shieldcortex 4.2.5 → 4.4.0

package/dist/xray/watch.d.ts

@@ -0,0 +1,12 @@
+/**
+ * X-Ray Watch Mode
+ *
+ * Watches a directory for file changes and incrementally re-scans
+ * only the changed files, printing new findings as they appear.
+ */
+/**
+ * Watch a directory for changes and incrementally scan changed files.
+ */
+export declare function watchDirectory(dirPath: string, deep: boolean, options?: {
+    json?: boolean;
+}): Promise<void>;

package/dist/xray/watch.js

@@ -0,0 +1,125 @@
+/**
+ * X-Ray Watch Mode
+ *
+ * Watches a directory for file changes and incrementally re-scans
+ * only the changed files, printing new findings as they appear.
+ */
+import fs from 'fs';
+import path from 'path';
+import crypto from 'crypto';
+import { scanFile } from './file-scanner.js';
+import { calculateTrustScore } from './trust-score.js';
+// ── Constants ───────────────────────────────────────────────
+const DEBOUNCE_MS = 500;
+const MAX_FILE_SIZE = 10 * 1024 * 1024;
+const IGNORE_DIRS = new Set(['node_modules', '.git', 'dist', 'build']);
+// ── Helpers ─────────────────────────────────────────────────
+function shouldIgnore(filePath) {
+    const parts = filePath.split(path.sep);
+    return parts.some(p => IGNORE_DIRS.has(p));
+}
+function findingHash(f) {
+    const key = `${f.file || ''}|${f.category}|${f.title}`;
+    return crypto.createHash('sha256').update(key).digest('hex');
+}
+// ── ANSI colours ────────────────────────────────────────────
+const c = {
+    reset: '\x1b[0m',
+    bold: '\x1b[1m',
+    dim: '\x1b[2m',
+    red: '\x1b[31m',
+    green: '\x1b[32m',
+    yellow: '\x1b[33m',
+    cyan: '\x1b[36m',
+    brightRed: '\x1b[91m',
+};
+function severityColour(severity) {
+    switch (severity) {
+        case 'critical': return c.red;
+        case 'high': return c.brightRed;
+        case 'medium': return c.yellow;
+        case 'low': return c.cyan;
+        default: return c.dim;
+    }
+}
+// ── Public API ──────────────────────────────────────────────
+/**
+ * Watch a directory for changes and incrementally scan changed files.
+ */
+export async function watchDirectory(dirPath, deep, options) {
+    const resolved = path.resolve(dirPath);
+    const seenHashes = new Set();
+    const json = options?.json ?? false;
+    // Debounce map: filePath → timeout
+    const pending = new Map();
+    console.log(`${c.cyan}${c.bold}Watching ${resolved} for changes... (Ctrl+C to stop)${c.reset}`);
+    async function handleChange(filePath) {
+        const abs = path.resolve(resolved, filePath);
+        if (shouldIgnore(abs))
+            return;
+        // Check exists & size
+        let stat;
+        try {
+            stat = fs.statSync(abs);
+        }
+        catch {
+            return;
+        }
+        if (!stat.isFile() || stat.size > MAX_FILE_SIZE)
+            return;
+        const findings = await scanFile(abs, deep);
+        const newFindings = [];
+        for (const f of findings) {
+            const h = findingHash(f);
+            if (!seenHashes.has(h)) {
+                seenHashes.add(h);
+                newFindings.push(f);
+            }
+        }
+        if (newFindings.length === 0)
+            return;
+        if (json) {
+            const { score, riskLevel } = calculateTrustScore(newFindings);
+            console.log(JSON.stringify({
+                file: abs,
+                trustScore: score,
+                riskLevel,
+                findings: newFindings,
+                detectedAt: new Date().toISOString(),
+            }));
+        }
+        else {
+            const { score, riskLevel } = calculateTrustScore(newFindings);
+            console.log('');
+            console.log(`${c.bold}[${new Date().toLocaleTimeString()}]${c.reset} ${c.cyan}${abs}${c.reset}  (score: ${score}, risk: ${riskLevel})`);
+            for (const f of newFindings) {
+                const sc = severityColour(f.severity);
+                console.log(`  ${sc}[${f.severity.toUpperCase()}]${c.reset} [${f.category}] ${f.title}`);
+                if (f.evidence) {
+                    console.log(`    ${c.dim}${f.evidence}${c.reset}`);
+                }
+            }
+        }
+    }
+    const watcher = fs.watch(resolved, { recursive: true }, (_event, filename) => {
+        if (!filename)
+            return;
+        const filePath = filename.toString();
+        // Debounce
+        const existing = pending.get(filePath);
+        if (existing)
+            clearTimeout(existing);
+        pending.set(filePath, setTimeout(() => {
+            pending.delete(filePath);
+            handleChange(filePath).catch(() => { });
+        }, DEBOUNCE_MS));
+    });
+    // Keep the process alive until Ctrl+C
+    return new Promise((resolve) => {
+        process.on('SIGINT', () => {
+            watcher.close();
+            console.log(`\n${c.dim}Watch stopped.${c.reset}`);
+            resolve();
+        });
+    });
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shieldcortex",
-  "version": "4.2.5",
+  "version": "4.4.0",
   "description": "Trustworthy memory and security for AI agents. Recall debugging, review queue, OpenClaw session capture, and memory poisoning defence for Claude Code, Codex, OpenClaw, LangChain, and MCP agents.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/plugins/openclaw/dist/interceptor.js

