npm - shieldcortex - Versions diffs - 4.27.2 → 4.27.3 - Mend

shieldcortex 4.27.2 → 4.27.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (237) hide show

package/dashboard/.next/standalone/dashboard/.next/server/pages/404.html CHANGED Viewed

@@ -1,4 +1,4 @@
-<!DOCTYPE html><!--x2AmqK_Ci5s40_dIsKhc_--><html lang="en" class="dark" data-theme="terminal"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="/_next/static/chunks/a7d5d0791c8c6223.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/chunks/aee9601911b790ca.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/d878b929b21636c4.js"/><script src="/_next/static/chunks/f70f563804550a9c.js" async=""></script><script src="/_next/static/chunks/43d761df92da7cb6.js" async=""></script><script src="/_next/static/chunks/e281719dbabcca1d.js" async=""></script><script src="/_next/static/chunks/9e56d1f8f4d7adcb.js" async=""></script><script src="/_next/static/chunks/turbopack-768a6a8b9db952e0.js" async=""></script><script src="/_next/static/chunks/4ddb24d8ce3b8617.js" async=""></script><script src="/_next/static/chunks/417032eeb2cd875f.js" async=""></script><script src="/_next/static/chunks/d334b69bff7779be.js" async=""></script><meta name="robots" content="noindex"/><meta name="next-size-adjust" content=""/><title>404: This page could not be found.</title><title>ShieldCortex</title><meta name="description" content="AI Memory Security Dashboard — Defence pipeline, audit logs, quarantine review"/><script>
+<!DOCTYPE html><!--ObhI00_RVqLccblwYt339--><html lang="en" class="dark" data-theme="terminal"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="/_next/static/chunks/a7d5d0791c8c6223.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/chunks/aee9601911b790ca.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/d878b929b21636c4.js"/><script src="/_next/static/chunks/f70f563804550a9c.js" async=""></script><script src="/_next/static/chunks/43d761df92da7cb6.js" async=""></script><script src="/_next/static/chunks/e281719dbabcca1d.js" async=""></script><script src="/_next/static/chunks/9e56d1f8f4d7adcb.js" async=""></script><script src="/_next/static/chunks/turbopack-768a6a8b9db952e0.js" async=""></script><script src="/_next/static/chunks/4ddb24d8ce3b8617.js" async=""></script><script src="/_next/static/chunks/417032eeb2cd875f.js" async=""></script><script src="/_next/static/chunks/d334b69bff7779be.js" async=""></script><meta name="robots" content="noindex"/><meta name="next-size-adjust" content=""/><title>404: This page could not be found.</title><title>ShieldCortex</title><meta name="description" content="AI Memory Security Dashboard — Defence pipeline, audit logs, quarantine review"/><script>
 try {
   var t = localStorage.getItem('sc-theme');
   if (t !== 'glass' && t !== 'terminal') t = 'terminal';
@@ -6,4 +6,4 @@ try {
 } catch (e) {
   document.documentElement.dataset.theme = 'terminal';
 }
-</script><script src="/_next/static/chunks/a6dad97d9634a72d.js" noModule=""></script></head><body class="geist_a71539c9-module__T19VSG__variable geist_mono_8d43a2aa-module__8Li5zG__variable antialiased bg-slate-950"><div hidden=""><!--$--><!--/$--></div><div style="font-family:system-ui,&quot;Segoe UI&quot;,Roboto,Helvetica,Arial,sans-serif,&quot;Apple Color Emoji&quot;,&quot;Segoe UI Emoji&quot;;height:100vh;text-align:center;display:flex;flex-direction:column;align-items:center;justify-content:center"><div><style>body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}</style><h1 class="next-error-h1" style="display:inline-block;margin:0 20px 0 0;padding:0 23px 0 0;font-size:24px;font-weight:500;vertical-align:top;line-height:49px">404</h1><div style="display:inline-block"><h2 style="font-size:14px;font-weight:400;line-height:49px;margin:0">This page could not be found.</h2></div></div></div><!--$--><!--/$--><script src="/_next/static/chunks/d878b929b21636c4.js" id="_R_" async=""></script><script>(self.__next_f=self.__next_f||[]).push([0])</script><script>self.__next_f.push([1,"1:\"$Sreact.fragment\"\n2:I[36111,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"Providers\"]\n3:I[57043,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n4:I[10445,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\",\"/_next/static/chunks/d334b69bff7779be.js\"],\"default\"]\n5:I[27657,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n6:I[56978,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"OutletBoundary\"]\n7:\"$Sreact.suspense\"\n9:I[56978,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"ViewportBoundary\"]\nb:I[56978,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"MetadataBoundary\"]\nd:I[30687,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n:HL[\"/_next/static/chunks/a7d5d0791c8c6223.css\",\"style\"]\n:HL[\"/_next/static/chunks/aee9601911b790ca.css\",\"style\"]\n"])</script><script>self.__next_f.push([1,"0:{\"P\":null,\"b\":\"x2AmqK_Ci5s40_dIsKhc_\",\"c\":[\"\",\"_not-found\"],\"q\":\"\",\"i\":false,\"f\":[[[\"\",{\"children\":[\"/_not-found\",{\"children\":[\"__PAGE__\",{}]}]},\"$undefined\",\"$undefined\",true],[[\"$\",\"$1\",\"c\",{\"children\":[[[\"$\",\"link\",\"0\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/chunks/a7d5d0791c8c6223.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\",\"nonce\":\"$undefined\"}],[\"$\",\"link\",\"1\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/chunks/aee9601911b790ca.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\",\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-0\",{\"src\":\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"async\":true,\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-1\",{\"src\":\"/_next/static/chunks/417032eeb2cd875f.js\",\"async\":true,\"nonce\":\"$undefined\"}]],[\"$\",\"html\",null,{\"lang\":\"en\",\"className\":\"dark\",\"data-theme\":\"terminal\",\"suppressHydrationWarning\":true,\"children\":[[\"$\",\"head\",null,{\"children\":[\"$\",\"script\",null,{\"dangerouslySetInnerHTML\":{\"__html\":\"\\ntry {\\n  var t = localStorage.getItem('sc-theme');\\n  if (t !