shieldcortex 4.31.2 → 4.32.1

package/dist/setup/native-binding.js

@@ -0,0 +1,146 @@
+/**
+ * Self-healing for the better-sqlite3 native binding.
+ *
+ * better-sqlite3 ships prebuilt binaries for common platform/ABI combos; when
+ * none matches (e.g. a newer Node than the prebuilds, or arm64 with no prebuilt)
+ * it must compile from source, which needs a C/C++ toolchain. If that hasn't
+ * happened the binding is missing and every DB operation fails with
+ * "Could not locate the bindings file".
+ *
+ * The trap (observed on an arm64 fleet box): `npm rebuild better-sqlite3` only
+ * works when run IN THE PACKAGE'S INSTALL DIR. Run from anywhere else (e.g. the
+ * user's home dir) it matches nothing and reports "rebuilt dependencies
+ * successfully" — a no-op. So this module resolves the install dir from the
+ * running code's own location and rebuilds there.
+ *
+ * Used by: `shieldcortex update` (verify+heal step), `shieldcortex repair`,
+ * `shieldcortex doctor` (correct remediation text), and the postinstall guidance.
+ */
+import path from 'path';
+import { spawn } from 'child_process';
+import { fileURLToPath } from 'url';
+import { createRequire } from 'module';
+const require = createRequire(import.meta.url);
+/**
+ * The package's own install root — the directory whose `package.json` is this
+ * package, and which contains `node_modules/better-sqlite3`. Derived from the
+ * running module's location, NOT `npm root -g` (which points at the wrong tree
+ * when the package was installed under a custom prefix or via a registry shim).
+ *
+ * From `dist/setup/native-binding.js` → `../../` is the package root.
+ */
+export function resolveSelfInstallDir() {
+    const here = path.dirname(fileURLToPath(import.meta.url));
+    return path.resolve(here, '..', '..');
+}
+/**
+ * Smoke-test the native binding: load it, open an in-memory DB, run a probe.
+ * Synchronous (the load is sync) and never throws — returns a verdict.
+ */
+export function verifyNativeBinding() {
+    try {
+        const Database = require('better-sqlite3');
+        const db = new Database(':memory:');
+        db.exec('CREATE TABLE _sc_probe(x)');
+        db.close();
+        return { ok: true };
+    }
+    catch (err) {
+        return { ok: false, error: err instanceof Error ? err.message : String(err) };
+    }
+}
+/**
+ * Run `npm rebuild better-sqlite3` in the install dir. Async (the rebuild can
+ * take tens of seconds) so callers can keep a spinner alive. Never throws.
+ */
+export function rebuildNativeBinding(installDir) {
+    return new Promise((resolve) => {
+        let output = '';
+        let settled = false;
+        const finish = (ok) => { if (!settled) {
+            settled = true;
+            resolve({ ok, output });
+        } };
+        let child;
+        try {
+            child = spawn('npm', ['rebuild', 'better-sqlite3', '--no-audit', '--no-fund'], {
+                cwd: installDir,
+                stdio: ['ignore', 'pipe', 'pipe'],
+                shell: false,
+            });
+        }
+        catch (err) {
+            return resolve({ ok: false, output: err instanceof Error ? err.message : String(err) });
+        }
+        const timer = setTimeout(() => {
+            try {
+                child.kill('SIGTERM');
+            }
+            catch { /* already dead */ }
+            output += '\n[timed out after 180s]';
+            finish(false);
+        }, 180_000);
+        timer.unref();
+        child.stdout?.setEncoding('utf-8');
+        child.stderr?.setEncoding('utf-8');
+        child.stdout?.on('data', (c) => { output += c; });
+        child.stderr?.on('data', (c) => { output += c; });
+        child.on('error', (err) => { clearTimeout(timer); output += String(err?.message ?? err); finish(false); });
+        child.on('close', (code) => { clearTimeout(timer); finish(code === 0); });
+    });
+}
+/**
+ * Platform-aware build-toolchain hint, tailored by error text when available.
+ */
+function toolchainHint(rebuildOutput) {
+    const out = (rebuildOutput ?? '').toLowerCase();
+    const needsToolchain = !rebuildOutput || /gyp|python|make|g\+\+|cc1plus|no such file|command not found/.test(out);
+    if (!needsToolchain)
+        return '';
+    if (process.platform === 'darwin') {
+        return 'If the rebuild fails for lack of a compiler: xcode-select --install';
+    }
+    if (process.platform === 'win32') {
+        return 'If the rebuild fails for lack of a compiler: install the "Desktop development with C++" workload (Visual Studio Build Tools).';
+    }
+    return 'If the rebuild fails for lack of a compiler: sudo apt-get install -y python3 make g++  (or your distro\'s build-essential).';
+}
+/**
+ * The correct copy-paste remediation — the install-dir `cd` is the bit users
+ * miss (a bare `npm rebuild better-sqlite3` from $HOME is a silent no-op).
+ */
+export function nativeBindingRemediation(installDir, rebuildOutput) {
+    const lines = [
+        `cd "${installDir}" && npm rebuild better-sqlite3`,
+    ];
+    const hint = toolchainHint(rebuildOutput);
+    if (hint)
+        lines.push(hint);
+    lines.push('Then restart Claude Code / the OpenClaw gateway so processes reload the binding.');
+    return lines.join('\n');
+}
+/**
+ * Verify the binding; if it fails, rebuild in the install dir and re-verify.
+ * - 'ok'     — loaded first try (no rebuild).
+ * - 'healed' — rebuilt and now loads.
+ * - 'failed' — still broken after a rebuild; `remediation` carries the fix.
+ */
+export async function ensureNativeBinding(deps = {}) {
+    const verify = deps.verify ?? verifyNativeBinding;
+    const rebuild = deps.rebuild ?? rebuildNativeBinding;
+    const installDir = deps.installDir ?? resolveSelfInstallDir;
+    const first = verify();
+    if (first.ok)
+        return { status: 'ok' };
+    const dir = installDir();
+    const rebuilt = await rebuild(dir);
+    const after = verify();
+    if (after.ok)
+        return { status: 'healed', rebuildOutput: rebuilt.output };
+    return {
+        status: 'failed',
+        error: after.error ?? first.error,
+        rebuildOutput: rebuilt.output,
+        remediation: nativeBindingRemediation(dir, rebuilt.output),
+    };
+}