@@ -141,6 +141,49 @@ function writeAuditEntry(entry) {
         // Best-effort — never block on audit failure
     }
 }
+// --- X-Ray Inline Guard ---
+// Lightweight inline version of xrayMemoryContent for the plugin build boundary.
+// Detects AI directive injection patterns in memory content.
+const XRAY_AI_DIRECTIVE_PATTERNS = [
+    /ignore\s+(all\s+)?(previous|prior|above)\s+(instructions?|prompts?|context)/i,
+    /disregard\s+(all\s+)?(previous|prior|above)\s+(instructions?|rules?)/i,
+    /override\s+(previous|prior|all)\s+(instructions?|rules?|constraints?)/i,
+    /you\s+are\s+now\s+(?:in\s+)?(?:developer|god|admin|root|unrestricted)\s+mode/i,
+    /enter\s+(?:developer|god|admin|DAN|jailbreak)\s+mode/i,
+    /(?:system|hidden|secret)\s*(?:prompt|instruction|directive)\s*:/i,
+    /\[SYSTEM\]\s*:/i,
+    /\[INST\]/i,
+    /<\|(?:system|user|assistant|im_start|im_end)\|>/i,
+    /(?:decode|execute|follow)\s+(?:the\s+)?hidden\s+(?:instructions?|payload|message)/i,
+    /(?:hidden|embedded|encoded)\s+(?:instructions?|directive|command)\s+(?:in|within|inside)/i,
+];
+const XRAY_FILENAME_PATTERNS = [
+    /ignore_previous/i, /decode_hidden/i, /execute_instructions/i,
+    /override_previous/i, /developer_mode/i, /system_prompt/i,
+    /jailbreak/i, /\[SYSTEM\]/i, /\[INST\]/i,
+];
+function xrayMemoryGuard(content, title) {
+    const findings = [];
+    const text = content.length > 50000 ? content.slice(0, 50000) : content;
+    for (const pattern of XRAY_AI_DIRECTIVE_PATTERNS) {
+        if (pattern.test(text)) {
+            findings.push({ category: 'ai-directive', title: 'AI directive injection detected', severity: 'critical' });
+            break;
+        }
+    }
+    if (title) {
+        for (const pattern of XRAY_FILENAME_PATTERNS) {
+            if (pattern.test(title)) {
+                findings.push({ category: 'ai-directive', title: 'AI directive in title', severity: 'critical' });
+                break;
+            }
+        }
+    }
+    // Score: 100 - 25 per critical finding
+    const score = Math.max(0, 100 - findings.length * 25);
+    const riskLevel = score >= 80 ? 'SAFE' : score >= 60 ? 'LOW' : score >= 40 ? 'MEDIUM' : score >= 20 ? 'HIGH' : 'CRITICAL';
+    return { allowed: score >= 40, findings, riskLevel };
+}
 export function createInterceptor(config, pipeline, options) {
     const denyCache = new DenyCache();
     const rateLimiter = new RateLimiter(options?.maxPromptsPerMinute ?? 5);
@@ -157,6 +200,18 @@ export function createInterceptor(config, pipeline, options) {
         const fullContent = [title, content].filter(Boolean).join(' ');
         if (!fullContent.trim())
             return;
+        // X-Ray content scan — fast, synchronous, no I/O
+        const xrayResult = xrayMemoryGuard(content, title || undefined);
+        if (!xrayResult.allowed) {
+            const xrayEntry = {
+                type: 'intercept', tool: context.toolName, severity: 'critical',
+                firewallResult: 'BLOCK', threats: xrayResult.findings.map(f => f.category),
+                anomalyScore: 1, action: 'auto_deny', outcome: 'auto_denied',
+                preview: fullContent.slice(0, 200), ts: new Date().toISOString(),
+            };
+            emitAudit(xrayEntry);
+            throw new Error(`ShieldCortex: tool call blocked by X-Ray memory guard (risk: ${xrayResult.riskLevel}, findings: ${xrayResult.findings.length})`);
+        }
         let severity;
         let firewallResult;
         let threats;