== 'glass' \u0026\u0026 t !== 'terminal') t = 'terminal';\\n  document.documentElement.dataset.theme = t;\\n} catch (e) {\\n  document.documentElement.dataset.theme = 'terminal';\\n}\\n\"}}]}],[\"$\",\"body\",null,{\"className\":\"geist_a71539c9-module__T19VSG__variable geist_mono_8d43a2aa-module__8Li5zG__variable antialiased bg-slate-950\",\"children\":[\"$\",\"$L2\",null,{\"children\":[\"$\",\"$L3\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$4\",\"errorStyles\":[],\"errorScripts\":[[\"$\",\"script\",\"script-0\",{\"src\":\"/_next/static/chunks/d334b69bff7779be.js\",\"async\":true}]],\"template\":[\"$\",\"$L5\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":[[[\"$\",\"title\",null,{\"children\":\"404: This page could not be found.\"}],[\"$\",\"div\",null,{\"style\":{\"fontFamily\":\"system-ui,\\\"Segoe UI\\\",Roboto,Helvetica,Arial,sans-serif,\\\"Apple Color Emoji\\\",\\\"Segoe UI Emoji\\\"\",\"height\":\"100vh\",\"textAlign\":\"center\",\"display\":\"flex\",\"flexDirection\":\"column\",\"alignItems\":\"center\",\"justifyContent\":\"center\"},\"children\":[\"$\",\"div\",null,{\"children\":[[\"$\",\"style\",null,{\"dangerouslySetInnerHTML\":{\"__html\":\"body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}\"}}],[\"$\",\"h1\",null,{\"className\":\"next-error-h1\",\"style\":{\"display\":\"inline-block\",\"margin\":\"0 20px 0 0\",\"padding\":\"0 23px 0 0\",\"fontSize\":24,\"fontWeight\":500,\"verticalAlign\":\"top\",\"lineHeight\":\"49px\"},\"children\":404}],[\"$\",\"div\",null,{\"style\":{\"display\":\"inline-block\"},\"children\":[\"$\",\"h2\",null,{\"style\":{\"fontSize\":14,\"fontWeight\":400,\"lineHeight\":\"49px\",\"margin\":0},\"children\":\"This page could not be found.\"}]}]]}]}]],[]],\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]}]}]]}]]}],{\"children\":[[\"$\",\"$1\",\"c\",{\"children\":[null,[\"$\",\"$L3\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L5\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":\"$undefined\",\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]]}],{\"children\":[[\"$\",\"$1\",\"c\",{\"children\":[[[\"$\",\"title\",null,{\"children\":\"404: This page could not be found.\"}],[\"$\",\"div\",null,{\"style\":\"$0:f:0:1:0:props:children:1:props:children:1:props:children:props:children:props:notFound:0:1:props:style\",\"children\":[\"$\",\"div\",null,{\"children\":[[\"$\",\"style\",null,{\"dangerouslySetInnerHTML\":{\"__html\":\"body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}\"}}],[\"$\",\"h1\",null,{\"className\":\"next-error-h1\",\"style\":\"$0:f:0:1:0:props:children:1:props:children:1:props:children:props:children:props:notFound:0:1:props:children:props:children:1:props:style\",\"children\":404}],[\"$\",\"div\",null,{\"style\":\"$0:f:0:1:0:props:children:1:props:children:1:props:children:props:children:props:notFound:0:1:props:children:props:children:2:props:style\",\"children\":[\"$\",\"h2\",null,{\"style\":\"$0:f:0:1:0:props:children:1:props:children:1:props:children:props:children:props:notFound:0:1:props:children:props:children:2:props:children:props:style\",\"children\":\"This page could not be found.\"}]}]]}]}]],null,[\"$\",\"$L6\",null,{\"children\":[\"$\",\"$7\",null,{\"name\":\"Next.MetadataOutlet\",\"children\":\"$@8\"}]}]]}],{},null,false,false]},null,false,false]},null,false,false],[\"$\",\"$1\",\"h\",{\"children\":[[\"$\",\"meta\",null,{\"name\":\"robots\",\"content\":\"noindex\"}],[\"$\",\"$L9\",null,{\"children\":\"$La\"}],[\"$\",\"div\",null,{\"hidden\":true,\"children\":[\"$\",\"$Lb\",null,{\"children\":[\"$\",\"$7\",null,{\"name\":\"Next.Metadata\",\"children\":\"$Lc\"}]}]}],[\"$\",\"meta\",null,{\"name\":\"next-size-adjust\",\"content\":\"\"}]]}],false]],\"m\":\"$undefined\",\"G\":[\"$d\",\"$undefined\"],\"S\":true}\n"])</script><script>self.__next_f.push([1,"a:[[\"$\",\"meta\",\"0\",{\"charSet\":\"utf-8\"}],[\"$\",\"meta\",\"1\",{\"name\":\"viewport\",\"content\":\"width=device-width, initial-scale=1\"}]]\n"])</script><script>self.__next_f.push([1,"8:null\nc:[[\"$\",\"title\",\"0\",{\"children\":\"ShieldCortex\"}],[\"$\",\"meta\",\"1\",{\"name\":\"description\",\"content\":\"AI Memory Security Dashboard — Defence pipeline, audit logs, quarantine review\"}]]\n"])</script></body></html>
+</script><script src="/_next/static/chunks/a6dad97d9634a72d.js" noModule=""></script></head><body class="geist_a71539c9-module__T19VSG__variable geist_mono_8d43a2aa-module__8Li5zG__variable antialiased bg-slate-950"><div hidden=""><!--$--><!--/$--></div><div style="font-family:system-ui,&quot;Segoe UI&quot;,Roboto,Helvetica,Arial,sans-serif,&quot;Apple Color Emoji&quot;,&quot;Segoe UI Emoji&quot;;height:100vh;text-align:center;display:flex;flex-direction:column;align-items:center;justify-content:center"><div><style>body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}</style><h1 class="next-error-h1" style="display:inline-block;margin:0 20px 0 0;padding:0 23px 0 0;font-size:24px;font-weight:500;vertical-align:top;line-height:49px">404</h1><div style="display:inline-block"><h2 style="font-size:14px;font-weight:400;line-height:49px;margin:0">This page could not be found.</h2></div></div></div><!--$--><!--/$--><script src="/_next/static/chunks/d878b929b21636c4.js" id="_R_" async=""></script><script>(self.__next_f=self.__next_f||[]).push([0])</script><script>self.