shieldcortex 4.31.2 → 4.32.0

package/dist/tools/context.d.ts

@@ -15,27 +15,27 @@ export declare const getContextSchema: z.ZodObject<{
         type: z.ZodEnum<["user", "cli", "hook", "email", "web", "agent", "file", "api", "tool_response"]>;
         identifier: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     }, {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     }>>;
 }, "strip", z.ZodTypeAny, {
-    format: "summary" | "detailed" | "raw";
+    format: "summary" | "raw" | "detailed";
     source?: {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     } | undefined;
     project?: string | undefined;
     query?: string | undefined;
 }, {
     source?: {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     } | undefined;
     project?: string | undefined;
-    format?: "summary" | "detailed" | "raw" | undefined;
+    format?: "summary" | "raw" | "detailed" | undefined;
     query?: string | undefined;
 }>;
 export type GetContextInput = z.infer<typeof getContextSchema>;
@@ -86,11 +86,11 @@ export declare const consolidateSchema: z.ZodObject<{
     force: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
     dryRun: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
 }, "strip", z.ZodTypeAny, {
-    dryRun: boolean;
     force: boolean;
+    dryRun: boolean;
 }, {
-    dryRun?: boolean | undefined;
     force?: boolean | undefined;
+    dryRun?: boolean | undefined;
 }>;
 export declare function executeConsolidate(input: {
     force?: boolean;

package/dist/tools/forget.d.ts

@@ -17,38 +17,38 @@ export declare const forgetSchema: z.ZodObject<{
         type: z.ZodEnum<["user", "cli", "hook", "email", "web", "agent", "file", "api", "tool_response"]>;
         identifier: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     }, {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     }>>;
 }, "strip", z.ZodTypeAny, {
-    dryRun: boolean;
     confirm: boolean;
+    dryRun: boolean;
     source?: {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     } | undefined;
     project?: string | undefined;
     id?: number | undefined;
-    category?: "architecture" | "pattern" | "preference" | "error" | "context" | "learning" | "todo" | "note" | "relationship" | "custom" | undefined;
+    category?: "context" | "pattern" | "architecture" | "preference" | "error" | "learning" | "todo" | "note" | "relationship" | "custom" | undefined;
     query?: string | undefined;
     olderThan?: number | undefined;
     belowSalience?: number | undefined;
 }, {
     source?: {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     } | undefined;
     project?: string | undefined;
     id?: number | undefined;
-    category?: "architecture" | "pattern" | "preference" | "error" | "context" | "learning" | "todo" | "note" | "relationship" | "custom" | undefined;
+    category?: "context" | "pattern" | "architecture" | "preference" | "error" | "learning" | "todo" | "note" | "relationship" | "custom" | undefined;
     query?: string | undefined;
+    confirm?: boolean | undefined;
     olderThan?: number | undefined;
     belowSalience?: number | undefined;
     dryRun?: boolean | undefined;
-    confirm?: boolean | undefined;
 }>;
 export type ForgetInput = z.infer<typeof forgetSchema>;
 /**
@@ -57,6 +57,7 @@ export type ForgetInput = z.infer<typeof forgetSchema>;
 export declare function executeForget(input: ForgetInput): Promise<{
     success: boolean;
     deleted?: number;
+    denied?: number;
     wouldDelete?: number;
     memories?: {
         id: number;

package/dist/tools/forget.js

@@ -131,14 +131,27 @@ export async function executeForget(input) {
                 error: error.toUserMessage(),
             };
         }
-        // Execute deletion within a transaction for atomicity
+        // Execute deletion within a transaction for atomicity. Route every
+        // affected id through deleteMemory(id, source) — NOT a raw bulk DELETE —
+        // so each row gets the same enforcement as the single-ID path: delete-ACL
+        // check (+ access-denial audit on refusal), graph cleanup, cloud-sync
+        // delete, and the dashboard `memory_deleted` event. A low-trust / non-owner
+        // caller therefore can't mass-delete protected memories. better-sqlite3 is
+        // synchronous, so the per-row loop stays inside one transaction atomically.
+        const deletedMemories = [];
         withTransaction(() => {
-            db.prepare(`DELETE FROM memories WHERE ${whereClause}`).run(...params);
+            for (const memory of affected) {
+                if (deleteMemory(memory.id, source)) {
+                    deletedMemories.push(memory);
+                }
+            }
         });
+        const denied = affected.length - deletedMemories.length;
         return {
             success: true,
-            deleted: affected.length,
-            memories: affected,
+            deleted: deletedMemories.length,
+            ...(denied > 0 ? { denied } : {}),
+            memories: deletedMemories,
         };
     }
     catch (error) {