package/dashboard/.next/standalone/dashboard/.next/BUILD_ID

@@ -1 +0,0 @@
-ThmMwi8oVrtIZJ34xGzKI

package/dashboard/.next/standalone/dashboard/.next/app-path-routes-manifest.json

@@ -1,5 +0,0 @@
-{
-  "/_global-error/page": "/_global-error",
-  "/_not-found/page": "/_not-found",
-  "/page": "/"
-}

package/dashboard/.next/standalone/dashboard/.next/build-manifest.json

@@ -1,19 +0,0 @@
-{
-  "pages": {
-    "/_app": []
-  },
-  "devFiles": [],
-  "polyfillFiles": [
-    "static/chunks/a6dad97d9634a72d.js"
-  ],
-  "lowPriorityFiles": [
-    "static/ThmMwi8oVrtIZJ34xGzKI/_ssgManifest.js",
-    "static/ThmMwi8oVrtIZJ34xGzKI/_buildManifest.js"
-  ],
-  "rootMainFiles": [
-    "static/chunks/6ba7a5c1a80a6791.js",
-    "static/chunks/7d08316952ccdcef.js",
-    "static/chunks/d3d8171bf50ef87e.js",
-    "static/chunks/turbopack-c2d84e7d37269ac1.js"
-  ]
-}

