npm - shieldcortex - Versions diffs - 4.27.3 → 4.28.1 - Mend

shieldcortex 4.27.3 → 4.28.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (235) hide show

package/dashboard/.next/standalone/dashboard/.next/server/pages/404.html CHANGED Viewed

@@ -1,4 +1,4 @@
-<!DOCTYPE html><!--ObhI00_RVqLccblwYt339--><html lang="en" class="dark" data-theme="terminal"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="/_next/static/chunks/a7d5d0791c8c6223.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/chunks/aee9601911b790ca.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/d878b929b21636c4.js"/><script src="/_next/static/chunks/f70f563804550a9c.js" async=""></script><script src="/_next/static/chunks/43d761df92da7cb6.js" async=""></script><script src="/_next/static/chunks/e281719dbabcca1d.js" async=""></script><script src="/_next/static/chunks/9e56d1f8f4d7adcb.js" async=""></script><script src="/_next/static/chunks/turbopack-768a6a8b9db952e0.js" async=""></script><script src="/_next/static/chunks/4ddb24d8ce3b8617.js" async=""></script><script src="/_next/static/chunks/417032eeb2cd875f.js" async=""></script><script src="/_next/static/chunks/d334b69bff7779be.js" async=""></script><meta name="robots" content="noindex"/><meta name="next-size-adjust" content=""/><title>404: This page could not be found.</title><title>ShieldCortex</title><meta name="description" content="AI Memory Security Dashboard — Defence pipeline, audit logs, quarantine review"/><script>
+<!DOCTYPE html><!--N9XiRuuRX4eTtiJFa43tY--><html lang="en" class="dark" data-theme="terminal"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="/_next/static/chunks/a7d5d0791c8c6223.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/chunks/aee9601911b790ca.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/d878b929b21636c4.js"/><script src="/_next/static/chunks/f70f563804550a9c.js" async=""></script><script src="/_next/static/chunks/43d761df92da7cb6.js" async=""></script><script src="/_next/static/chunks/e281719dbabcca1d.js" async=""></script><script src="/_next/static/chunks/9e56d1f8f4d7adcb.js" async=""></script><script src="/_next/static/chunks/turbopack-768a6a8b9db952e0.js" async=""></script><script src="/_next/static/chunks/4ddb24d8ce3b8617.js" async=""></script><script src="/_next/static/chunks/417032eeb2cd875f.js" async=""></script><script src="/_next/static/chunks/d334b69bff7779be.js" async=""></script><meta name="robots" content="noindex"/><meta name="next-size-adjust" content=""/><title>404: This page could not be found.</title><title>ShieldCortex</title><meta name="description" content="AI Memory Security Dashboard — Defence pipeline, audit logs, quarantine review"/><script>
 try {
   var t = localStorage.getItem('sc-theme');
   if (t !== 'glass' && t !== 'terminal') t = 'terminal';
@@ -6,4 +6,4 @@ try {
 } catch (e) {
   document.documentElement.dataset.theme = 'terminal';
 }
-</script><script src="/_next/static/chunks/a6dad97d9634a72d.js" noModule=""></script></head><body class="geist_a71539c9-module__T19VSG__variable geist_mono_8d43a2aa-module__8Li5zG__variable antialiased bg-slate-950"><div hidden=""><!--$--><!--/$--></div><div style="font-family:system-ui,&quot;Segoe UI&quot;,Roboto,Helvetica,Arial,sans-serif,&quot;Apple Color Emoji&quot;,&quot;Segoe UI Emoji&quot;;height:100vh;text-align:center;display:flex;flex-direction:column;align-items:center;justify-content:center"><div><style>body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}</style><h1 class="next-error-h1" style="display:inline-block;margin:0 20px 0 0;padding:0 23px 0 0;font-size:24px;font-weight:500;vertical-align:top;line-height:49px">404</h1><div style="display:inline-block"><h2 style="font-size:14px;font-weight:400;line-height:49px;margin:0">This page could not be found.</h2></div></div></div><!--$--><!--/$--><script src="/_next/static/chunks/d878b929b21636c4.js" id="_R_" async=""></script><script>(self.__next_f=self.__next_f||[]).push([0])</script><script>self.__next_f.push([1,"1:\"$Sreact.fragment\"\n2:I[36111,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"Providers\"]\n3:I[57043,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n4:I[10445,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\",\"/_next/static/chunks/d334b69bff7779be.js\"],\"default\"]\n5:I[27657,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n6:I[56978,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"OutletBoundary\"]\n7:\"$Sreact.suspense\"\n9:I[56978,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"ViewportBoundary\"]\nb:I[56978,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"MetadataBoundary\"]\nd:I[30687,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n:HL[\"/_next/static/chunks/a7d5d0791c8c6223.css\",\"style\"]\n:HL[\"/_next/static/chunks/aee9601911b790ca.css\",\"style\"]\n"])</script><script>self.__next_f.push([1,"0:{\"P\":null,\"b\":\"ObhI00_RVqLccblwYt339\",\"c\":[\"\",\"_not-found\"],\"q\":\"\",\"i\":false,\"f\":[[[\"\",{\"children\":[\"/_not-found\",{\"children\":[\"__PAGE__\",{}]}]},\"$undefined\",\"$undefined\",true],[[\"$\",\"$1\",\"c\",{\"children\":[[[\"$\",\"link\",\"0\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/chunks/a7d5d0791c8c6223.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\",\"nonce\":\"$undefined\"}],[\"$\",\"link\",\"1\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/chunks/aee9601911b790ca.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\",\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-0\",{\"src\":\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"async\":true,\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-1\",{\"src\":\"/_next/static/chunks/417032eeb2cd875f.js\",\"async\":true,\"nonce\":\"$undefined\"}]],[\"$\",\"html\",null,{\"lang\":\"en\",\"className\":\"dark\",\"data-theme\":\"terminal\",\"suppressHydrationWarning\":true,\"children\":[[\"$\",\"head\",null,{\"children\":[\"$\",\"script\",null,{\"dangerouslySetInnerHTML\":{\"__html\":\"\\ntry {\\n  var t = localStorage.getItem('sc-theme');\\n  if (t !