package/dist/setup/settings-hooks.js

@@ -1,10 +1,10 @@
 /**
  * Auto-configure Claude Code hooks in ~/.claude/settings.json.
  */
-import fs from 'fs';
 import path from 'path';
 import os from 'os';
 import { setAutoMemoryEnableConfig } from '../cloud/config.js';
+import { readJsonConfigOrAbort, writeJsonConfigWithBackup } from './json-config.js';
 const SETTINGS_PATH = path.join(os.homedir(), '.claude', 'settings.json');
 const CORTEX_HOOKS = {
     PreCompact: {
@@ -52,21 +52,16 @@ const SESSION_END_HOOK = {
 function hasCortexHook(entries) {
     return entries.some((e) => e.hooks?.some((h) => typeof h.command === 'string' && h.command.includes('shieldcortex')));
 }
+// Reads settings.json. A missing file yields {} (fresh install); a file that
+// EXISTS but won't parse THROWS — setupHooks() must surface that and abort
+// rather than write a hooks-only file over the user's permissions/env/model
+// settings. Mirrors uninstall.ts's "aborting to avoid corruption" discipline.
 function readSettings() {
-    if (!fs.existsSync(SETTINGS_PATH)) {
-        return {};
-    }
-    try {
-        return JSON.parse(fs.readFileSync(SETTINGS_PATH, 'utf-8'));
-    }
-    catch {
-        return {};
-    }
+    return readJsonConfigOrAbort(SETTINGS_PATH);
 }
+// Backs up an existing settings.json before overwriting it.
 function writeSettings(settings) {
-    const dir = path.dirname(SETTINGS_PATH);
-    fs.mkdirSync(dir, { recursive: true });
-    fs.writeFileSync(SETTINGS_PATH, JSON.stringify(settings, null, 2) + '\n', 'utf-8');
+    writeJsonConfigWithBackup(SETTINGS_PATH, settings);
 }
 /**
  * Migrate stale `npx shieldcortex hook ...` commands to `shieldcortex hook ...`.