__next_f.push([1,"1:\"$Sreact.fragment\"\n2:I[36111,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"Providers\"]\n3:I[57043,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n4:I[10445,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\",\"/_next/static/chunks/d334b69bff7779be.js\"],\"default\"]\n5:I[27657,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n6:I[56978,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"OutletBoundary\"]\n7:\"$Sreact.suspense\"\n9:I[56978,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"ViewportBoundary\"]\nb:I[56978,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"MetadataBoundary\"]\nd:I[30687,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n:HL[\"/_next/static/chunks/a7d5d0791c8c6223.css\",\"style\"]\n:HL[\"/_next/static/chunks/aee9601911b790ca.css\",\"style\"]\n"])</script><script>self.__next_f.push([1,"0:{\"P\":null,\"b\":\"ObhI00_RVqLccblwYt339\",\"c\":[\"\",\"_not-found\"],\"q\":\"\",\"i\":false,\"f\":[[[\"\",{\"children\":[\"/_not-found\",{\"children\":[\"__PAGE__\",{}]}]},\"$undefined\",\"$undefined\",true],[[\"$\",\"$1\",\"c\",{\"children\":[[[\"$\",\"link\",\"0\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/chunks/a7d5d0791c8c6223.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\",\"nonce\":\"$undefined\"}],[\"$\",\"link\",\"1\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/chunks/aee9601911b790ca.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\",\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-0\",{\"src\":\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"async\":true,\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-1\",{\"src\":\"/_next/static/chunks/417032eeb2cd875f.js\",\"async\":true,\"nonce\":\"$undefined\"}]],[\"$\",\"html\",null,{\"lang\":\"en\",\"className\":\"dark\",\"data-theme\":\"terminal\",\"suppressHydrationWarning\":true,\"children\":[[\"$\",\"head\",null,{\"children\":[\"$\",\"script\",null,{\"dangerouslySetInnerHTML\":{\"__html\":\"\\ntry {\\n  var t = localStorage.getItem('sc-theme');\\n  if (t !== 'glass' \u0026\u0026 t !== 'terminal') t = 'terminal';\\n  document.documentElement.dataset.theme = t;\\n} catch (e) {\\n  document.documentElement.dataset.theme = 'terminal';\\n}\\n\"}}]}],[\"$\",\"body\",null,{\"className\":\"geist_a71539c9-module__T19VSG__variable geist_mono_8d43a2aa-module__8Li5zG__variable antialiased bg-slate-950\",\"children\":[\"$\",\"$L2\",null,{\"children\":[\"$\",\"$L3\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$4\",\"errorStyles\":[],\"errorScripts\":[[\"$\",\"script\",\"script-0\",{\"src\":\"/_next/static/chunks/d334b69bff7779be.js\",\"async\":true}]],\"template\":[\"$\",\"$L5\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":[[[\"$\",\"title\",null,{\"children\":\"404: This page could not be found.\"}],[\"$\",\"div\",null,{\"style\":{\"fontFamily\":\"system-ui,\\\"Segoe UI\\\",Roboto,Helvetica,Arial,sans-serif,\\\"Apple Color Emoji\\\",\\\"Segoe UI Emoji\\\"\",\"height\":\"100vh\",\"textAlign\":\"center\",\"display\":\"flex\",\"flexDirection\":\"column\",\"alignItems\":\"center\",\"justifyContent\":\"center\"},\"children\":[\"$\",\"div\",null,{\"children\":[[\"$\",\"style\",null,{\"dangerouslySetInnerHTML\":{\"__html\":\"body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}\"}}],[\"$\",\"h1\",null,{\"className\":\"next-error-h1\",\"style\":{\"display\":\"inline-block\",\"margin\":\"0 20px 0 0\",\"padding\":\"0 23px 0 0\",\"fontSize\":24,\"fontWeight\":500,\"verticalAlign\":\"top\",\"lineHeight\":\"49px\"},\"children\":404}],[\"$\",\"div\",null,{\"style\":{\"display\":\"inline-block\"},\"children\":[\"$\",\"h2\",null,{\"style\":{\"fontSize\":14,\"fontWeight\":400,\"lineHeight\":\"49px\",\"margin\":0},\"children\":\"This page could not be found.\"}]}]]}]}]],[]],\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]}]}]]}]]}],{\"children\":[[\"$\",\"$1\",\"c\",{\"children\":[null,[\"$\",\"$L3\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L5\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":\"$undefined\",\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]]}],{\"children\":[[\"$\",\"$1\",\"c\",{\"children\":[[[\"$\",\"title\",null,{\"children\":\"404: This page could not be found.\"}],[\"$\",\"div\",null,{\"style\":\"$0:f:0:1:0:props:children:1:props:children:1:props:children:props:children:props:notFound:0:1:props:style\",\"children\":[\"$\",\"div\",null,{\"children\":[[\"$\",\"style\",null,{\"dangerouslySetInnerHTML\":{\"__html\":\"body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}\"}}],[\"$\",\"h1\",null,{\"className\":\"next-error-h1\",\"style\":\"$0:f:0:1:0:props:children:1:props:children:1:props:children:props:children:props:notFound:0:1:props:children:props:children:1:props:style\",\"children\":404}],[\"$\",\"div\",null,{\"style\":\"$0:f:0:1:0:props:children:1:props:children:1:props:children:props:children:props:notFound:0:1:props:children:props:children:2:props:style\",\"children\":[\"$\",\"h2\",null,{\"style\":\"$0:f:0:1:0:props:children:1:props:children:1:props:children:props:children:props:notFound:0:1:props:children:props:children:2:props:children:props:style\",\"children\":\"This page could not be found.\"}]}]]}]}]],null,[\"$\",\"$L6\",null,{\"children\":[\"$\",\"$7\",null,{\"name\":\"Next.MetadataOutlet\",\"children\":\"$@8\"}]}]]}],{},null,false,false]},null,false,false]},null,false,false],[\"$\",\"$1\",\"h\",{\"children\":[[\"$\",\"meta\",null,{\"name\":\"robots\",\"content\":\"noindex\"}],[\"$\",\"$L9\",null,{\"children\":\"$La\"}],[\"$\",\"div\",null,{\"hidden\":true,\"children\":[\"$\",\"$Lb\",null,{\"children\":[\"$\",\"$7\",null,{\"name\":\"Next.Metadata\",\"children\":\"$Lc\"}]}]}],[\"$\",\"meta\",null,{\"name\":\"next-size-adjust\",\"content\":\"\"}]]}],false]],\"m\":\"$undefined\",\"G\":[\"$d\",\"$undefined\"],\"S\":true}\n"])</script><script>self.__next_f.push([1,"a:[[\"$\",\"meta\",\"0\",{\"charSet\":\"utf-8\"}],[\"$\",\"meta\",\"1\",{\"name\":\"viewport\",\"content\":\"width=device-width, initial-scale=1\"}]]\n"])</script><script>self.__next_f.push([1,"8:null\nc:[[\"$\",\"title\",\"0\",{\"children\":\"ShieldCortex\"}],[\"$\",\"meta\",\"1\",{\"name\":\"description\",\"content\":\"AI Memory Security Dashboard — Defence pipeline, audit logs, quarantine review\"}]]\n"])</script></body></html>

