+    }
+    finally {
+        try {
+            verificationDb?.close();
+        }
+        catch {
+            // Best-effort close for verification handles.
+        }
+    }
+}
 export const __databaseTestUtils = {
     isLikelyFtsIntegrityIssue,
     attemptFtsRecovery,
+    verifyOnDiskIntegrity,
 };
 /**
  * Initialize the database connection
@@ -206,21 +228,30 @@ export function initDatabase(dbPath) {
                 console.warn('[database] Preserved memory rows by repairing the FTS index in place.');
             }
             else {
-                // Close the corrupt connection before attempting recovery
-                database.close();
-                // Attempt dump/reimport recovery
-                const recovered = attemptDumpRecovery(expandedPath);
-                if (recovered) {
-                    database = recovered;
+                const freshIntegrityResult = verifyOnDiskIntegrity(expandedPath);
+                if (freshIntegrityResult === 'ok') {
+                    console.warn('[database] Integrity failure was transient. Reopening the on-disk database without destructive recovery.');
+                    database.close();
+                    database = new Database(expandedPath);
                 }
                 else {
-                    // Recovery failed — backup and create fresh
-                    if (existsSync(expandedPath)) {
-                        const backupPath = backupCorruptDatabase(expandedPath);
-                        console.error(`[database] Recovery failed. Backed up corrupt file to: ${backupPath}`);
+                    console.warn(`[database] Fresh integrity check also failed: ${freshIntegrityResult}`);
+                    // Close the corrupt connection before attempting recovery
+                    database.close();
+                    // Attempt dump/reimport recovery
+                    const recovered = attemptDumpRecovery(expandedPath);
+                    if (recovered) {
+                        database = recovered;
+                    }
+                    else {
+                        // Recovery failed — backup and create fresh
+                        if (existsSync(expandedPath)) {
+                            const backupPath = backupCorruptDatabase(expandedPath);
+                            console.error(`[database] Recovery failed. Backed up corrupt file to: ${backupPath}`);
+                        }
+                        console.error('[database] Creating fresh database...');
+                        database = new Database(expandedPath);
                     }
-                    console.error('[database] Creating fresh database...');
-                    database = new Database(expandedPath);
                 }
             }
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shieldcortex",
-  "version": "3.4.9",
+  "version": "3.4.11",
   "description": "Trustworthy memory and security for AI agents. Recall debugging, review queue, OpenClaw session capture, and memory poisoning defence for Claude Code, Codex, OpenClaw, LangChain, and MCP agents.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",