package/dist/tools/recall.d.ts

@@ -20,10 +20,10 @@ export declare const recallSchema: z.ZodObject<{
         type: z.ZodEnum<["user", "cli", "hook", "email", "web", "agent", "file", "api", "tool_response"]>;
         identifier: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     }, {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     }>>;
 }, "strip", z.ZodTypeAny, {
@@ -31,26 +31,26 @@ export declare const recallSchema: z.ZodObject<{
     limit: number;
     includeDecayed: boolean;
     includeGlobal: boolean;
+    type?: "short_term" | "long_term" | "episodic" | undefined;
     source?: {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     } | undefined;
     project?: string | undefined;
-    type?: "short_term" | "long_term" | "episodic" | undefined;
-    category?: "architecture" | "pattern" | "preference" | "error" | "context" | "learning" | "todo" | "note" | "relationship" | "custom" | undefined;
+    category?: "context" | "pattern" | "architecture" | "preference" | "error" | "learning" | "todo" | "note" | "relationship" | "custom" | undefined;
     tags?: string[] | undefined;
     query?: string | undefined;
 }, {
+    type?: "short_term" | "long_term" | "episodic" | undefined;
     source?: {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     } | undefined;
     project?: string | undefined;
     mode?: "search" | "important" | "recent" | undefined;
-    type?: "short_term" | "long_term" | "episodic" | undefined;
-    category?: "architecture" | "pattern" | "preference" | "error" | "context" | "learning" | "todo" | "note" | "relationship" | "custom" | undefined;
-    tags?: string[] | undefined;
     limit?: number | undefined;
+    category?: "context" | "pattern" | "architecture" | "preference" | "error" | "learning" | "todo" | "note" | "relationship" | "custom" | undefined;
+    tags?: string[] | undefined;
     query?: string | undefined;
     includeDecayed?: boolean | undefined;
     includeGlobal?: boolean | undefined;
@@ -87,22 +87,22 @@ export declare const getMemorySchema: z.ZodObject<{
         type: z.ZodEnum<["user", "cli", "hook", "email", "web", "agent", "file", "api", "tool_response"]>;
         identifier: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     }, {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     }>>;
 }, "strip", z.ZodTypeAny, {
     id: number;
     source?: {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     } | undefined;
 }, {
     id: number;
     source?: {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     } | undefined;
 }>;