package/dashboard/.next/standalone/dashboard/.next/server/pages/500.html CHANGED Viewed

@@ -1,2 +1,2 @@
-<!DOCTYPE html><!--x2AmqK_Ci5s40_dIsKhc_--><html id="__next_error__"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/d878b929b21636c4.js"/><script src="/_next/static/chunks/f70f563804550a9c.js" async=""></script><script src="/_next/static/chunks/43d761df92da7cb6.js" async=""></script><script src="/_next/static/chunks/e281719dbabcca1d.js" async=""></script><script src="/_next/static/chunks/9e56d1f8f4d7adcb.js" async=""></script><script src="/_next/static/chunks/turbopack-768a6a8b9db952e0.js" async=""></script><script src="/_next/static/chunks/102f894cc892994d.js" async=""></script><script src="/_next/static/chunks/417032eeb2cd875f.js" async=""></script><meta name="next-size-adjust" content=""/><title>500: Internal Server Error.</title><script src="/_next/static/chunks/a6dad97d9634a72d.js" noModule=""></script></head><body><div hidden=""><!--$--><!--/$--></div><div style="font-family:system-ui,&quot;Segoe UI&quot;,Roboto,Helvetica,Arial,sans-serif,&quot;Apple Color Emoji&quot;,&quot;Segoe UI Emoji&quot;;height:100vh;text-align:center;display:flex;flex-direction:column;align-items:center;justify-content:center"><div style="line-height:48px"><style>body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}
-@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}</style><h1 class="next-error-h1" style="display:inline-block;margin:0 20px 0 0;padding-right:23px;font-size:24px;font-weight:500;vertical-align:top">500</h1><div style="display:inline-block"><h2 style="font-size:14px;font-weight:400;line-height:28px">Internal Server Error.</h2></div></div></div><!--$--><!--/$--><script src="/_next/static/chunks/d878b929b21636c4.js" id="_R_" async=""></script><script>(self.__next_f=self.__next_f||[]).push([0])</script><script>self.__next_f.push([1,"1:\"$Sreact.fragment\"\n2:I[57043,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n3:I[27657,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n4:I[56978,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"OutletBoundary\"]\n5:\"$Sreact.suspense\"\n7:I[56978,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"ViewportBoundary\"]\n9:I[56978,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"MetadataBoundary\"]\nb:I[30687,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n"])</script><script>self.__next_f.push([1,"0:{\"P\":null,\"b\":\"x2AmqK_Ci5s40_dIsKhc_\",\"c\":[\"\",\"_global-error\"],\"q\":\"\",\"i\":false,\"f\":[[[\"\",{\"children\":[\"__PAGE__\",{}]}],[[\"$\",\"$1\",\"c\",{\"children\":[null,[\"$\",\"$L2\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L3\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":\"$undefined\",\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]]}],{\"children\":[[\"$\",\"$1\",\"c\",{\"children\":[[\"$\",\"html\",null,{\"id\":\"__next_error__\",\"children\":[[\"$\",\"head\",null,{\"children\":[\"$\",\"title\",null,{\"children\":\"500: Internal Server Error.\"}]}],[\"$\",\"body\",null,{\"children\":[\"$\",\"div\",null,{\"style\":{\"fontFamily\":\"system-ui,\\\"Segoe UI\\\",Roboto,Helvetica,Arial,sans-serif,\\\"Apple Color Emoji\\\",\\\"Segoe UI Emoji\\\"\",\"height\":\"100vh\",\"textAlign\":\"center\",\"display\":\"flex\",\"flexDirection\":\"column\",\"alignItems\":\"center\",\"justifyContent\":\"center\"},\"children\":[\"$\",\"div\",null,{\"style\":{\"lineHeight\":\"48px\"},\"children\":[[\"$\",\"style\",null,{\"dangerouslySetInnerHTML\":{\"__html\":\"body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}\\n@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}\"}}],[\"$\",\"h1\",null,{\"className\":\"next-error-h1\",\"style\":{\"display\":\"inline-block\",\"margin\":\"0 20px 0 0\",\"paddingRight\":23,\"fontSize\":24,\"fontWeight\":500,\"verticalAlign\":\"top\"},\"children\":\"500\"}],[\"$\",\"div\",null,{\"style\":{\"display\":\"inline-block\"},\"children\":[\"$\",\"h2\",null,{\"style\":{\"fontSize\":14,\"fontWeight\":400,\"lineHeight\":\"28px\"},\"children\":\"Internal Server Error.\"}]}]]}]}]}]]}],[[\"$\",\"script\",\"script-0\",{\"src\":\"/_next/static/chunks/102f894cc892994d.js\",\"async\":true,\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-1\",{\"src\":\"/_next/static/chunks/417032eeb2cd875f.js\",\"async\":true,\"nonce\":\"$undefined\"}]],[\"$\",\"$L4\",null,{\"children\":[\"$\",\"$5\",null,{\"name\":\"Next.MetadataOutlet\",\"children\":\"$@6\"}]}]]}],{},null,false,false]},null,false,false],[\"$\",\"$1\",\"h\",{\"children\":[null,[\"$\",\"$L7\",null,{\"children\":\"$L8\"}],[\"$\",\"div\",null,{\"hidden\":true,\"children\":[\"$\",\"$L9\",null,{\"children\":[\"$\",\"$5\",null,{\"name\":\"Next.Metadata\",\"children\":\"$La\"}]}]}],[\"$\",\"meta\",null,{\"name\":\"next-size-adjust\",\"content\":\"\"}]]}],false]],\"m\":\"$undefined\",\"G\":[\"$b\",\"$undefined\"],\"S\":true}\n"])</script><script>self.__next_f.push([1,"8:[[\"$\",\"meta\",\"0\",{\"charSet\":\"utf-8\"}],[\"$\",\"meta\",\"1\",{\"name\":\"viewport\",\"content\":\"width=device-width, initial-scale=1\"}]]\n"])</script><script>self.__next_f.push([1,"6:null\na:[]\n"])</script></body></html>
+<!DOCTYPE html><!--ObhI00_RVqLccblwYt339--><html id="__next_error__"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/d878b929b21636c4.js"/><script src="/_next/static/chunks/f70f563804550a9c.js" async=""></script><script src="/_next/static/chunks/43d761df92da7cb6.js" async=""></script><script src="/_next/static/chunks/e281719dbabcca1d.js" async=""></script><script src="/_next/static/chunks/9e56d1f8f4d7adcb.js" async=""></script><script src="/_next/static/chunks/turbopack-768a6a8b9db952e0.js" async=""></script><script src="/_next/static/chunks/102f894cc892994d.js" async=""></script><script src="/_next/static/chunks/417032eeb2cd875f.js" async=""></script><meta name="next-size-adjust" content=""/><title>500: Internal Server Error.</title><script src="/_next/static/chunks/a6dad97d9634a72d.js" noModule=""></script></head><body><div hidden=""><!--$--><!--/$--></div><div style="font-family:system-ui,&quot;Segoe UI&quot;,Roboto,Helvetica,Arial,sans-serif,&quot;Apple Color Emoji&quot;,&quot;Segoe UI Emoji&quot;;height:100vh;text-align:center;display:flex;flex-direction:column;align-items:center;justify-content:center"><div style="line-height:48px"><style>body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}
+@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}</style><h1 class="next-error-h1" style="display:inline-block;margin:0 20px 0 0;padding-right:23px;font-size:24px;font-weight:500;vertical-align:top">500</h1><div style="display:inline-block"><h2 style="font-size:14px;font-weight:400;line-height:28px">Internal Server Error.</h2></div></div></div><!--$--><!--/$--><script src="/_next/static/chunks/d878b929b21636c4.js" id="_R_" async=""></script><script>(self.__next_f=self.__next_f||[]).push([0])</script><script>self.__next_f.push([1,"1:\"$Sreact.fragment\"\n2:I[57043,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n3:I[27657,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n4:I[56978,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"OutletBoundary\"]\n5:\"$Sreact.suspense\"\n7:I[56978,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"ViewportBoundary\"]\n9:I[56978,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"MetadataBoundary\"]\nb:I[30687,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n"])</script><script>self.__next_f.push([1,"0:{\"P\":null,\"b\":\"ObhI00_RVqLccblwYt339\",\"c\":[\"\",\"_global-error\"],\"q\":\"\",\"i\":false,\"f\":[[[\"\",{\"children\":[\"__PAGE__\",{}]}],[[\"$\",\"$1\",\"c\",{\"children\":[null,[\"$\",\"$L2\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L3\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":\"$undefined\",\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]]}],{\"children\":[[\"$\",\"$1\",\"c\",{\"children\":[[\"$\",\"html\",null,{\"id\":\"__next_error__\",\"children\":[[\"$\",\"head\",null,{\"children\":[\"$\",\"title\",null,{\"children\":\"500: Internal Server Error.\"}]}],[\"$\",\"body\",null,{\"children\":[\"$\",\"div\",null,{\"style\":{\"fontFamily\":\"system-ui,\\\"Segoe UI\\\",Roboto,Helvetica,Arial,sans-serif,\\\"Apple Color Emoji\\\",\\\"Segoe UI Emoji\\\"\",\"height\":\"100vh\",\"textAlign\":\"center\",\"display\":\"flex\",\"flexDirection\":\"column\",\"alignItems\":\"center\",\"justifyContent\":\"center\"},\"children\":[\"$\",\"div\",null,{\"style\":{\"lineHeight\":\"48px\"},\"children\":[[\"$\",\"style\",null,{\"dangerouslySetInnerHTML\":{\"__html\":\"body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}\\n@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}\"}}],[\"$\",\"h1\",null,{\"className\":\"next-error-h1\",\"style\":{\"display\":\"inline-block\",\"margin\":\"0 20px 0 0\",\"paddingRight\":23,\"fontSize\":24,\"fontWeight\":500,\"verticalAlign\":\"top\"},\"children\":\"500\"}],[\"$\",\"div\",null,{\"style\":{\"display\":\"inline-block\"},\"children\":[\"$\",\"h2\",null,{\"style\":{\"fontSize\":14,\"fontWeight\":400,\"lineHeight\":\"28px\"},\"children\":\"Internal Server Error.\"}]}]]}]}]}]]}],[[\"$\",\"script\",\"script-0\",{\"src\":\"/_next/static/chunks/102f894cc892994d.js\",\"async\":true,\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-1\",{\"src\":\"/_next/static/chunks/417032eeb2cd875f.js\",\"async\":true,\"nonce\":\"$undefined\"}]],[\"$\",\"$L4\",null,{\"children\":[\"$\",\"$5\",null,{\"name\":\"Next.MetadataOutlet\",\"children\":\"$@6\"}]}]]}],{},null,false,false]},null,false,false],[\"$\",\"$1\",\"h\",{\"children\":[null,[\"$\",\"$L7\",null,{\"children\":\"$L8\"}],[\"$\",\"div\",null,{\"hidden\":true,\"children\":[\"$\",\"$L9\",null,{\"children\":[\"$\",\"$5\",null,{\"name\":\"Next.Metadata\",\"children\":\"$La\"}]}]}],[\"$\",\"meta\",null,{\"name\":\"next-size-adjust\",\"content\":\"\"}]]}],false]],\"m\":\"$undefined\",\"G\":[\"$b\",\"$undefined\"],\"S\":true}\n"])</script><script>self.__next_f.push([1,"8:[[\"$\",\"meta\",\"0\",{\"charSet\":\"utf-8\"}],[\"$\",\"meta\",\"1\",{\"name\":\"viewport\",\"content\":\"width=device-width, initial-scale=1\"}]]\n"])</script><script>self.__next_f.push([1,"6:null\na:[]\n"])</script></body></html>