package/dashboard/.next/standalone/dashboard/.next/package.json

@@ -1 +0,0 @@
-{"type": "commonjs"}

package/dashboard/.next/standalone/dashboard/.next/prerender-manifest.json

@@ -1,85 +0,0 @@
-{
-  "version": 4,
-  "routes": {
-    "/_global-error": {
-      "experimentalBypassFor": [
-        {
-          "type": "header",
-          "key": "next-action"
-        },
-        {
-          "type": "header",
-          "key": "content-type",
-          "value": "multipart/form-data;.*"
-        }
-      ],
-      "initialRevalidateSeconds": false,
-      "srcRoute": "/_global-error",
-      "dataRoute": "/_global-error.rsc",
-      "allowHeader": [
-        "host",
-        "x-matched-path",
-        "x-prerender-revalidate",
-        "x-prerender-revalidate-if-generated",
-        "x-next-revalidated-tags",
-        "x-next-revalidate-tag-token"
-      ]
-    },
-    "/_not-found": {
-      "initialStatus": 404,
-      "experimentalBypassFor": [
-        {
-          "type": "header",
-          "key": "next-action"
-        },
-        {
-          "type": "header",
-          "key": "content-type",
-          "value": "multipart/form-data;.*"
-        }
-      ],
-      "initialRevalidateSeconds": false,
-      "srcRoute": "/_not-found",
-      "dataRoute": "/_not-found.rsc",
-      "allowHeader": [
-        "host",
-        "x-matched-path",
-        "x-prerender-revalidate",
-        "x-prerender-revalidate-if-generated",
-        "x-next-revalidated-tags",
-        "x-next-revalidate-tag-token"
-      ]
-    },
-    "/": {
-      "experimentalBypassFor": [
-        {
-          "type": "header",
-          "key": "next-action"
-        },
-        {
-          "type": "header",
-          "key": "content-type",
-          "value": "multipart/form-data;.*"
-        }
-      ],
-      "initialRevalidateSeconds": false,
-      "srcRoute": "/",
-      "dataRoute": "/index.rsc",
-      "allowHeader": [
-        "host",
-        "x-matched-path",
-        "x-prerender-revalidate",
-        "x-prerender-revalidate-if-generated",
-        "x-next-revalidated-tags",
-        "x-next-revalidate-tag-token"
-      ]
-    }
-  },
-  "dynamicRoutes": {},
-  "notFoundRoutes": [],
-  "preview": {
-    "previewModeId": "52ddeee0b79193a9a5ee5820829058a4",
-    "previewModeSigningKey": "c9d0af4bff77ea21beaf6079499ddd3a1c5fff3164dbc01c31f91cd470731289",
-    "previewModeEncryptionKey": "29550cefdd7c7cdcede128214f5ceb3b5840537dc2f3c546321d31a0582dff48"
-  }
-}