== 'glass' \u0026\u0026 t !== 'terminal') t = 'terminal';\\n  document.documentElement.dataset.theme = t;\\n} catch (e) {\\n  document.documentElement.dataset.theme = 'terminal';\\n}\\n\"}}]}],[\"$\",\"body\",null,{\"className\":\"geist_a71539c9-module__T19VSG__variable geist_mono_8d43a2aa-module__8Li5zG__variable antialiased bg-slate-950\",\"children\":[\"$\",\"$L2\",null,{\"children\":[\"$\",\"$L3\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$4\",\"errorStyles\":[],\"errorScripts\":[[\"$\",\"script\",\"script-0\",{\"src\":\"/_next/static/chunks/d334b69bff7779be.js\",\"async\":true}]],\"template\":[\"$\",\"$L5\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":[[[\"$\",\"title\",null,{\"children\":\"404: This page could not be found.\"}],[\"$\",\"div\",null,{\"style\":{\"fontFamily\":\"system-ui,\\\"Segoe UI\\\",Roboto,Helvetica,Arial,sans-serif,\\\"Apple Color Emoji\\\",\\\"Segoe UI Emoji\\\"\",\"height\":\"100vh\",\"textAlign\":\"center\",\"display\":\"flex\",\"flexDirection\":\"column\",\"alignItems\":\"center\",\"justifyContent\":\"center\"},\"children\":[\"$\",\"div\",null,{\"children\":[[\"$\",\"style\",null,{\"dangerouslySetInnerHTML\":{\"__html\":\"body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}\"}}],[\"$\",\"h1\",null,{\"className\":\"next-error-h1\",\"style\":{\"display\":\"inline-block\",\"margin\":\"0 20px 0 0\",\"padding\":\"0 23px 0 0\",\"fontSize\":24,\"fontWeight\":500,\"verticalAlign\":\"top\",\"lineHeight\":\"49px\"},\"children\":404}],[\"$\",\"div\",null,{\"style\":{\"display\":\"inline-block\"},\"children\":[\"$\",\"h2\",null,{\"style\":{\"fontSize\":14,\"fontWeight\":400,\"lineHeight\":\"49px\",\"margin\":0},\"children\":\"This page could not be found.\"}]}]]}]}]],[]],\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]}]}]]}]]}],{\"children\":[[\"$\",\"$1\",\"c\",{\"children\":[null,[\"$\",\"$L3\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L5\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":\"$undefined\",\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]]}],{\"children\":[[\"$\",\"$1\",\"c\",{\"children\":[[[\"$\",\"title\",null,{\"children\":\"404: This page could not be found.\"}],[\"$\",\"div\",null,{\"style\":\"$0:f:0:1:0:props:children:1:props:children:1:props:children:props:children:props:notFound:0:1:props:style\",\"children\":[\"$\",\"div\",null,{\"children\":[[\"$\",\"style\",null,{\"dangerouslySetInnerHTML\":{\"__html\":\"body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}\"}}],[\"$\",\"h1\",null,{\"className\":\"next-error-h1\",\"style\":\"$0:f:0:1:0:props:children:1:props:children:1:props:children:props:children:props:notFound:0:1:props:children:props:children:1:props:style\",\"children\":404}],[\"$\",\"div\",null,{\"style\":\"$0:f:0:1:0:props:children:1:props:children:1:props:children:props:children:props:notFound:0:1:props:children:props:children:2:props:style\",\"children\":[\"$\",\"h2\",null,{\"style\":\"$0:f:0:1:0:props:children:1:props:children:1:props:children:props:children:props:notFound:0:1:props:children:props:children:2:props:children:props:style\",\"children\":\"This page could not be found.\"}]}]]}]}]],null,[\"$\",\"$L6\",null,{\"children\":[\"$\",\"$7\",null,{\"name\":\"Next.MetadataOutlet\",\"children\":\"$@8\"}]}]]}],{},null,false,false]},null,false,false]},null,false,false],[\"$\",\"$1\",\"h\",{\"children\":[[\"$\",\"meta\",null,{\"name\":\"robots\",\"content\":\"noindex\"}],[\"$\",\"$L9\",null,{\"children\":\"$La\"}],[\"$\",\"div\",null,{\"hidden\":true,\"children\":[\"$\",\"$Lb\",null,{\"children\":[\"$\",\"$7\",null,{\"name\":\"Next.Metadata\",\"children\":\"$Lc\"}]}]}],[\"$\",\"meta\",null,{\"name\":\"next-size-adjust\",\"content\":\"\"}]]}],false]],\"m\":\"$undefined\",\"G\":[\"$d\",\"$undefined\"],\"S\":true}\n"])</script><script>self.__next_f.push([1,"a:[[\"$\",\"meta\",\"0\",{\"charSet\":\"utf-8\"}],[\"$\",\"meta\",\"1\",{\"name\":\"viewport\",\"content\":\"width=device-width, initial-scale=1\"}]]\n"])</script><script>self.__next_f.push([1,"8:null\nc:[[\"$\",\"title\",\"0\",{\"children\":\"ShieldCortex\"}],[\"$\",\"meta\",\"1\",{\"name\":\"description\",\"content\":\"AI Memory Security Dashboard — Defence pipeline, audit logs, quarantine review\"}]]\n"])</script></body></html>
+</script><script src="/_next/static/chunks/a6dad97d9634a72d.js" noModule=""></script></head><body class="geist_a71539c9-module__T19VSG__variable geist_mono_8d43a2aa-module__8Li5zG__variable antialiased bg-slate-950"><div hidden=""><!--$--><!--/$--></div><div style="font-family:system-ui,&quot;Segoe UI&quot;,Roboto,Helvetica,Arial,sans-serif,&quot;Apple Color Emoji&quot;,&quot;Segoe UI Emoji&quot;;height:100vh;text-align:center;display:flex;flex-direction:column;align-items:center;justify-content:center"><div><style>body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}</style><h1 class="next-error-h1" style="display:inline-block;margin:0 20px 0 0;padding:0 23px 0 0;font-size:24px;font-weight:500;vertical-align:top;line-height:49px">404</h1><div style="display:inline-block"><h2 style="font-size:14px;font-weight:400;line-height:49px;margin:0">This page could not be found.</h2></div></div></div><!--$--><!--/$--><script src="/_next/static/chunks/d878b929b21636c4.js" id="_R_" async=""></script><script>(self.__next_f=self.__next_f||[]).push([0])</script><script>self.