package/dist/api/sql-classifier.d.ts ADDED Viewed

@@ -0,0 +1,32 @@
+/**
+ * SQL Console Query Classifier
+ *
+ * Categorises an SQL query as read / write / reject for the local dashboard
+ * SQL console. Used by visualization-server's `/api/sql` endpoint to enforce
+ * a defensive allow-list that the original `startsWith()` check could bypass
+ * via a CTE prefix (e.g. `WITH t AS (SELECT 1) INSERT INTO ...`).
+ *
+ * Design goals:
+ *  - Fail closed: anything we cannot classify becomes `reject`.
+ *  - No SQL grammar: just a defensive peek past leading comments and CTEs
+ *    to find the FIRST real keyword.
+ *  - Cheap and synchronous — runs in the request hot path.
+ */
+export type SqlClassification = {
+    kind: 'read';
+} | {
+    kind: 'write';
+    operation: 'INSERT' | 'UPDATE' | 'DELETE' | 'REPLACE' | 'ALTER' | 'CREATE';
+} | {
+    kind: 'destroy';
+    operation: 'DROP' | 'TRUNCATE';
+} | {
+    kind: 'reject';
+    reason: string;
+};
+/**
+ * Classify a query as read / write / destroy / reject.
+ *
+ * Fail-closed: any structure we can't confidently classify becomes `reject`.
+ */
+export declare function classifySqlQuery(rawQuery: string): SqlClassification;