package/dashboard/.next/standalone/dashboard/.next/required-server-files.json

@@ -1,320 +0,0 @@
-{
-  "version": 1,
-  "config": {
-    "env": {},
-    "webpack": null,
-    "typescript": {
-      "ignoreBuildErrors": false
-    },
-    "typedRoutes": false,
-    "distDir": ".next",
-    "cleanDistDir": true,
-    "assetPrefix": "",
-    "cacheMaxMemorySize": 52428800,
-    "configOrigin": "next.config.ts",
-    "useFileSystemPublicRoutes": true,
-    "generateEtags": true,
-    "pageExtensions": [
-      "tsx",
-      "ts",
-      "jsx",
-      "js"
-    ],
-    "poweredByHeader": true,
-    "compress": true,
-    "images": {
-      "deviceSizes": [
-        640,
-        750,
-        828,
-        1080,
-        1200,
-        1920,
-        2048,
-        3840
-      ],
-      "imageSizes": [
-        32,
-        48,
-        64,
-        96,
-        128,
-        256,
-        384
-      ],
-      "path": "/_next/image",
-      "loader": "default",
-      "loaderFile": "",
-      "domains": [],
-      "disableStaticImages": false,
-      "minimumCacheTTL": 14400,
-      "formats": [
-        "image/webp"
-      ],
-      "maximumRedirects": 3,
-      "dangerouslyAllowLocalIP": false,
-      "dangerouslyAllowSVG": false,
-      "contentSecurityPolicy": "script-src 'none'; frame-src 'none'; sandbox;",
-      "contentDispositionType": "attachment",
-      "localPatterns": [
-        {
-          "pathname": "**",
-          "search": ""
-        }
-      ],
-      "remotePatterns": [],
-      "qualities": [
-        75
-      ],
-      "unoptimized": false
-    },
-    "devIndicators": {
-      "position": "bottom-left"
-    },
-    "onDemandEntries": {
-      "maxInactiveAge": 60000,
-      "pagesBufferLength": 5
-    },
-    "basePath": "",
-    "sassOptions": {},
-    "trailingSlash": false,
-    "i18n": null,
-    "productionBrowserSourceMaps": false,
-    "excludeDefaultMomentLocales": true,
-    "reactProductionProfiling": false,
-    "reactStrictMode": null,
-    "reactMaxHeadersLength": 6000,
-    "httpAgentOptions": {
-      "keepAlive": true
-    },
-    "logging": {},
-    "compiler": {},
-    "expireTime": 31536000,
-    "staticPageGenerationTimeout": 60,
-    "output": "standalone",
-    "modularizeImports": {
-      "@mui/icons-material": {
-        "transform": "@mui/icons-material/{{member}}"
-      },
-      "lodash": {
-        "transform": "lodash/{{member}}"
-      }
-    },
-    "outputFileTracingRoot": "/home/runner/work/ShieldCortex/ShieldCortex",
-    "cacheComponents": false,
-    "cacheLife": {
-      "default": {
-        "stale": 300,
-        "revalidate": 900,
-        "expire": 4294967294
-      },
-      "seconds": {
-        "stale": 30,
-        "revalidate": 1,
-        "expire": 60
-      },
-      "minutes": {
-        "stale": 300,
-        "revalidate": 60,
-        "expire": 3600
-      },
-      "hours": {
-        "stale": 300,
-        "revalidate": 3600,
-        "expire": 86400
-      },
-      "days": {
-        "stale": 300,
-        "revalidate": 86400,
-        "expire": 604800
-      },
-      "weeks": {
-        "stale": 300,
-        "revalidate": 604800,
-        "expire": 2592000
-      },
-      "max": {
-        "stale": 300,
-        "revalidate": 2592000,
-        "expire": 31536000
-      }
-    },
-    "cacheHandlers": {},
-    "experimental": {
-      "useSkewCookie": false,
-      "cssChunking": true,
-      "multiZoneDraftMode": false,
-      "appNavFailHandling": false,
-      "prerenderEarlyExit": true,
-      "serverMinification": true,
-      "linkNoTouchStart": false,
-      "caseSensitiveRoutes": false,
-      "dynamicOnHover": false,
-      "preloadEntriesOnStart": true,
-      "clientRouterFilter": true,
-      "clientRouterFilterRedirects": false,
-      "fetchCacheKeyPrefix": "",
-      "proxyPrefetch": "flexible",
-      "optimisticClientCache": true,
-      "manualClientBasePath": false,
-      "cpus": 3,
-      "memoryBasedWorkersCount": false,
-      "imgOptConcurrency": null,
-      "imgOptTimeoutInSeconds": 7,
-      "imgOptMaxInputPixels": 268402689,
-      "imgOptSequentialRead": null,
-      "imgOptSkipMetadata": null,
-      "isrFlushToDisk": true,
-      "workerThreads": false,
-      "optimizeCss": false,
-      "nextScriptWorkers": false,
-      "scrollRestoration": false,
-      "externalDir": false,
-      "disableOptimizedLoading": false,
-      "gzipSize": true,
-      "craCompat": false,
-      "esmExternals": true,
-      "fullySpecified": false,
-      "swcTraceProfiling": false,
-      "forceSwcTransforms": false,
-      "largePageDataBytes": 128000,