__next_f.push([1,"1:\"$Sreact.fragment\"\n2:I[36111,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"Providers\"]\n3:I[57043,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n4:I[10445,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\",\"/_next/static/chunks/d334b69bff7779be.js\"],\"default\"]\n5:I[27657,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n6:I[56978,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"OutletBoundary\"]\n7:\"$Sreact.suspense\"\n9:I[56978,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"ViewportBoundary\"]\nb:I[56978,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"MetadataBoundary\"]\nd:I[30687,[\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n:HL[\"/_next/static/chunks/a7d5d0791c8c6223.css\",\"style\"]\n:HL[\"/_next/static/chunks/aee9601911b790ca.css\",\"style\"]\n"])</script><script>self.__next_f.push([1,"0:{\"P\":null,\"b\":\"N9XiRuuRX4eTtiJFa43tY\",\"c\":[\"\",\"_not-found\"],\"q\":\"\",\"i\":false,\"f\":[[[\"\",{\"children\":[\"/_not-found\",{\"children\":[\"__PAGE__\",{}]}]},\"$undefined\",\"$undefined\",true],[[\"$\",\"$1\",\"c\",{\"children\":[[[\"$\",\"link\",\"0\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/chunks/a7d5d0791c8c6223.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\",\"nonce\":\"$undefined\"}],[\"$\",\"link\",\"1\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/chunks/aee9601911b790ca.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\",\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-0\",{\"src\":\"/_next/static/chunks/4ddb24d8ce3b8617.js\",\"async\":true,\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-1\",{\"src\":\"/_next/static/chunks/417032eeb2cd875f.js\",\"async\":true,\"nonce\":\"$undefined\"}]],[\"$\",\"html\",null,{\"lang\":\"en\",\"className\":\"dark\",\"data-theme\":\"terminal\",\"suppressHydrationWarning\":true,\"children\":[[\"$\",\"head\",null,{\"children\":[\"$\",\"script\",null,{\"dangerouslySetInnerHTML\":{\"__html\":\"\\ntry {\\n  var t = localStorage.getItem('sc-theme');\\n  if (t !== 'glass' \u0026\u0026 t !== 'terminal') t = 'terminal';\\n  document.documentElement.dataset.theme = t;\\n} catch (e) {\\n  document.documentElement.dataset.theme = 'terminal';\\n}\\n\"}}]}],[\"$\",\"body\",null,{\"className\":\"geist_a71539c9-module__T19VSG__variable geist_mono_8d43a2aa-module__8Li5zG__variable antialiased bg-slate-950\",\"children\":[\"$\",\"$L2\",null,{\"children\":[\"$\",\"$L3\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$4\",\"errorStyles\":[],\"errorScripts\":[[\"$\",\"script\",\"script-0\",{\"src\":\"/_next/static/chunks/d334b69bff7779be.js\",\"async\":true}]],\"template\":[\"$\",\"$L5\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":[[[\"$\",\"title\",null,{\"children\":\"404: This page could not be found.\"}],[\"$\",\"div\",null,{\"style\":{\"fontFamily\":\"system-ui,\\\"Segoe UI\\\",Roboto,Helvetica,Arial,sans-serif,\\\"Apple Color Emoji\\\",\\\"Segoe UI Emoji\\\"\",\"height\":\"100vh\",\"textAlign\":\"center\",\"display\":\"flex\",\"flexDirection\":\"column\",\"alignItems\":\"center\",\"justifyContent\":\"center\"},\"children\":[\"$\",\"div\",null,{\"children\":[[\"$\",\"style\",null,{\"dangerouslySetInnerHTML\":{\"__html\":\"body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}\"}}],[\"$\",\"h1\",null,{\"className\":\"next-error-h1\",\"style\":{\"display\":\"inline-block\",\"margin\":\"0 20px 0 0\",\"padding\":\"0 23px 0 0\",\"fontSize\":24,\"fontWeight\":500,\"verticalAlign\":\"top\",\"lineHeight\":\"49px\"},\"children\":404}],[\"$\",\"div\",null,{\"style\":{\"display\":\"inline-block\"},\"children\":[\"$\",\"h2\",null,{\"style\":{\"fontSize\":14,\"fontWeight\":400,\"lineHeight\":\"49px\",\"margin\":0},\"children\":\"This page could not be found.\"}]}]]}]}]],[]],\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]}]}]]}]]}],{\"children\":[[\"$\",\"$1\",\"c\",{\"children\":[null,[\"$\",\"$L3\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L5\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":\"$undefined\",\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]]}],{\"children\":[[\"$\",\"$1\",\"c\",{\"children\":[[[\"$\",\"title\",null,{\"children\":\"404: This page could not be found.\"}],[\"$\",\"div\",null,{\"style\":\"$0:f:0:1:0:props:children:1:props:children:1:props:children:props:children:props:notFound:0:1:props:style\",\"children\":[\"$\",\"div\",null,{\"children\":[[\"$\",\"style\",null,{\"dangerouslySetInnerHTML\":{\"__html\":\"body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}\"}}],[\"$\",\"h1\",null,{\"className\":\"next-error-h1\",\"style\":\"$0:f:0:1:0:props:children:1:props:children:1:props:children:props:children:props:notFound:0:1:props:children:props:children:1:props:style\",\"children\":404}],[\"$\",\"div\",null,{\"style\":\"$0:f:0:1:0:props:children:1:props:children:1:props:children:props:children:props:notFound:0:1:props:children:props:children:2:props:style\",\"children\":[\"$\",\"h2\",null,{\"style\":\"$0:f:0:1:0:props:children:1:props:children:1:props:children:props:children:props:notFound:0:1:props:children:props:children:2:props:children:props:style\",\"children\":\"This page could not be found.\"}]}]]}]}]],null,[\"$\",\"$L6\",null,{\"children\":[\"$\",\"$7\",null,{\"name\":\"Next.MetadataOutlet\",\"children\":\"$@8\"}]}]]}],{},null,false,false]},null,false,false]},null,false,false],[\"$\",\"$1\",\"h\",{\"children\":[[\"$\",\"meta\",null,{\"name\":\"robots\",\"content\":\"noindex\"}],[\"$\",\"$L9\",null,{\"children\":\"$La\"}],[\"$\",\"div\",null,{\"hidden\":true,\"children\":[\"$\",\"$Lb\",null,{\"children\":[\"$\",\"$7\",null,{\"name\":\"Next.Metadata\",\"children\":\"$Lc\"}]}]}],[\"$\",\"meta\",null,{\"name\":\"next-size-adjust\",\"content\":\"\"}]]}],false]],\"m\":\"$undefined\",\"G\":[\"$d\",\"$undefined\"],\"S\":true}\n"])</script><script>self.__next_f.push([1,"a:[[\"$\",\"meta\",\"0\",{\"charSet\":\"utf-8\"}],[\"$\",\"meta\",\"1\",{\"name\":\"viewport\",\"content\":\"width=device-width, initial-scale=1\"}]]\n"])</script><script>self.__next_f.push([1,"8:null\nc:[[\"$\",\"title\",\"0\",{\"children\":\"ShieldCortex\"}],[\"$\",\"meta\",\"1\",{\"name\":\"description\",\"content\":\"AI Memory Security Dashboard — Defence pipeline, audit logs, quarantine review\"}]]\n"])</script></body></html>