package/dist/tools/remember.d.ts

@@ -21,10 +21,10 @@ export declare const rememberSchema: z.ZodObject<{
         type: z.ZodEnum<["user", "cli", "hook", "email", "web", "agent", "file", "api", "tool_response"]>;
         identifier: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     }, {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     }>>;
     sourceType: z.ZodOptional<z.ZodEnum<["user", "cli", "hook", "email", "web", "agent", "file", "api", "tool_response"]>>;
@@ -35,43 +35,43 @@ export declare const rememberSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     title: string;
     content: string;
+    type?: "short_term" | "long_term" | "episodic" | undefined;
     scope?: "project" | "global" | undefined;
     transferable?: boolean | undefined;
     source?: {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     } | undefined;
     project?: string | undefined;
-    type?: "short_term" | "long_term" | "episodic" | undefined;
-    category?: "architecture" | "pattern" | "preference" | "error" | "context" | "learning" | "todo" | "note" | "relationship" | "custom" | undefined;
-    tags?: string[] | undefined;
     sourceIdentifier?: string | undefined;
+    category?: "context" | "pattern" | "architecture" | "preference" | "error" | "learning" | "todo" | "note" | "relationship" | "custom" | undefined;
+    tags?: string[] | undefined;
+    sourceType?: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response" | undefined;
     sessionId?: string | undefined;
-    sourceType?: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response" | undefined;
-    memoryPurpose?: "project" | "user" | "feedback" | "reference" | undefined;
+    memoryPurpose?: "user" | "project" | "feedback" | "reference" | undefined;
     memoryScope?: "private" | "team" | undefined;
-    importance?: "critical" | "low" | "high" | "normal" | undefined;
+    importance?: "low" | "high" | "critical" | "normal" | undefined;
     agentId?: string | undefined;
     workspaceDir?: string | undefined;
 }, {
     title: string;
     content: string;
+    type?: "short_term" | "long_term" | "episodic" | undefined;
     scope?: "project" | "global" | undefined;
     transferable?: boolean | undefined;
     source?: {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     } | undefined;
     project?: string | undefined;
-    type?: "short_term" | "long_term" | "episodic" | undefined;
-    category?: "architecture" | "pattern" | "preference" | "error" | "context" | "learning" | "todo" | "note" | "relationship" | "custom" | undefined;
-    tags?: string[] | undefined;
     sourceIdentifier?: string | undefined;
+    category?: "context" | "pattern" | "architecture" | "preference" | "error" | "learning" | "todo" | "note" | "relationship" | "custom" | undefined;
+    tags?: string[] | undefined;
+    sourceType?: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response" | undefined;
     sessionId?: string | undefined;
-    sourceType?: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response" | undefined;
-    memoryPurpose?: "project" | "user" | "feedback" | "reference" | undefined;
+    memoryPurpose?: "user" | "project" | "feedback" | "reference" | undefined;
     memoryScope?: "private" | "team" | undefined;
-    importance?: "critical" | "low" | "high" | "normal" | undefined;
+    importance?: "low" | "high" | "critical" | "normal" | undefined;
     agentId?: string | undefined;
     workspaceDir?: string | undefined;
 }>;

package/dist/tools/remember.js

@@ -4,7 +4,7 @@
  * Store memories with automatic salience detection and categorization.
  */
 import { z } from 'zod';
-import { addMemory, searchMemories, detectRelationships, createMemoryLink, getLastTruncationInfo } from '../memory/store.js';
+import { addMemory, updateMemory, searchMemories, detectRelationships, createMemoryLink, getLastTruncationInfo } from '../memory/store.js';
 import { calculateSalience, analyzeSalienceFactors, explainSalience } from '../memory/salience.js';
 import { formatErrorForMcp } from '../errors.js';
 import { resolveProject } from '../context/project-context.js';
@@ -92,18 +92,29 @@ export async function executeRemember(input) {
             project: resolvedProject ?? undefined,
             limit: 3,
         });
-        // If very similar memory exists, update instead
+        // If a very similar memory exists, genuinely UPDATE it with the new
+        // content rather than silently discarding the new write. The previous
+        // behaviour reported "Updated existing similar memory" but never persisted
+        // anything — so a richer follow-up was lost while the report implied a
+        // successful update (Phase 17 A4).
         if (existing.length > 0 && existing[0].relevanceScore > 0.9) {
             const existingMemory = existing[0].memory;
+            const contentChanged = existingMemory.content !== content;
+            const updated = contentChanged
+                ? updateMemory(existingMemory.id, { content, title })
+                : existingMemory;
+            const target = updated ?? existingMemory;
             return {
                 success: true,
                 memory: {
-                    id: existingMemory.id,
-                    title: existingMemory.title,
-                    salience: existingMemory.salience,
-                    type: existingMemory.type,
-                    category: existingMemory.category,
-                    reason: 'Updated existing similar memory',
+                    id: target.id,
+                    title: target.title,
+                    salience: target.salience,
+                    type: target.type,
+                    category: target.category,
+                    reason: contentChanged
+                        ? 'Updated existing similar memory with new content'
+                        : 'Existing similar memory already up to date',
                 },
             };
         }

package/dist/worker/brain-worker.d.ts

@@ -26,6 +26,7 @@ export declare class BrainWorker {
     private lastLightTick;
     private lastMediumTick;
     private lastConsolidation;
+    private lastAuditPurge;
     /**
      * Create a new BrainWorker
      *