-      "typedEnv": false,
-      "parallelServerCompiles": false,
-      "parallelServerBuildTraces": false,
-      "ppr": false,
-      "authInterrupts": false,
-      "webpackMemoryOptimizations": false,
-      "optimizeServerReact": true,
-      "viewTransition": false,
-      "removeUncaughtErrorAndRejectionListeners": false,
-      "validateRSCRequestHeaders": false,
-      "staleTimes": {
-        "dynamic": 0,
-        "static": 300
-      },
-      "reactDebugChannel": false,
-      "serverComponentsHmrCache": true,
-      "staticGenerationMaxConcurrency": 8,
-      "staticGenerationMinPagesPerWorker": 25,
-      "transitionIndicator": false,
-      "inlineCss": false,
-      "useCache": false,
-      "globalNotFound": false,
-      "browserDebugInfoInTerminal": false,
-      "lockDistDir": true,
-      "isolatedDevBuild": true,
-      "proxyClientMaxBodySize": 10485760,
-      "hideLogsAfterAbort": false,
-      "mcpServer": true,
-      "turbopackFileSystemCacheForDev": true,
-      "turbopackFileSystemCacheForBuild": false,
-      "turbopackInferModuleSideEffects": false,
-      "optimizePackageImports": [
-        "lucide-react",
-        "date-fns",
-        "lodash-es",
-        "ramda",
-        "antd",
-        "react-bootstrap",
-        "ahooks",
-        "@ant-design/icons",
-        "@headlessui/react",
-        "@headlessui-float/react",
-        "@heroicons/react/20/solid",
-        "@heroicons/react/24/solid",
-        "@heroicons/react/24/outline",
-        "@visx/visx",
-        "@tremor/react",
-        "rxjs",
-        "@mui/material",
-        "@mui/icons-material",
-        "recharts",
-        "react-use",
-        "effect",
-        "@effect/schema",
-        "@effect/platform",
-        "@effect/platform-node",
-        "@effect/platform-browser",
-        "@effect/platform-bun",
-        "@effect/sql",
-        "@effect/sql-mssql",
-        "@effect/sql-mysql2",
-        "@effect/sql-pg",
-        "@effect/sql-sqlite-node",
-        "@effect/sql-sqlite-bun",
-        "@effect/sql-sqlite-wasm",
-        "@effect/sql-sqlite-react-native",
-        "@effect/rpc",
-        "@effect/rpc-http",
-        "@effect/typeclass",
-        "@effect/experimental",
-        "@effect/opentelemetry",
-        "@material-ui/core",
-        "@material-ui/icons",
-        "@tabler/icons-react",
-        "mui-core",
-        "react-icons/ai",
-        "react-icons/bi",
-        "react-icons/bs",
-        "react-icons/cg",
-        "react-icons/ci",
-        "react-icons/di",
-        "react-icons/fa",
-        "react-icons/fa6",
-        "react-icons/fc",
-        "react-icons/fi",
-        "react-icons/gi",
-        "react-icons/go",
-        "react-icons/gr",
-        "react-icons/hi",
-        "react-icons/hi2",
-        "react-icons/im",
-        "react-icons/io",
-        "react-icons/io5",
-        "react-icons/lia",
-        "react-icons/lib",
-        "react-icons/lu",
-        "react-icons/md",
-        "react-icons/pi",
-        "react-icons/ri",
-        "react-icons/rx",
-        "react-icons/si",
-        "react-icons/sl",
-        "react-icons/tb",
-        "react-icons/tfi",
-        "react-icons/ti",
-        "react-icons/vsc",
-        "react-icons/wi"
-      ],
-      "trustHostHeader": false,
-      "isExperimentalCompile": false
-    },
-    "htmlLimitedBots": "[\\w-]+-Google|Google-[\\w-]+|Chrome-Lighthouse|Slurp|DuckDuckBot|baiduspider|yandex|sogou|bitlybot|tumblr|vkShare|quora link preview|redditbot|ia_archiver|Bingbot|BingPreview|applebot|facebookexternalhit|facebookcatalog|Twitterbot|LinkedInBot|Slackbot|Discordbot|WhatsApp|SkypeUriPreview|Yeti|googleweblight",
-    "bundlePagesRouterDependencies": false,
-    "configFileName": "next.config.ts",
-    "turbopack": {
-      "root": "/home/runner/work/ShieldCortex/ShieldCortex"
-    },
-    "distDirRoot": ".next"
-  },
-  "appDir": "/home/runner/work/ShieldCortex/ShieldCortex/dashboard",
-  "relativeAppDir": "dashboard",
-  "files": [
-    ".next/routes-manifest.json",
-    ".next/server/pages-manifest.json",
-    ".next/build-manifest.json",
-    ".next/prerender-manifest.json",
-    ".next/server/functions-config-manifest.json",
-    ".next/server/middleware-manifest.json",
-    ".next/server/middleware-build-manifest.js",
-    ".next/server/app-paths-manifest.json",
-    ".next/app-path-routes-manifest.json",
-    ".next/server/server-reference-manifest.js",
-    ".next/server/server-reference-manifest.json",
-    ".next/BUILD_ID",
-    ".next/server/next-font-manifest.js",
-    ".next/server/next-font-manifest.json",
-    ".next/required-server-files.json"
-  ],
-  "ignore": []
-}