package/dashboard/.next/standalone/dashboard/.next/server/pages/500.html CHANGED Viewed

@@ -1,2 +1,2 @@
-<!DOCTYPE html><!--ObhI00_RVqLccblwYt339--><html id="__next_error__"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/d878b929b21636c4.js"/><script src="/_next/static/chunks/f70f563804550a9c.js" async=""></script><script src="/_next/static/chunks/43d761df92da7cb6.js" async=""></script><script src="/_next/static/chunks/e281719dbabcca1d.js" async=""></script><script src="/_next/static/chunks/9e56d1f8f4d7adcb.js" async=""></script><script src="/_next/static/chunks/turbopack-768a6a8b9db952e0.js" async=""></script><script src="/_next/static/chunks/102f894cc892994d.js" async=""></script><script src="/_next/static/chunks/417032eeb2cd875f.js" async=""></script><meta name="next-size-adjust" content=""/><title>500: Internal Server Error.</title><script src="/_next/static/chunks/a6dad97d9634a72d.js" noModule=""></script></head><body><div hidden=""><!--$--><!--/$--></div><div style="font-family:system-ui,&quot;Segoe UI&quot;,Roboto,Helvetica,Arial,sans-serif,&quot;Apple Color Emoji&quot;,&quot;Segoe UI Emoji&quot;;height:100vh;text-align:center;display:flex;flex-direction:column;align-items:center;justify-content:center"><div style="line-height:48px"><style>body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}
-@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}</style><h1 class="next-error-h1" style="display:inline-block;margin:0 20px 0 0;padding-right:23px;font-size:24px;font-weight:500;vertical-align:top">500</h1><div style="display:inline-block"><h2 style="font-size:14px;font-weight:400;line-height:28px">Internal Server Error.</h2></div></div></div><!--$--><!--/$--><script src="/_next/static/chunks/d878b929b21636c4.js" id="_R_" async=""></script><script>(self.__next_f=self.__next_f||[]).push([0])</script><script>self.__next_f.push([1,"1:\"$Sreact.fragment\"\n2:I[57043,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n3:I[27657,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n4:I[56978,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"OutletBoundary\"]\n5:\"$Sreact.suspense\"\n7:I[56978,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"ViewportBoundary\"]\n9:I[56978,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"MetadataBoundary\"]\nb:I[30687,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n"])</script><script>self.__next_f.push([1,"0:{\"P\":null,\"b\":\"ObhI00_RVqLccblwYt339\",\"c\":[\"\",\"_global-error\"],\"q\":\"\",\"i\":false,\"f\":[[[\"\",{\"children\":[\"__PAGE__\",{}]}],[[\"$\",\"$1\",\"c\",{\"children\":[null,[\"$\",\"$L2\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L3\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":\"$undefined\",\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]]}],{\"children\":[[\"$\",\"$1\",\"c\",{\"children\":[[\"$\",\"html\",null,{\"id\":\"__next_error__\",\"children\":[[\"$\",\"head\",null,{\"children\":[\"$\",\"title\",null,{\"children\":\"500: Internal Server Error.\"}]}],[\"$\",\"body\",null,{\"children\":[\"$\",\"div\",null,{\"style\":{\"fontFamily\":\"system-ui,\\\"Segoe UI\\\",Roboto,Helvetica,Arial,sans-serif,\\\"Apple Color Emoji\\\",\\\"Segoe UI Emoji\\\"\",\"height\":\"100vh\",\"textAlign\":\"center\",\"display\":\"flex\",\"flexDirection\":\"column\",\"alignItems\":\"center\",\"justifyContent\":\"center\"},\"children\":[\"$\",\"div\",null,{\"style\":{\"lineHeight\":\"48px\"},\"children\":[[\"$\",\"style\",null,{\"dangerouslySetInnerHTML\":{\"__html\":\"body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}\\n@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}\"}}],[\"$\",\"h1\",null,{\"className\":\"next-error-h1\",\"style\":{\"display\":\"inline-block\",\"margin\":\"0 20px 0 0\",\"paddingRight\":23,\"fontSize\":24,\"fontWeight\":500,\"verticalAlign\":\"top\"},\"children\":\"500\"}],[\"$\",\"div\",null,{\"style\":{\"display\":\"inline-block\"},\"children\":[\"$\",\"h2\",null,{\"style\":{\"fontSize\":14,\"fontWeight\":400,\"lineHeight\":\"28px\"},\"children\":\"Internal Server Error.\"}]}]]}]}]}]]}],[[\"$\",\"script\",\"script-0\",{\"src\":\"/_next/static/chunks/102f894cc892994d.js\",\"async\":true,\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-1\",{\"src\":\"/_next/static/chunks/417032eeb2cd875f.js\",\"async\":true,\"nonce\":\"$undefined\"}]],[\"$\",\"$L4\",null,{\"children\":[\"$\",\"$5\",null,{\"name\":\"Next.MetadataOutlet\",\"children\":\"$@6\"}]}]]}],{},null,false,false]},null,false,false],[\"$\",\"$1\",\"h\",{\"children\":[null,[\"$\",\"$L7\",null,{\"children\":\"$L8\"}],[\"$\",\"div\",null,{\"hidden\":true,\"children\":[\"$\",\"$L9\",null,{\"children\":[\"$\",\"$5\",null,{\"name\":\"Next.Metadata\",\"children\":\"$La\"}]}]}],[\"$\",\"meta\",null,{\"name\":\"next-size-adjust\",\"content\":\"\"}]]}],false]],\"m\":\"$undefined\",\"G\":[\"$b\",\"$undefined\"],\"S\":true}\n"])</script><script>self.__next_f.push([1,"8:[[\"$\",\"meta\",\"0\",{\"charSet\":\"utf-8\"}],[\"$\",\"meta\",\"1\",{\"name\":\"viewport\",\"content\":\"width=device-width, initial-scale=1\"}]]\n"])</script><script>self.__next_f.push([1,"6:null\na:[]\n"])</script></body></html>
+<!DOCTYPE html><!--N9XiRuuRX4eTtiJFa43tY--><html id="__next_error__"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/d878b929b21636c4.js"/><script src="/_next/static/chunks/f70f563804550a9c.js" async=""></script><script src="/_next/static/chunks/43d761df92da7cb6.js" async=""></script><script src="/_next/static/chunks/e281719dbabcca1d.js" async=""></script><script src="/_next/static/chunks/9e56d1f8f4d7adcb.js" async=""></script><script src="/_next/static/chunks/turbopack-768a6a8b9db952e0.js" async=""></script><script src="/_next/static/chunks/102f894cc892994d.js" async=""></script><script src="/_next/static/chunks/417032eeb2cd875f.js" async=""></script><meta name="next-size-adjust" content=""/><title>500: Internal Server Error.</title><script src="/_next/static/chunks/a6dad97d9634a72d.js" noModule=""></script></head><body><div hidden=""><!--$--><!--/$--></div><div style="font-family:system-ui,&quot;Segoe UI&quot;,Roboto,Helvetica,Arial,sans-serif,&quot;Apple Color Emoji&quot;,&quot;Segoe UI Emoji&quot;;height:100vh;text-align:center;display:flex;flex-direction:column;align-items:center;justify-content:center"><div style="line-height:48px"><style>body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}
+@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}</style><h1 class="next-error-h1" style="display:inline-block;margin:0 20px 0 0;padding-right:23px;font-size:24px;font-weight:500;vertical-align:top">500</h1><div style="display:inline-block"><h2 style="font-size:14px;font-weight:400;line-height:28px">Internal Server Error.</h2></div></div></div><!--$--><!--/$--><script src="/_next/static/chunks/d878b929b21636c4.js" id="_R_" async=""></script><script>(self.__next_f=self.__next_f||[]).push([0])</script><script>self.__next_f.push([1,"1:\"$Sreact.fragment\"\n2:I[57043,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n3:I[27657,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n4:I[56978,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"OutletBoundary\"]\n5:\"$Sreact.suspense\"\n7:I[56978,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"ViewportBoundary\"]\n9:I[56978,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"MetadataBoundary\"]\nb:I[30687,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n"])</script><script>self.__next_f.push([1,"0:{\"P\":null,\"b\":\"N9XiRuuRX4eTtiJFa43tY\",\"c\":[\"\",\"_global-error\"],\"q\":\"\",\"i\":false,\"f\":[[[\"\",{\"children\":[\"__PAGE__\",{}]}],[[\"$\",\"$1\",\"c\",{\"children\":[null,[\"$\",\"$L2\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L3\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":\"$undefined\",\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]]}],{\"children\":[[\"$\",\"$1\",\"c\",{\"children\":[[\"$\",\"html\",null,{\"id\":\"__next_error__\",\"children\":[[\"$\",\"head\",null,{\"children\":[\"$\",\"title\",null,{\"children\":\"500: Internal Server Error.\"}]}],[\"$\",\"body\",null,{\"children\":[\"$\",\"div\",null,{\"style\":{\"fontFamily\":\"system-ui,\\\"Segoe UI\\\",Roboto,Helvetica,Arial,sans-serif,\\\"Apple Color Emoji\\\",\\\"Segoe UI Emoji\\\"\",\"height\":\"100vh\",\"textAlign\":\"center\",\"display\":\"flex\",\"flexDirection\":\"column\",\"alignItems\":\"center\",\"justifyContent\":\"center\"},\"children\":[\"$\",\"div\",null,{\"style\":{\"lineHeight\":\"48px\"},\"children\":[[\"$\",\"style\",null,{\"dangerouslySetInnerHTML\":{\"__html\":\"body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}\\n@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}\"}}],[\"$\",\"h1\",null,{\"className\":\"next-error-h1\",\"style\":{\"display\":\"inline-block\",\"margin\":\"0 20px 0 0\",\"paddingRight\":23,\"fontSize\":24,\"fontWeight\":500,\"verticalAlign\":\"top\"},\"children\":\"500\"}],[\"$\",\"div\",null,{\"style\":{\"display\":\"inline-block\"},\"children\":[\"$\",\"h2\",null,{\"style\":{\"fontSize\":14,\"fontWeight\":400,\"lineHeight\":\"28px\"},\"children\":\"Internal Server Error.\"}]}]]}]}]}]]}],[[\"$\",\"script\",\"script-0\",{\"src\":\"/_next/static/chunks/102f894cc892994d.js\",\"async\":true,\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-1\",{\"src\":\"/_next/static/chunks/417032eeb2cd875f.js\",\"async\":true,\"nonce\":\"$undefined\"}]],[\"$\",\"$L4\",null,{\"children\":[\"$\",\"$5\",null,{\"name\":\"Next.MetadataOutlet\",\"children\":\"$@6\"}]}]]}],{},null,false,false]},null,false,false],[\"$\",\"$1\",\"h\",{\"children\":[null,[\"$\",\"$L7\",null,{\"children\":\"$L8\"}],[\"$\",\"div\",null,{\"hidden\":true,\"children\":[\"$\",\"$L9\",null,{\"children\":[\"$\",\"$5\",null,{\"name\":\"Next.Metadata\",\"children\":\"$La\"}]}]}],[\"$\",\"meta\",null,{\"name\":\"next-size-adjust\",\"content\":\"\"}]]}],false]],\"m\":\"$undefined\",\"G\":[\"$b\",\"$undefined\"],\"S\":true}\n"])</script><script>self.__next_f.push([1,"8:[[\"$\",\"meta\",\"0\",{\"charSet\":\"utf-8\"}],[\"$\",\"meta\",\"1\",{\"name\":\"viewport\",\"content\":\"width=device-width, initial-scale=1\"}]]\n"])</script><script>self.__next_f.push([1,"6:null\na:[]\n"])</script></body></html>