package/dist/setup/uninstall.js

@@ -12,6 +12,7 @@ import os from 'os';
 import readline from 'readline';
 import { uninstallService } from '../service/install.js';
 import { uninstallOpenClawHook } from './openclaw.js';
+import { looksLikeShieldcortex } from './json-config.js';
 /**
  * Check if the current process is running in an agent context.
  * Agents (sub-agents) should not be able to uninstall ShieldCortex.
@@ -128,27 +129,6 @@ export function removeClaudeMdBlock() {
     fs.writeFileSync(CLAUDE_MD_PATH, newContent, 'utf-8');
     console.log('CLAUDE.md: removed ShieldCortex memory instructions block.');
 }
-/**
- * Ownership check: an mcpServers entry "looks like ShieldCortex" if its
- * command path or args contain a shieldcortex / shield-cortex token.
- * `mcpServers.memory` is a generic key — the official upstream
- * `@modelcontextprotocol/server-memory` registers under the same name —
- * so we MUST verify ownership before deletion or risk clobbering an
- * unrelated MCP server the user installed.
- */
-function looksLikeShieldcortex(entry) {
-    if (!entry || typeof entry !== 'object')
-        return false;
-    const e = entry;
-    const tokens = [];
-    if (typeof e.command === 'string')
-        tokens.push(e.command);
-    if (Array.isArray(e.args))
-        for (const a of e.args)
-            if (typeof a === 'string')
-                tokens.push(a);
-    return tokens.some((t) => /shield[-]?cortex/i.test(t));
-}
 /**
  * Remove the ShieldCortex MCP server entry from ~/.claude.json.
  *

package/dist/tools/context.d.ts

@@ -15,27 +15,27 @@ export declare const getContextSchema: z.ZodObject<{
         type: z.ZodEnum<["user", "cli", "hook", "email", "web", "agent", "file", "api", "tool_response"]>;
         identifier: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     }, {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     }>>;
 }, "strip", z.ZodTypeAny, {
-    format: "summary" | "detailed" | "raw";
+    format: "summary" | "raw" | "detailed";
     source?: {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     } | undefined;
     project?: string | undefined;
     query?: string | undefined;
 }, {
     source?: {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     } | undefined;
     project?: string | undefined;
-    format?: "summary" | "detailed" | "raw" | undefined;
+    format?: "summary" | "raw" | "detailed" | undefined;
     query?: string | undefined;
 }>;
 export type GetContextInput = z.infer<typeof getContextSchema>;
@@ -86,11 +86,11 @@ export declare const consolidateSchema: z.ZodObject<{
     force: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
     dryRun: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
 }, "strip", z.ZodTypeAny, {
-    dryRun: boolean;
     force: boolean;
+    dryRun: boolean;
 }, {
-    dryRun?: boolean | undefined;
     force?: boolean | undefined;
+    dryRun?: boolean | undefined;
 }>;
 export declare function executeConsolidate(input: {
     force?: boolean;