package/dist/api/sql-classifier.js ADDED Viewed

@@ -0,0 +1,277 @@
+const READ_KEYWORDS = new Set(['SELECT', 'PRAGMA', 'EXPLAIN', 'VALUES']);
+const WRITE_KEYWORDS = new Set(['INSERT', 'UPDATE', 'DELETE', 'REPLACE', 'ALTER', 'CREATE']);
+const DESTROY_KEYWORDS = new Set(['DROP', 'TRUNCATE']);
+/**
+ * Strip SQL comments (line + block) and leading whitespace from the start of
+ * a query string. Returns the cleaned query with all leading noise removed.
+ *
+ * Note: this only strips LEADING comments/whitespace — we don't try to scrub
+ * comments inside string literals or anywhere else, because we only care
+ * about identifying the first real token.
+ */
+function stripLeadingNoise(query) {
+    let i = 0;
+    const n = query.length;
+    while (i < n) {
+        const ch = query[i];
+        // whitespace
+        if (ch === ' ' || ch === '\t' || ch === '\n' || ch === '\r' || ch === '\f' || ch === '\v') {
+            i++;
+            continue;
+        }
+        // line comment: -- ... \n
+        if (ch === '-' && query[i + 1] === '-') {
+            i += 2;
+            while (i < n && query[i] !== '\n')
+                i++;
+            continue;
+        }
+        // block comment: /* ... */
+        if (ch === '/' && query[i + 1] === '*') {
+            i += 2;
+            while (i < n && !(query[i] === '*' && query[i + 1] === '/'))
+                i++;
+            if (i < n)
+                i += 2; // skip closing */
+            continue;
+        }
+        break;
+    }
+    return query.slice(i);
+}
+/**
+ * Skip past a balanced-parenthesis block starting at `start` (which should
+ * point AT the opening '('). Returns the index just past the matching ')',
+ * or -1 if no matching paren is found.
+ *
+ * Aware of single-quoted string literals (SQL standard '' escape) and
+ * double-quoted identifiers (SQLite). Bracket [] and backtick `` quoting
+ * are also handled because SQLite accepts them.
+ */
+function skipParenBlock(query, start) {
+    if (query[start] !== '(')
+        return -1;
+    let depth = 0;
+    let i = start;
+    const n = query.length;
+    while (i < n) {
+        const ch = query[i];
+        if (ch === '(') {
+            depth++;
+            i++;
+            continue;
+        }
+        if (ch === ')') {
+            depth--;
+            i++;
+            if (depth === 0)
+                return i;
+            continue;
+        }
+        if (ch === "'") {
+            // skip single-quoted string with SQL '' escape
+            i++;
+            while (i < n) {
+                if (query[i] === "'") {
+                    if (query[i + 1] === "'") {
+                        i += 2;
+                        continue;
+                    }
+                    i++;
+                    break;
+                }
+                i++;
+            }
+            continue;
+        }
+        if (ch === '"') {
+            i++;
+            while (i < n && query[i] !== '"')
+                i++;
+            if (i < n)
+                i++;
+            continue;
+        }
+        if (ch === '`') {
+            i++;
+            while (i < n && query[i] !== '`')
+                i++;
+            if (i < n)
+                i++;
+            continue;
+        }
+        if (ch === '[') {
+            i++;
+            while (i < n && query[i] !== ']')
+                i++;
+            if (i < n)
+                i++;
+            continue;
+        }
+        // inline comments inside the CTE body
+        if (ch === '-' && query[i + 1] === '-') {
+            i += 2;
+            while (i < n && query[i] !== '\n')
+                i++;
+            continue;
+        }
+        if (ch === '/' && query[i + 1] === '*') {
+            i += 2;
+            while (i < n && !(query[i] === '*' && query[i + 1] === '/'))
+                i++;
+            if (i < n)
+                i += 2;
+            continue;
+        }
+        i++;
+    }
+    return -1;
+}
+/**
+ * Read the next uppercase keyword token at `i`, skipping leading
+ * whitespace/comments first. Returns the keyword and the index just past it,
+ * or null if no identifier token is present.
+ */
+function readNextKeyword(query, i) {
+    const trimmed = stripLeadingNoise(query.slice(i));
+    if (!trimmed)
+        return null;
+    const offset = query.length - trimmed.length;
+    const match = /^([A-Za-z_][A-Za-z0-9_]*)/.exec(trimmed);
+    if (!match)
+        return null;
+    return {
+        keyword: match[1].toUpperCase(),
+        nextIndex: offset + match[1].length,
+    };
+}
+/**
+ * Walk past a CTE list (`WITH [RECURSIVE] name [(...)] AS (...) [, ...]`)
+ * and return the index at the first real statement keyword.
+ * Returns -1 if the structure doesn't look like a valid CTE list.
+ */
+function skipCteList(query, afterWithIndex) {
+    let i = afterWithIndex;
+    const n = query.length;
+    // optional RECURSIVE
+    const first = readNextKeyword(query, i);
+    if (!first)
+        return -1;
+    if (first.keyword === 'RECURSIVE') {
+        i = first.nextIndex;
+    }
+    // parse one or more "<name> [(...)] AS (...)" groups, comma separated
+    while (i < n) {
+        // CTE name (identifier)
+        const nameStripped = stripLeadingNoise(query.slice(i));
+        if (!nameStripped)
+            return -1;
+        i = n - nameStripped.length;
+        // name can be bracketed/quoted; for our purposes we just need to consume it
+        const ch = query[i];
+        if (ch === '"' || ch === '`' || ch === '[') {
+            const close = ch === '[' ? ']' : ch;
+            i++;
+            while (i < n && query[i] !== close)
+                i++;
+            if (i < n)
+                i++;
+        }
+        else {
+            const m = /^[A-Za-z_][A-Za-z0-9_]*/.exec(query.slice(i));
+            if (!m)
+                return -1;
+            i += m[0].length;
+        }
+        // optional column list (col1, col2, ...)
+        const afterName = stripLeadingNoise(query.slice(i));
+        i = n - afterName.length;
+        if (query[i] === '(') {
+            const end = skipParenBlock(query, i);
+            if (end < 0)
+                return -1;
+            i = end;
+        }
+        // mandatory AS
+        const asKeyword = readNextKeyword(query, i);
+        if (!asKeyword || asKeyword.keyword !== 'AS')
+            return -1;
+        i = asKeyword.nextIndex;
+        // optional MATERIALIZED / NOT MATERIALIZED
+        const maybeMat = readNextKeyword(query, i);
+        if (maybeMat && maybeMat.keyword === 'NOT') {
+            const next = readNextKeyword(query, maybeMat.nextIndex);
+            if (next && next.keyword === 'MATERIALIZED') {
+                i = next.nextIndex;
+            }
+        }
+        else if (maybeMat && maybeMat.keyword === 'MATERIALIZED') {
+            i = maybeMat.nextIndex;
+        }
+        // mandatory ( CTE body )
+        const stripped = stripLeadingNoise(query.slice(i));
+        i = n - stripped.length;
+        if (query[i] !== '(')
+            return -1;
+        const bodyEnd = skipParenBlock(query, i);
+        if (bodyEnd < 0)
+            return -1;
+        i = bodyEnd;
+        // comma → another CTE, else we're done
+        const after = stripLeadingNoise(query.slice(i));
+        i = n - after.length;
+        if (query[i] === ',') {
+            i++;
+            continue;
+        }
+        break;
+    }
+    return i;
+}
+/**
+ * Classify a query as read / write / destroy / reject.
+ *
+ * Fail-closed: any structure we can't confidently classify becomes `reject`.
+ */
+export function classifySqlQuery(rawQuery) {
+    if (typeof rawQuery !== 'string' || rawQuery.trim().length === 0) {
+        return { kind: 'reject', reason: 'Empty query' };
+    }
+    const stripped = stripLeadingNoise(rawQuery);
+    if (!stripped) {
+        return { kind: 'reject', reason: 'Empty query after stripping comments' };
+    }
+    const first = readNextKeyword(rawQuery, rawQuery.length - stripped.length);
+    if (!first) {
+        return { kind: 'reject', reason: 'Could not identify leading keyword' };
+    }
+    let leadIndex = first.nextIndex;
+    let leadKeyword = first.keyword;
+    // Peek past CTE prefix (the security-critical bit)
+    if (leadKeyword === 'WITH') {
+        const afterCte = skipCteList(rawQuery, first.nextIndex);
+        if (afterCte < 0) {
+            return { kind: 'reject', reason: 'Malformed CTE prefix' };
+        }
+        const realFirst = readNextKeyword(rawQuery, afterCte);
+        if (!realFirst) {
+            return { kind: 'reject', reason: 'No statement after CTE prefix' };
+        }
+        leadKeyword = realFirst.keyword;
+        leadIndex = realFirst.nextIndex;
+    }
+    // Also reject any DROP/TRUNCATE anywhere in the query as defense-in-depth.
+    // (visualization-server's outer check already does this, but classify it
+    // here too so the function is correct on its own.)
+    if (DESTROY_KEYWORDS.has(leadKeyword)) {
+        return { kind: 'destroy', operation: leadKeyword };
+    }
+    if (WRITE_KEYWORDS.has(leadKeyword)) {
+        return { kind: 'write', operation: leadKeyword };
+    }
+    if (READ_KEYWORDS.has(leadKeyword)) {
+        return { kind: 'read' };
+    }
+    void leadIndex; // not needed by callers, but useful while debugging
+    return { kind: 'reject', reason: `Unrecognised leading keyword: ${leadKeyword}` };
+}