package/dist/api/routes/memories.js CHANGED Viewed

@@ -501,7 +501,7 @@ export function registerMemoryRoutes(app, deps) {
             if (keptId === removedId) {
                 return res.status(400).json({ error: 'keptId and removedId must be different' });
             }
-            const merged = mergeMemories(keptId, removedId, { reviewedBy });
+            const merged = mergeMemories(keptId, removedId, { reviewedBy }, { type: 'api', identifier: 'dashboard:memory-merge' });
             if (!merged) {
                 return res.status(404).json({ error: 'Unable to merge memories' });
             }

package/dist/api/visualization-server.d.ts CHANGED Viewed

@@ -4,6 +4,45 @@
  * Provides REST endpoints and WebSocket for the Brain Dashboard.
  * Runs alongside or instead of the MCP server.
  */
+import { Request, Response } from 'express';
+import type { DefenceSource } from '../defence/types.js';
+/**
+ * Normalise an incoming `source` object from a REST request body into a
+ * trusted `DefenceSource`.
+ *
+ * - Unknown `type` values fall back to `'api'` (no rejection — defence in depth)
+ * - `identifier` longer than {@link MAX_SOURCE_IDENTIFIER_LENGTH} is truncated
+ *   with an ellipsis ("…") so the truncation is visible in audit logs
+ * - Non-string identifiers fall back to `'rest-api'`
+ *
+ * Exported for unit tests.
+ */
+export declare function normaliseDefenceSource(raw: unknown): DefenceSource;
+export declare const __test__: {
+    ALLOWED_DEFENCE_SOURCE_TYPES: readonly ("user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response")[];
+    MAX_SOURCE_IDENTIFIER_LENGTH: number;
+};
+/**
+ * Handler for `POST /api/v1/scan`.
+ *
+ * Scans content through the defence pipeline. The `config` field on the
+ * request body is intentionally ignored — runtime always uses the persisted
+ * defence mode. Any attempt to override config is logged as a BLOCK with
+ * RESTRICTED sensitivity so incident-triage queries surface it (Fix #13).
+ *
+ * Exported for unit tests.
+ */
+export declare function handleV1Scan(req: Request, res: Response): void;
+/**
+ * Handler for `POST /api/v1/scan/batch`.
+ *
+ * Scans up to 100 items in one request. Like {@link handleV1Scan}, the
+ * `config` field is intentionally ignored; source is normalised through
+ * {@link normaliseDefenceSource} (Fix #13).
+ *
+ * Exported for unit tests.
+ */
+export declare function handleV1ScanBatch(req: Request, res: Response): void;
 /**
  * Start the visualization API server
  */