package/dist/worker/brain-worker.js

@@ -9,7 +9,7 @@
  *
  * This transforms the memory system from reactive to continuously organic.
  */
-import { DEFAULT_WORKER_CONFIG, MCP_LIGHT_TICK_INTERVAL_MS, } from './types.js';
+import { DEFAULT_WORKER_CONFIG, MCP_LIGHT_TICK_INTERVAL_MS, MCP_RETRY_QUEUE_BUDGET, } from './types.js';
 import { getDatabase } from '../database/init.js';
 import { pruneActivationCache } from '../memory/activation.js';
 import { getMemoryStats } from '../memory/store.js';
@@ -21,22 +21,51 @@ import { emitWorkerLightTick, emitWorkerMediumTick, emitPredictiveConsolidation,
 import { processRetryQueue, purgeOldEntries } from '../cloud/sync-queue.js';
 import { sendHeartbeat } from '../cloud/sync.js';
 import { refreshCloudIronDome, applyCachedCloudPatterns } from '../cloud/iron-dome-sync.js';
+import { purgeOldAuditEntries, purgeAuditUnderSizePressure } from '../defence/audit/retention.js';
 import { isFeatureEnabled } from '../license/gate.js';
-import { existsSync, mkdirSync, writeFileSync } from 'fs';
+import { existsSync, mkdirSync, writeFileSync, readFileSync } from 'fs';
 import { join } from 'path';
 import { homedir } from 'os';
 const WORKER_STATE_DIR = join(homedir(), '.shieldcortex', 'state');
 const WORKER_STATE_FILE = join(WORKER_STATE_DIR, 'worker.json');
-function persistWorkerState(profile, lastLightTick) {
+// Audit retention runs in the light tick (which fires every 5–15 min) but is
+// throttled to ~once per day — a daily purge is plenty to keep defence_audit
+// bounded, and running it every tick would be wasteful.
+const AUDIT_PURGE_INTERVAL_MS = 24 * 60 * 60 * 1000;
+function persistWorkerState(profile, lastLightTick, lastAuditPurge) {
     try {
         if (!existsSync(WORKER_STATE_DIR))
             mkdirSync(WORKER_STATE_DIR, { recursive: true });
-        writeFileSync(WORKER_STATE_FILE, JSON.stringify({ pid: process.pid, profile, lastLightTick: lastLightTick.toISOString() }, null, 2), 'utf-8');
+        writeFileSync(WORKER_STATE_FILE, JSON.stringify({
+            pid: process.pid,
+            profile,
+            lastLightTick: lastLightTick.toISOString(),
+            lastAuditPurge: lastAuditPurge ? lastAuditPurge.toISOString() : null,
+        }, null, 2), 'utf-8');
     }
     catch {
         // Best-effort: doctor will warn if the file is stale or missing
     }
 }
+/**
+ * Read the persisted lastAuditPurge timestamp so the 24h throttle survives
+ * process restarts — MCP servers restart frequently (one per Claude Code
+ * window), and without this every restart would trigger a fresh purge.
+ */
+function readPersistedAuditPurge() {
+    try {
+        const raw = JSON.parse(readFileSync(WORKER_STATE_FILE, 'utf-8'));
+        if (raw.lastAuditPurge) {
+            const d = new Date(raw.lastAuditPurge);
+            if (!Number.isNaN(d.getTime()))
+                return d;
+        }
+    }
+    catch {
+        // No prior state — treat as never purged.
+    }
+    return null;
+}
 /**
  * Brain Worker Class
  *
@@ -59,6 +88,9 @@ export class BrainWorker {
     lastLightTick = null;
     lastMediumTick = null;
     lastConsolidation = null;
+    // Seeded from persisted state so the 24h audit-purge throttle survives
+    // frequent MCP-server restarts.
+    lastAuditPurge = readPersistedAuditPurge();
     /**
      * Create a new BrainWorker
      *
@@ -181,20 +213,51 @@ export class BrainWorker {
                     result: result.predictiveConsolidation,
                 });
             }
-            // 3-5: cloud sync (retry queue, heartbeat, Iron Dome) — full profile only.
-            // Skipped under MCP profile so we don't fan out N concurrent network calls
-            // from N open Claude Code windows.
-            if (this.config.profile === 'full') {
-                try {
-                    const retryResult = await processRetryQueue();