package/dist/tools/forget.d.ts

@@ -17,38 +17,38 @@ export declare const forgetSchema: z.ZodObject<{
         type: z.ZodEnum<["user", "cli", "hook", "email", "web", "agent", "file", "api", "tool_response"]>;
         identifier: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     }, {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     }>>;
 }, "strip", z.ZodTypeAny, {
-    dryRun: boolean;
     confirm: boolean;
+    dryRun: boolean;
     source?: {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     } | undefined;
     project?: string | undefined;
     id?: number | undefined;
-    category?: "architecture" | "pattern" | "preference" | "error" | "context" | "learning" | "todo" | "note" | "relationship" | "custom" | undefined;
+    category?: "context" | "pattern" | "architecture" | "preference" | "error" | "learning" | "todo" | "note" | "relationship" | "custom" | undefined;
     query?: string | undefined;
     olderThan?: number | undefined;
     belowSalience?: number | undefined;
 }, {
     source?: {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     } | undefined;
     project?: string | undefined;
     id?: number | undefined;
-    category?: "architecture" | "pattern" | "preference" | "error" | "context" | "learning" | "todo" | "note" | "relationship" | "custom" | undefined;
+    category?: "context" | "pattern" | "architecture" | "preference" | "error" | "learning" | "todo" | "note" | "relationship" | "custom" | undefined;
     query?: string | undefined;
+    confirm?: boolean | undefined;
     olderThan?: number | undefined;
     belowSalience?: number | undefined;
     dryRun?: boolean | undefined;
-    confirm?: boolean | undefined;
 }>;
 export type ForgetInput = z.infer<typeof forgetSchema>;
 /**
@@ -57,6 +57,7 @@ export type ForgetInput = z.infer<typeof forgetSchema>;
 export declare function executeForget(input: ForgetInput): Promise<{
     success: boolean;
     deleted?: number;
+    denied?: number;
     wouldDelete?: number;
     memories?: {
         id: number;

package/dist/tools/forget.js

@@ -131,14 +131,27 @@ export async function executeForget(input) {
                 error: error.toUserMessage(),
             };
         }
-        // Execute deletion within a transaction for atomicity
+        // Execute deletion within a transaction for atomicity. Route every
+        // affected id through deleteMemory(id, source) — NOT a raw bulk DELETE —
+        // so each row gets the same enforcement as the single-ID path: delete-ACL
+        // check (+ access-denial audit on refusal), graph cleanup, cloud-sync
+        // delete, and the dashboard `memory_deleted` event. A low-trust / non-owner
+        // caller therefore can't mass-delete protected memories. better-sqlite3 is
+        // synchronous, so the per-row loop stays inside one transaction atomically.
+        const deletedMemories = [];
         withTransaction(() => {
-            db.prepare(`DELETE FROM memories WHERE ${whereClause}`).run(...params);
+            for (const memory of affected) {
+                if (deleteMemory(memory.id, source)) {
+                    deletedMemories.push(memory);
+                }
+            }
         });
+        const denied = affected.length - deletedMemories.length;
         return {
             success: true,
-            deleted: affected.length,
-            memories: affected,
+            deleted: deletedMemories.length,
+            ...(denied > 0 ? { denied } : {}),
+            memories: deletedMemories,
         };
     }
     catch (error) {

package/dist/tools/recall.d.ts

@@ -20,10 +20,10 @@ export declare const recallSchema: z.ZodObject<{
         type: z.ZodEnum<["user", "cli", "hook", "email", "web", "agent", "file", "api", "tool_response"]>;
         identifier: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     }, {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     }>>;
 }, "strip", z.ZodTypeAny, {
@@ -31,26 +31,26 @@ export declare const recallSchema: z.ZodObject<{
     limit: number;
     includeDecayed: boolean;
     includeGlobal: boolean;
+    type?: "short_term" | "long_term" | "episodic" | undefined;
     source?: {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     } | undefined;
     project?: string | undefined;
-    type?: "short_term" | "long_term" | "episodic" | undefined;
-    category?: "architecture" | "pattern" | "preference" | "error" | "context" | "learning" | "todo" | "note" | "relationship" | "custom" | undefined;
+    category?: "context" | "pattern" | "architecture" | "preference" | "error" | "learning" | "todo" | "note" | "relationship" | "custom" | undefined;
     tags?: string[] | undefined;
     query?: string | undefined;
 }, {
+    type?: "short_term" | "long_term" | "episodic" | undefined;
     source?: {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     } | undefined;
     project?: string | undefined;
     mode?: "search" | "important" | "recent" | undefined;
-    type?: "short_term" | "long_term" | "episodic" | undefined;
-    category?: "architecture" | "pattern" | "preference" | "error" | "context" | "learning" | "todo" | "note" | "relationship" | "custom" | undefined;
-    tags?: string[] | undefined;
     limit?: number | undefined;
+    category?: "context" | "pattern" | "architecture" | "preference" | "error" | "learning" | "todo" | "note" | "relationship" | "custom" | undefined;
+    tags?: string[] | undefined;
     query?: string | undefined;
     includeDecayed?: boolean | undefined;
     includeGlobal?: boolean | undefined;
@@ -87,22 +87,22 @@ export declare const getMemorySchema: z.ZodObject<{
         type: z.ZodEnum<["user", "cli", "hook", "email", "web", "agent", "file", "api", "tool_response"]>;
         identifier: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     }, {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     }>>;
 }, "strip", z.ZodTypeAny, {
     id: number;
     source?: {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     } | undefined;
 }, {
     id: number;
     source?: {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     } | undefined;
 }>;