package/dist/api/visualization-server.js CHANGED Viewed

@@ -42,6 +42,42 @@ import { createIronDomeRouteGuard } from './iron-dome-route-guard.js';
 import { readAndClearDetectionEvents } from '../xray/activity.js';
 import { classifySqlQuery } from './sql-classifier.js';
 const PORT = process.env.PORT || 3001;
+// ── Defence source whitelist (Fix #13) ──────────────────────────────────────
+// The DefenceSource.type field is part of the threat-model surface — caller-
+// controlled `source.type` values pollute Iron Dome dashboards and audit
+// queries. Normalise unknown values to 'api' silently (defence in depth) and
+// cap identifier length to avoid log-explosion attacks.
+const ALLOWED_DEFENCE_SOURCE_TYPES = [
+    'user', 'cli', 'hook', 'email', 'web', 'agent', 'file', 'api', 'tool_response',
+];
+const MAX_SOURCE_IDENTIFIER_LENGTH = 200;
+/**
+ * Normalise an incoming `source` object from a REST request body into a
+ * trusted `DefenceSource`.
+ *
+ * - Unknown `type` values fall back to `'api'` (no rejection — defence in depth)
+ * - `identifier` longer than {@link MAX_SOURCE_IDENTIFIER_LENGTH} is truncated
+ *   with an ellipsis ("…") so the truncation is visible in audit logs
+ * - Non-string identifiers fall back to `'rest-api'`
+ *
+ * Exported for unit tests.
+ */
+export function normaliseDefenceSource(raw) {
+    const candidate = (raw ?? {});
+    const rawType = typeof candidate.type === 'string' ? candidate.type : undefined;
+    const type = rawType && ALLOWED_DEFENCE_SOURCE_TYPES.includes(rawType)
+        ? rawType
+        : 'api';
+    const rawIdentifier = typeof candidate.identifier === 'string' ? candidate.identifier : 'rest-api';
+    const identifier = rawIdentifier.length > MAX_SOURCE_IDENTIFIER_LENGTH
+        ? rawIdentifier.slice(0, MAX_SOURCE_IDENTIFIER_LENGTH - 1) + '…'
+        : rawIdentifier;
+    return { type, identifier };
+}
+export const __test__ = {
+    ALLOWED_DEFENCE_SOURCE_TYPES,
+    MAX_SOURCE_IDENTIFIER_LENGTH,
+};
 /**
  * In-memory counters for FEATURE_GATED (403) responses per feature.
  * Lightweight telemetry to detect noisy free-tier clients hammering gated endpoints.
@@ -76,6 +112,95 @@ function requireProFeature(feature) {
 }
 // Track connected WebSocket clients
 const clients = new Set();
+/**
+ * Handler for `POST /api/v1/scan`.
+ *
+ * Scans content through the defence pipeline. The `config` field on the
+ * request body is intentionally ignored — runtime always uses the persisted
+ * defence mode. Any attempt to override config is logged as a BLOCK with
+ * RESTRICTED sensitivity so incident-triage queries surface it (Fix #13).
+ *
+ * Exported for unit tests.
+ */
+export function handleV1Scan(req, res) {
+    try {
+        const { content, title, source } = req.body;
+        if (!content || typeof content !== 'string') {
+            res.status(400).json({ error: 'content (string) is required' });
+            return;
+        }
+        // Log if caller tried to override config (potential tampering).
+        // Fix #13: record as BLOCK / RESTRICTED so incident-triage queries
+        // filtering on firewall_result IN ('BLOCK','QUARANTINE') surface
+        // config-tampering attempts.
+        if (req.body.config) {
+            try {
+                logAudit({
+                    memory_id: null,
+                    project: null,
+                    timestamp: new Date().toISOString(),
+                    source_type: 'api',
+                    source_identifier: 'rest-api',
+                    trust_score: 0,
+                    sensitivity_level: 'RESTRICTED',
+                    firewall_result: 'BLOCK',
+                    anomaly_score: 0.5,
+                    threat_indicators: '["config_tampering"]',
+                    blocked_patterns: '[]',
+                    reason: 'config_override_attempt: scan endpoint config parameter ignored',
+                    fragmentation_score: null,
+                    pipeline_duration_ms: 0,
+                });
+            }
+            catch { /* audit is best-effort */ }
+        }
+        // Fix #13: whitelist source.type and cap identifier length
+        const defenceSource = normaliseDefenceSource(source);
+        // Always use persisted config — no per-request overrides via HTTP
+        const defenceConfig = { ...DEFAULT_DEFENCE_CONFIG, mode: getDefenceMode() };
+        const result = runDefencePipeline(content, title ?? 'Untitled', defenceSource, defenceConfig);
+        res.json(result);
+    }
+    catch (error) {
+        res.status(500).json({ error: error.message });
+    }
+}
+/**
+ * Handler for `POST /api/v1/scan/batch`.
+ *
+ * Scans up to 100 items in one request. Like {@link handleV1Scan}, the
+ * `config` field is intentionally ignored; source is normalised through
+ * {@link normaliseDefenceSource} (Fix #13).
+ *
+ * Exported for unit tests.
+ */
+export function handleV1ScanBatch(req, res) {
+    try {
+        const { items, source } = req.body;
+        if (!Array.isArray(items) || items.length === 0) {
+            res.status(400).json({ error: 'items (array) is required' });
+            return;
+        }
+        if (items.length > 100) {
+            res.status(400).json({ error: 'Maximum 100 items per batch' });
+            return;
+        }
+        // Fix #13: whitelist source.type and cap identifier length
+        const defenceSource = normaliseDefenceSource(source);
+        // Always use persisted config — no per-request overrides via HTTP
+        const defenceConfig = { ...DEFAULT_DEFENCE_CONFIG, mode: getDefenceMode() };
+        const results = items.map((item) => {
+            if (!item.content || typeof item.content !== 'string') {
+                return { error: 'content (string) is required', allowed: false };
+            }
+            return runDefencePipeline(item.content, item.title ?? 'Untitled', defenceSource, defenceConfig);
+        });
+        res.json({ results, total: results.length });
+    }
+    catch (error) {
+        res.status(500).json({ error: error.message });
+    }
+}
 /**
  * Start the visualization API server
  */
@@ -569,78 +694,8 @@ export function startVisualizationServer(dbPath) {
     // BRAIN WORKER (Phase 4)
     // ============================================
     // ── Defence API v1 ──────────────────────────────────────────
-    // Scan content through the defence pipeline
-    // NOTE: config parameter is intentionally ignored — always uses persisted mode (security hardening)
-    app.post('/api/v1/scan', (req, res) => {
-        try {
-            const { content, title, source } = req.body;
-            if (!content || typeof content !== 'string') {
-                return res.status(400).json({ error: 'content (string) is required' });
-            }
-            // Log if caller tried to override config (potential tampering)
-            if (req.body.config) {
-                try {
-                    logAudit({
-                        memory_id: null,
-                        project: null,
-                        timestamp: new Date().toISOString(),
-                        source_type: 'api',
-                        source_identifier: 'rest-api',
-                        trust_score: 0,
-                        sensitivity_level: 'INTERNAL',
-                        firewall_result: 'ALLOW',
-                        anomaly_score: 0.5,
-                        threat_indicators: '["config_tampering"]',
-                        blocked_patterns: '[]',
-                        reason: 'config_override_attempt: scan endpoint config parameter ignored',
-                        fragmentation_score: null,
-                        pipeline_duration_ms: 0,
-                    });
-                }
-                catch { /* audit is best-effort */ }
-            }
-            const defenceSource = {
-                type: source?.type ?? 'api',
-                identifier: source?.identifier ?? 'rest-api',
-            };
-            // Always use persisted config — no per-request overrides via HTTP
-            const defenceConfig = { ...DEFAULT_DEFENCE_CONFIG, mode: getDefenceMode() };
-            const result = runDefencePipeline(content, title ?? 'Untitled', defenceSource, defenceConfig);
-            res.json(result);
-        }
-        catch (error) {
-            res.status(500).json({ error: error.message });
-        }
-    });
-    // Batch scan multiple items
-    // NOTE: config parameter is intentionally ignored — always uses persisted mode (security hardening)
-    app.post('/api/v1/scan/batch', (req, res) => {
-        try {
-            const { items, source } = req.body;
-            if (!Array.isArray(items) || items.length === 0) {
-                return res.status(400).json({ error: 'items (array) is required' });
-            }
-            if (items.length > 100) {
-                return res.status(400).json({ error: 'Maximum 100 items per batch' });
-            }
-            const defenceSource = {
-                type: source?.type ?? 'api',
-                identifier: source?.identifier ?? 'rest-api',
-            };
-            // Always use persisted config — no per-request overrides via HTTP
-            const defenceConfig = { ...DEFAULT_DEFENCE_CONFIG, mode: getDefenceMode() };
-            const results = items.map((item) => {
-                if (!item.content || typeof item.content !== 'string') {
-                    return { error: 'content (string) is required', allowed: false };
-                }
-                return runDefencePipeline(item.content, item.title ?? 'Untitled', defenceSource, defenceConfig);
-            });
-            res.json({ results, total: results.length });
-        }
-        catch (error) {
-            res.status(500).json({ error: error.message });
-        }
-    });
+    app.post('/api/v1/scan', handleV1Scan);
+    app.post('/api/v1/scan/batch', handleV1ScanBatch);
     const brainWorker = new BrainWorker();
     registerIncidentRoutes(app);
     registerAdminRoutes(app, {