-                    if (retryResult.processed > 0) {
-                        console.log(`[BrainWorker] Sync retry queue: processed ${retryResult.processed} ` +
-                            `(${retryResult.succeeded} ok, ${retryResult.failed} retry, ${retryResult.permanentlyFailed} failed)`);
+            // 3. Audit retention — runs on BOTH profiles (MCP-only installs scan
+            // tool responses too, so their defence_audit also grows unbounded; the
+            // sync-queue purge being worker-only left an analogous gap we deliberately
+            // don't repeat here). The pressure valve is a cheap size check, so it runs
+            // every tick; the age-based purge is throttled to ~once per 24h.
+            try {
+                const pressurePurged = purgeAuditUnderSizePressure();
+                if (pressurePurged > 0) {
+                    console.log(`[BrainWorker] Audit size-pressure valve purged ${pressurePurged} rows`);
+                }
+                const now = result.timestamp.getTime();
+                const dueForPurge = this.lastAuditPurge === null ||
+                    now - this.lastAuditPurge.getTime() >= AUDIT_PURGE_INTERVAL_MS;
+                if (dueForPurge) {
+                    const purged = purgeOldAuditEntries();
+                    this.lastAuditPurge = result.timestamp;
+                    if (purged > 0) {
+                        console.log(`[BrainWorker] Audit retention purged ${purged} entries older than 90d`);
                     }
                 }
-                catch (retryError) {
-                    console.error('[BrainWorker] Sync retry queue failed:', retryError);
+            }
+            catch (auditErr) {
+                console.error('[BrainWorker] Audit retention failed:', auditErr);
+            }
+            // 4. Sync retry queue — drains on BOTH profiles. MCP-only installs have
+            // no full worker, so if this stayed full-only their queued audits/
+            // memories would age out unsent (the same gap we closed for audit
+            // retention above). The MCP path is BUDGETED (one process per Claude Code
+            // window) so it doesn't do unbounded network work each tick; full keeps
+            // its historical unbudgeted cadence. processRetryQueue itself no-ops
+            // cheaply when cloud is disabled (no API key), so this is safe to call
+            // unconditionally — no extra gate needed.
+            try {
+                const retryResult = await processRetryQueue(this.config.profile === 'mcp' ? { maxRows: MCP_RETRY_QUEUE_BUDGET } : {});
+                if (retryResult.processed > 0) {
+                    console.log(`[BrainWorker] Sync retry queue: processed ${retryResult.processed} ` +
+                        `(${retryResult.succeeded} ok, ${retryResult.failed} retry, ${retryResult.permanentlyFailed} failed)`);
                 }
+            }
+            catch (retryError) {
+                console.error('[BrainWorker] Sync retry queue failed:', retryError);
+            }
+            // 5-6: heartbeat + Iron Dome — full profile only. Skipped under MCP so we
+            // don't fan out N concurrent network calls from N open Claude Code windows.
+            if (this.config.profile === 'full') {
                 if (isFeatureEnabled('cloud_sync')) {
                     try {
                         sendHeartbeat();
@@ -216,7 +279,7 @@ export class BrainWorker {
             this.lastLightTick = result.timestamp;
             this.stats.lightTicks++;
             // Persist worker freshness for `shieldcortex doctor` to detect stalls.
-            persistWorkerState(this.config.profile, result.timestamp);
+            persistWorkerState(this.config.profile, result.timestamp, this.lastAuditPurge);
             // Emit light tick event
             emitWorkerLightTick(result);
             // Log summary