package/dist/api/visualization-server.js CHANGED Viewed

@@ -40,6 +40,7 @@ import { registerDigestRoutes } from './routes/digest.js';
 import { registerSessionRoutes } from './routes/sessions.js';
 import { createIronDomeRouteGuard } from './iron-dome-route-guard.js';
 import { readAndClearDetectionEvents } from '../xray/activity.js';
+import { classifySqlQuery } from './sql-classifier.js';
 const PORT = process.env.PORT || 3001;
 /**
  * In-memory counters for FEATURE_GATED (403) responses per feature.
@@ -157,15 +158,19 @@ export function startVisualizationServer(dbPath) {
         });
     }
     function classifySqlAction(req) {
-        const query = typeof req.body?.query === 'string' ? req.body.query.trim().toUpperCase() : '';
-        if (!query)
+        const query = typeof req.body?.query === 'string' ? req.body.query : '';
+        if (!query.trim())
             return 'database_migrate';
-        if (query.startsWith('SELECT') || query.startsWith('PRAGMA'))
+        // PURGE is application-level (not a real SQL keyword) — keep the regex check.
+        if (/\bPURGE\b/i.test(query))
+            return 'destroy';
+        const classification = classifySqlQuery(query);
+        if (classification.kind === 'read')
             return 'run_report';
-        if (/\bDELETE\b/.test(query))
-            return 'delete';
-        if (/\bDROP\b|\bTRUNCATE\b|\bPURGE\b/.test(query))
+        if (classification.kind === 'destroy')
             return 'destroy';
+        if (classification.kind === 'write' && classification.operation === 'DELETE')
+            return 'delete';
         return 'database_migrate';
     }
     // ============================================
@@ -213,29 +218,30 @@ export function startVisualizationServer(dbPath) {
             if (!query || typeof query !== 'string') {
                 return res.status(400).json({ error: 'Query string required' });
             }
-            const upperQuery = query.toUpperCase().trim();
-            // Always block DROP and TRUNCATE
-            if (/\bDROP\b/.test(upperQuery) || /\bTRUNCATE\b/.test(upperQuery)) {
+            // Classify the query — robust against CTE prefixes that would bypass
+            // a naive `startsWith('INSERT'|'UPDATE'|...)` check, e.g.
+            //   WITH t AS (SELECT 1) INSERT INTO memories VALUES (...)
+            const classification = classifySqlQuery(query);
+            // Always block DROP and TRUNCATE (and reject anything we can't classify)
+            if (classification.kind === 'destroy') {
                 return res.status(403).json({
                     error: 'DROP and TRUNCATE operations are blocked for safety',
                 });
             }
+            if (classification.kind === 'reject') {
+                return res.status(400).json({
+                    error: `Query rejected: ${classification.reason}`,
+                });
+            }
             // Block writes unless explicitly allowed
-            const isWriteOperation = upperQuery.startsWith('INSERT') ||
-                upperQuery.startsWith('UPDATE') ||
-                upperQuery.startsWith('DELETE') ||
-                upperQuery.startsWith('ALTER') ||
-                upperQuery.startsWith('CREATE');
-            if (isWriteOperation && !allowWrite) {
+            if (classification.kind === 'write' && !allowWrite) {
                 return res.status(403).json({
                     error: 'Write operations are disabled. Enable allowWrite to execute.',
                 });
             }
             const db = getDatabase();
             const startTime = Date.now();
-            // Execute query
-            const isSelect = upperQuery.startsWith('SELECT') || upperQuery.startsWith('PRAGMA');
-            if (isSelect) {
+            if (classification.kind === 'read') {
                 const rows = db.prepare(query).all();
                 const executionTime = Date.now() - startTime;
                 // Get column names from first row or empty
@@ -248,7 +254,7 @@ export function startVisualizationServer(dbPath) {
                 });
             }
             else {
-                // Write operation
+                // Write operation (allowWrite === true at this point)
                 const result = db.prepare(query).run();
                 const executionTime = Date.now() - startTime;
                 res.json({