package/dist/database/inline-schema.js CHANGED Viewed

@@ -295,6 +295,7 @@ export function getInlineSchema() {
     );
     -- v4.17 Session capture (mirrors schema.sql; bundled fallback only).
+    -- v4.28 (Fix #10): + sensitivity_level for prompt-redaction tagging.
     CREATE TABLE IF NOT EXISTS session_events (
       id INTEGER PRIMARY KEY AUTOINCREMENT,
       session_id TEXT NOT NULL,
@@ -308,11 +309,13 @@ export function getInlineSchema() {
       duration_ms INTEGER,
       audit_id INTEGER,
       content_hash TEXT,
+      sensitivity_level TEXT DEFAULT 'INTERNAL',
       created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
       FOREIGN KEY (audit_id) REFERENCES defence_audit(id) ON DELETE SET NULL
     );
     CREATE INDEX IF NOT EXISTS idx_session_events_session ON session_events(session_id, ts);
     CREATE INDEX IF NOT EXISTS idx_session_events_project ON session_events(project, ts DESC);
+    CREATE INDEX IF NOT EXISTS idx_session_events_sensitivity ON session_events(sensitivity_level);
     CREATE UNIQUE INDEX IF NOT EXISTS idx_session_events_dedupe
       ON session_events(session_id, ts, kind, content_hash);
   `;

package/dist/database/migrations.js CHANGED Viewed

@@ -503,4 +503,29 @@ export function runMigrations(database) {
         logIfUnexpectedDdlError(err, 'session_events.content_hash column + dedupe index');
         // (importer-side INSERT OR IGNORE handles missing index gracefully)
     }
+    // Migration: session_events.sensitivity_level (v4.28 — Fix #10).
+    //
+    // Without this, the UserPromptSubmit hook captured the raw prompt verbatim
+    // (no pipeline, no credential scan, no sensitivity tag). The column lets
+    // the hook record the defence classifier's verdict alongside the redacted
+    // text so the dashboard's replay UI can mask/strip RESTRICTED rows.
+    // Defaults to 'INTERNAL' for backfilled rows + future callers that omit it.
+    try {
+        const sessionEventsTable = database
+            .prepare("SELECT name FROM sqlite_master WHERE type='table' AND name='session_events'")
+            .get();
+        if (sessionEventsTable) {
+            const sessionCols = database
+                .prepare("PRAGMA table_info(session_events)")
+                .all();
+            const sessionColNames = new Set(sessionCols.map((c) => c.name));
+            if (!sessionColNames.has('sensitivity_level')) {
+                database.exec("ALTER TABLE session_events ADD COLUMN sensitivity_level TEXT DEFAULT 'INTERNAL'");
+            }
+            database.exec('CREATE INDEX IF NOT EXISTS idx_session_events_sensitivity ON session_events(sensitivity_level)');
+        }
+    }
+    catch (err) {
+        logIfUnexpectedDdlError(err, 'session_events.sensitivity_level column + index');
+    }
 }

package/dist/database/schema.sql CHANGED Viewed

@@ -120,11 +120,16 @@ CREATE TABLE IF NOT EXISTS session_events (
   duration_ms INTEGER,
   audit_id INTEGER,
   content_hash TEXT,
+  -- v4.28 (Fix #10): defence classifier verdict for this event.
+  -- PUBLIC | INTERNAL | CONFIDENTIAL | RESTRICTED. Lets the dashboard
+  -- replay UI mask or strip sensitive prompts/responses.
+  sensitivity_level TEXT DEFAULT 'INTERNAL',
   created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
   FOREIGN KEY (audit_id) REFERENCES defence_audit(id) ON DELETE SET NULL
 );
 CREATE INDEX IF NOT EXISTS idx_session_events_session ON session_events(session_id, ts);
 CREATE INDEX IF NOT EXISTS idx_session_events_project ON session_events(project, ts DESC);
+CREATE INDEX IF NOT EXISTS idx_session_events_sensitivity ON session_events(sensitivity_level);
 CREATE UNIQUE INDEX IF NOT EXISTS idx_session_events_dedupe
   ON session_events(session_id, ts, kind, content_hash);