package/dist/worker/types.d.ts

@@ -51,6 +51,14 @@ export declare const DEFAULT_WORKER_CONFIG: WorkerConfig;
  * background work in check across many windows.
  */
 export declare const MCP_LIGHT_TICK_INTERVAL_MS: number;
+/**
+ * Per-tick budget for the sync retry queue under the MCP profile. MCP-only
+ * installs have no full worker, so they MUST drain their own queue or queued
+ * audits/memories age out unsent — but one MCP process runs per Claude Code
+ * window, so we cap the network work each does per light tick. The full
+ * (dashboard) profile keeps its historical unbudgeted cadence.
+ */
+export declare const MCP_RETRY_QUEUE_BUDGET = 25;
 /**
  * Result of a light tick operation
  */

package/dist/worker/types.js

@@ -26,3 +26,11 @@ export const DEFAULT_WORKER_CONFIG = {
  * background work in check across many windows.
  */
 export const MCP_LIGHT_TICK_INTERVAL_MS = 15 * 60 * 1000;
+/**
+ * Per-tick budget for the sync retry queue under the MCP profile. MCP-only
+ * installs have no full worker, so they MUST drain their own queue or queued
+ * audits/memories age out unsent — but one MCP process runs per Claude Code
+ * window, so we cap the network work each does per light tick. The full
+ * (dashboard) profile keeps its historical unbudgeted cadence.
+ */
+export const MCP_RETRY_QUEUE_BUDGET = 25;

package/dist/xray/dir-scanner.d.ts

@@ -5,6 +5,24 @@
  * and aggregates findings into a single XRayResult.
  */
 import type { XRayResult } from './types.js';
+/**
+ * Hidden directories worth scanning. These hold agent-instruction and CI
+ * surfaces (skills, slash commands, settings hooks, workflow YAML, editor
+ * tasks) — the primary prompt-injection / persistence vectors in an AI-agent
+ * codebase. By default `walkDir` skips ALL dot-directories; this allow-list
+ * carves out the ones X-Ray must inspect. `SKIP_DIRS` always wins, so `.git`
+ * et al. stay excluded even though they're hidden.
+ *
+ * Shared with watch mode (`watch.ts` imports this) so a scan and a watch agree
+ * on exactly which hidden dirs are in scope — one source of truth.
+ */
+export declare const ALLOW_HIDDEN_DIRS: Set<string>;
+/**
+ * Whether to descend into a directory while walking. Recurse when it's not in
+ * the skip-list AND it's either not hidden or explicitly allow-listed. Exported
+ * so watch mode mirrors the identical rule.
+ */
+export declare function shouldWalkDir(name: string): boolean;
 /**
  * Scan an entire directory for X-Ray findings.
  *

package/dist/xray/dir-scanner.js

@@ -15,6 +15,28 @@ const SKIP_DIRS = new Set([
     '__pycache__', '.tox', '.venv', 'venv', '.cache', 'coverage',
     'Caches', 'CacheStorage', 'IndexedDB', 'GPUCache',
 ]);
+/**
+ * Hidden directories worth scanning. These hold agent-instruction and CI
+ * surfaces (skills, slash commands, settings hooks, workflow YAML, editor
+ * tasks) — the primary prompt-injection / persistence vectors in an AI-agent
+ * codebase. By default `walkDir` skips ALL dot-directories; this allow-list
+ * carves out the ones X-Ray must inspect. `SKIP_DIRS` always wins, so `.git`
+ * et al. stay excluded even though they're hidden.
+ *
+ * Shared with watch mode (`watch.ts` imports this) so a scan and a watch agree
+ * on exactly which hidden dirs are in scope — one source of truth.
+ */
+export const ALLOW_HIDDEN_DIRS = new Set([
+    '.github', '.claude', '.cursor', '.codex', '.vscode', '.agents', '.openclaw',
+]);
+/**
+ * Whether to descend into a directory while walking. Recurse when it's not in
+ * the skip-list AND it's either not hidden or explicitly allow-listed. Exported
+ * so watch mode mirrors the identical rule.
+ */
+export function shouldWalkDir(name) {
+    return !SKIP_DIRS.has(name) && (!name.startsWith('.') || ALLOW_HIDDEN_DIRS.has(name));
+}
 /** Absolute path prefixes to never scan — system/OS files that always produce false positives. */
 const SKIP_PATH_PREFIXES = [
     '/System/',
@@ -75,7 +97,7 @@ function walkDir(dirPath, files, depth = 0) {
             break;
         const fullPath = path.join(dirPath, entry.name);
         if (entry.isDirectory()) {
-            if (!SKIP_DIRS.has(entry.name) && !entry.name.startsWith('.')) {
+            if (shouldWalkDir(entry.name)) {
                 walkDir(fullPath, files, depth + 1);
             }
         }