package/dist/cloud/cli.js CHANGED Viewed

@@ -1,4 +1,4 @@
-import { getCloudConfig, setCloudConfig, getDefenceMode, setDefenceMode, getVerifyConfig, setVerifyConfig, getReviewCopilotConfig, getOpenClawAutoMemory, setOpenClawAutoMemory, isProactiveRecallEnabled, setProactiveRecall, restore410Defaults, getRankerConfig, setRankerConfig, } from './config.js';
+import { getCloudConfig, setCloudConfig, getCloudSyncControls, setCloudSyncControls, getDefenceMode, setDefenceMode, getVerifyConfig, setVerifyConfig, getReviewCopilotConfig, getOpenClawAutoMemory, setOpenClawAutoMemory, isProactiveRecallEnabled, setProactiveRecall, restore410Defaults, getRankerConfig, setRankerConfig, } from './config.js';
 const VALID_RANKER_ENGINES = ['rrf', 'legacy'];
 import { syncAllGraphToCloud } from './graph-sync.js';
 import { syncAllMemoriesToCloud } from './memory-sync.js';
@@ -16,12 +16,14 @@ export function handleCloudConfig(args) {
         const reviewCopilot = getReviewCopilotConfig();
         const openclawAutoMemory = getOpenClawAutoMemory();
         const ranker = getRankerConfig();
+        const syncControls = getCloudSyncControls();
         const rankerOverridden = !!process.env.SHIELDCORTEX_RANKER;
         console.log('\nShieldCortex Configuration:');
         console.log(`  Defence Mode: ${mode}`);
         console.log(`  Cloud Enabled:  ${config.cloudEnabled ? 'Yes' : 'No'}`);
         console.log(`  API Key:  ${config.cloudApiKey ? config.cloudApiKey.substring(0, 12) + '...' : 'Not set'}`);
         console.log(`  Base URL: ${config.cloudBaseUrl}`);
+        console.log(`  Sensitive Memories: ${syncControls.excludeSensitive ? 'Excluded from sync (safe default)' : 'Included in sync'}`);
         console.log(`  LLM Verify:   ${verify.verifyEnabled ? 'Enabled' : 'Disabled'} (${verify.verifyMode}, ${verify.verifyTimeoutMs}ms timeout)`);
         console.log(`  Verify Triggers: ${verify.verifyTriggers.join(', ')}`);
         console.log(`  Local AI Explainer: ${reviewCopilot.enabled ? 'Enabled' : 'Disabled'} (${reviewCopilot.modelId})`);
@@ -65,6 +67,21 @@ export function handleCloudConfig(args) {
         console.log('Cloud sync disabled.');
         changed = true;
     }
+    // ── Sensitive-content opt-in/opt-out ──
+    // Default since v4.27: CONFIDENTIAL+ memories are NOT shipped to the cloud.
+    // Users who genuinely want to mirror sensitive content (e.g. self-hosted
+    // backend on their own network) can opt back in here.
+    if (args.includes('--cloud-include-sensitive')) {
+        setCloudSyncControls({ excludeSensitive: false });
+        console.log('Cloud sync will now include CONFIDENTIAL+ memories.');
+        console.log('Note: content is sent to your configured cloudBaseUrl in full.');
+        changed = true;
+    }
+    if (args.includes('--cloud-exclude-sensitive')) {
+        setCloudSyncControls({ excludeSensitive: true });
+        console.log('Cloud sync will skip CONFIDENTIAL+ memories (default).');
+        changed = true;
+    }
     // ── Verify flags ──
     if (args.includes('--verify-enable')) {
         const config = getCloudConfig();
@@ -190,6 +207,8 @@ export function handleCloudConfig(args) {
         console.log('  --cloud-url <url>      Set cloud base URL');
         console.log('  --cloud-enable         Enable cloud sync');
         console.log('  --cloud-disable        Disable cloud sync');
+        console.log('  --cloud-include-sensitive  Sync CONFIDENTIAL+ memories (off by default since v4.27)');
+        console.log('  --cloud-exclude-sensitive  Stop syncing CONFIDENTIAL+ memories (default)');
         console.log('  --cloud-status         Show current configuration');
         console.log('  --openclaw-auto-memory <true|false>  Extract memories from OpenClaw LLM output (default: off)');
         console.log('  --proactive-recall <true|false>  Inject SC memory into prompts (default: off — adds latency)');

package/dist/cloud/config.js CHANGED Viewed

@@ -18,11 +18,18 @@ function getIntegrityKeyFile() {
     return join(getConfigDir(), '.integrity-key');
 }
 const DEFAULT_BASE_URL = 'https://api.shieldcortex.ai';
+// Safety-first defaults: CONFIDENTIAL+ memories are NOT shipped to the cloud
+// unless the user explicitly opts in via `--cloud-include-sensitive` or the
+// dashboard. Prior to the v4.27 flip, `excludeSensitive` defaulted to false,
+// which meant enabling cloud sync silently shipped credential-bearing /
+// classified content without per-record consent. `contentMode` stays 'full'
+// so the opt-in sync stream remains useful for PUBLIC/INTERNAL records that
+// the user did consent to share.
 const DEFAULT_SYNC_CONTROLS = {
     projectMode: 'all',
     projects: [],
     contentMode: 'full',
-    excludeSensitive: false,
+    excludeSensitive: true,
 };
 const DEFAULT_REVIEW_COPILOT_CONFIG = {
     enabled: false,
@@ -164,6 +171,19 @@ function normalizeProjectList(value) {
 }
 export function getCloudSyncControls() {
     const raw = readRawConfig();
+    // One-shot v4.27 migration: pre-upgrade configs with cloud sync enabled
+    // were silently shipping CONFIDENTIAL+ content because `excludeSensitive`
+    // defaulted to false. Detect those configs (cloud on, no explicit setting,
+    // no prior migration stamp) and rewrite them to the new safe default. If
+    // the user later opts back in via `--cloud-include-sensitive`, that writes
+    // `cloudSyncExcludeSensitive: false` explicitly and this branch is skipped.
+    if (raw.cloudEnabled === true &&
+        typeof raw.cloudSyncExcludeSensitive !== 'boolean' &&
+        typeof raw.cloudSyncDefaultsMigratedAt !== 'string') {
+        raw.cloudSyncExcludeSensitive = true;
+        raw.cloudSyncDefaultsMigratedAt = new Date().toISOString();
+        writeRawConfig(raw);
+    }
     const projectMode = raw.cloudSyncProjectMode;
     const contentMode = raw.cloudSyncContentMode;
     return {

package/dist/cloud/memory-sync.d.ts CHANGED Viewed

@@ -28,6 +28,11 @@ export interface MemorySyncEnvelope {
         platform: string;
     };
 }
+/**
+ * Per-record sync gate. Exported for unit testing the safety contract:
+ * a CONFIDENTIAL record on fresh-default controls MUST return false.
+ */
+export declare function shouldSyncRecord(record: Pick<SyncedMemoryRecord, 'project' | 'sensitivity_level' | 'cloud_excluded'>): boolean;
 export declare function syncMemoryUpsertToCloud(memory: Memory): void;
 export declare function syncMemoryDeleteToCloud(memory: Memory): void;
 export declare function syncAllMemoriesToCloud(): Promise<{

package/dist/cloud/memory-sync.js CHANGED Viewed

@@ -44,7 +44,11 @@ function buildEnvelope(records) {
         },
     };
 }
-function shouldSyncRecord(record) {
+/**
+ * Per-record sync gate. Exported for unit testing the safety contract:
+ * a CONFIDENTIAL record on fresh-default controls MUST return false.
+ */
+export function shouldSyncRecord(record) {
     if (record.cloud_excluded)
         return false;
     const controls = getCloudSyncControls();

package/dist/cloud/verify.js CHANGED Viewed

@@ -27,9 +27,10 @@ export async function submitVerification(content, title, pipelineResult, source)
     }
     // Redact credentials before sending to cloud
     const cleanContent = redactCredentials(content);
+    const cleanTitle = redactCredentials(title);
     const payload = {
         content: cleanContent,
-        title,
+        title: cleanTitle,
         source_type: source.type,
         source_identifier: source.identifier,
         anomaly_score: pipelineResult.firewall.anomalyScore,