package/dist/license/store.js CHANGED Viewed

@@ -9,7 +9,7 @@
  *
  * License is cached in memory after first read.
  */
-import { readFileSync, writeFileSync, existsSync, unlinkSync, mkdirSync } from 'fs';
+import { readFileSync, writeFileSync, existsSync, unlinkSync, mkdirSync, statSync } from 'fs';
 import { join } from 'path';
 import { homedir } from 'os';
 import { verifyLicenseKey } from './verify.js';
@@ -22,10 +22,32 @@ function getLicenseFilePath() {
     return join(getConfigDir(), 'license.json');
 }
 // ── Cache ────────────────────────────────────────────────
+//
+// In-memory cache of the parsed/verified licence. Refreshed automatically
+// when the on-disk file mtime changes (v4.27.2). This lets long-running
+// workers pick up `shieldcortex license activate <key>` without a process
+// restart — previously the worker held the old tier cached for its
+// lifetime and any cloud_sync / heartbeat feature gate stayed stuck on
+// the value at startup. The mtime check is a single stat() per call
+// (microseconds); cheap enough to run on every gate hit.
 let cachedLicense = null;
+let cachedLicenseFileMtimeMs = null;
+/**
+ * Read the licence file's current mtime (ms). Returns null if the file
+ * doesn't exist — that's a valid cached state too (= FREE).
+ */
+function readLicenseFileMtimeMs() {
+    try {
+        return statSync(getLicenseFilePath()).mtimeMs;
+    }
+    catch {
+        return null;
+    }
+}
 /** Clear the in-memory cache (useful for testing or after activation). */
 export function clearLicenseCache() {
     cachedLicense = null;
+    cachedLicenseFileMtimeMs = null;
     clearTrialCache();
 }
 // ── Read ─────────────────────────────────────────────────
@@ -34,6 +56,15 @@ export function clearLicenseCache() {
  * Returns a LicenseInfo with tier='free' if no license exists or verification fails.
  */
 export function getLicense() {
+    // Hot-reload: if the licence file's mtime has changed since the value
+    // was cached (or the file appeared/disappeared), drop the cache so the
+    // new tier takes effect immediately. This is what makes long-running
+    // workers see `shieldcortex license activate <key>` without a restart.
+    const currentMtimeMs = readLicenseFileMtimeMs();
+    if (cachedLicense !== null && cachedLicenseFileMtimeMs !== currentMtimeMs) {
+        cachedLicense = null;
+        clearTrialCache();
+    }
     if (cachedLicense)
         return cachedLicense;
     const FREE = {
@@ -49,11 +80,13 @@ export function getLicense() {
         const licenseFile = getLicenseFilePath();
         if (!existsSync(licenseFile)) {
             cachedLicense = FREE;
+            cachedLicenseFileMtimeMs = null;
             return FREE;
         }
         const raw = JSON.parse(readFileSync(licenseFile, 'utf-8'));
         if (!raw.key) {
             cachedLicense = FREE;
+            cachedLicenseFileMtimeMs = currentMtimeMs;
             return FREE;
         }
         // Check if previously marked as revoked or expired by online validation.
@@ -62,15 +95,18 @@ export function getLicense() {
         // so we only hard-block on revoked here.
         if (raw.validationStatus === 'revoked') {
             cachedLicense = FREE;
+            cachedLicenseFileMtimeMs = currentMtimeMs;
             return FREE;
         }
         // Verify the key cryptographically (checks exp + grace period)
         const info = verifyLicenseKey(raw.key);
         cachedLicense = info;
+        cachedLicenseFileMtimeMs = currentMtimeMs;
         return info;
     }
     catch {
         cachedLicense = FREE;
+        cachedLicenseFileMtimeMs = currentMtimeMs;
         return FREE;
     }
 }
@@ -126,8 +162,10 @@ export function activateLicense(key) {
     const licenseFile = getLicenseFilePath();
     mkdirSync(configDir, { recursive: true });
     writeFileSync(licenseFile, JSON.stringify(file, null, 2) + '\n', { mode: 0o600 });
-    // Invalidate cache
+    // Refresh cache + mtime so the next getLicense() call in this process
+    // doesn't trigger a re-read for no reason.
     cachedLicense = info;
+    cachedLicenseFileMtimeMs = readLicenseFileMtimeMs();
     return info;
 }
 /**
@@ -144,6 +182,7 @@ export function deactivateLicense() {
         // Best effort
     }
     cachedLicense = null;
+    cachedLicenseFileMtimeMs = null;
     clearTrialCache();
 }
 /**
@@ -162,6 +201,7 @@ export function updateValidationStatus(status) {
         // If revoked or expired, invalidate cache so next getLicense() re-verifies
         if (status === 'revoked' || status === 'expired') {
             cachedLicense = null;
+            cachedLicenseFileMtimeMs = null;
         }
     }
     catch {

package/dist/memory/consolidate.js CHANGED Viewed

@@ -10,6 +10,7 @@
 import { getDatabase, withTransaction } from '../database/init.js';
 import { DEFAULT_CONFIG, } from './types.js';
 import { getMemoriesByType, getRecentMemories, promoteMemory, deleteMemory, searchMemories, getMemoryStats, updateDecayScores, addMemory, rowToMemory, } from './store.js';
+import { runDefencePipeline } from '../defence/index.js';
 import { processDecay, } from './decay.js';
 import { detectContradictions, linkContradictions, } from './contradiction.js';
 import { jaccardSimilarity } from './similarity.js';
@@ -276,6 +277,18 @@ export function deduplicateMemories(options) {
                     .filter(s => s.length > 0 && !keptSentences.has(s.toLowerCase()));
                 if (uniqueSentences.length > 0) {
                     const mergedContent = kept.content + '\n\nMerged from duplicate:\n' + uniqueSentences.join('. ') + '.';
+                    // DEFENCE PIPELINE: re-scan the merged content. Two individually-clean
+                    // memories can produce content that straddles a credential pattern
+                    // across the join. Without this re-scan the "every byte in `memories`
+                    // has been scanned" invariant is broken. If the merge is blocked, skip
+                    // both the content update AND the delete so the source rows survive.
+                    const dedupSource = { type: 'hook', identifier: 'hook:consolidation' };
+                    const defenceResult = runDefencePipeline(mergedContent, kept.title, dedupSource, undefined, kept.project ?? discarded.project ?? undefined);
+                    if (defenceResult.firewall.result !== 'ALLOW') {
+                        // Surface in audit (already written by the pipeline) and skip this pair.
+                        console.warn(`[shieldcortex] Dedup merge blocked for memory ${kept.id} + ${removedId}: ${defenceResult.firewall.reason}`);
+                        continue;
+                    }
                     db.prepare('UPDATE memories SET content = ? WHERE id = ?').run(mergedContent, kept.id);
                 }
                 deleteMemory(removedId);

package/dist/memory/store.d.ts CHANGED Viewed

@@ -46,7 +46,7 @@ export declare function getMemoryById(id: number, source?: DefenceSource): Memor
 export declare function updateMemory(id: number, updates: Partial<MemoryInput>): Memory | null;
 export declare function mergeMemories(keptId: number, removedId: number, options?: {
     reviewedBy?: string | null;
-}): Memory | null;
+}, source?: DefenceSource): Memory | null;
 /**
  * Delete a memory
  */