package/dist/tools/remember.d.ts

@@ -21,10 +21,10 @@ export declare const rememberSchema: z.ZodObject<{
         type: z.ZodEnum<["user", "cli", "hook", "email", "web", "agent", "file", "api", "tool_response"]>;
         identifier: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     }, {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     }>>;
     sourceType: z.ZodOptional<z.ZodEnum<["user", "cli", "hook", "email", "web", "agent", "file", "api", "tool_response"]>>;
@@ -35,43 +35,43 @@ export declare const rememberSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     title: string;
     content: string;
+    type?: "short_term" | "long_term" | "episodic" | undefined;
     scope?: "project" | "global" | undefined;
     transferable?: boolean | undefined;
     source?: {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     } | undefined;
     project?: string | undefined;
-    type?: "short_term" | "long_term" | "episodic" | undefined;
-    category?: "architecture" | "pattern" | "preference" | "error" | "context" | "learning" | "todo" | "note" | "relationship" | "custom" | undefined;
-    tags?: string[] | undefined;
     sourceIdentifier?: string | undefined;
+    category?: "context" | "pattern" | "architecture" | "preference" | "error" | "learning" | "todo" | "note" | "relationship" | "custom" | undefined;
+    tags?: string[] | undefined;
+    sourceType?: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response" | undefined;
     sessionId?: string | undefined;
-    sourceType?: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response" | undefined;
-    memoryPurpose?: "project" | "user" | "feedback" | "reference" | undefined;
+    memoryPurpose?: "user" | "project" | "feedback" | "reference" | undefined;
     memoryScope?: "private" | "team" | undefined;
-    importance?: "critical" | "low" | "high" | "normal" | undefined;
+    importance?: "low" | "high" | "critical" | "normal" | undefined;
     agentId?: string | undefined;
     workspaceDir?: string | undefined;
 }, {
     title: string;
     content: string;
+    type?: "short_term" | "long_term" | "episodic" | undefined;
     scope?: "project" | "global" | undefined;
     transferable?: boolean | undefined;
     source?: {
-        type: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response";
+        type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     } | undefined;
     project?: string | undefined;
-    type?: "short_term" | "long_term" | "episodic" | undefined;
-    category?: "architecture" | "pattern" | "preference" | "error" | "context" | "learning" | "todo" | "note" | "relationship" | "custom" | undefined;
-    tags?: string[] | undefined;
     sourceIdentifier?: string | undefined;
+    category?: "context" | "pattern" | "architecture" | "preference" | "error" | "learning" | "todo" | "note" | "relationship" | "custom" | undefined;
+    tags?: string[] | undefined;
+    sourceType?: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response" | undefined;
     sessionId?: string | undefined;
-    sourceType?: "user" | "cli" | "hook" | "agent" | "api" | "email" | "web" | "file" | "tool_response" | undefined;
-    memoryPurpose?: "project" | "user" | "feedback" | "reference" | undefined;
+    memoryPurpose?: "user" | "project" | "feedback" | "reference" | undefined;
     memoryScope?: "private" | "team" | undefined;
-    importance?: "critical" | "low" | "high" | "normal" | undefined;
+    importance?: "low" | "high" | "critical" | "normal" | undefined;
     agentId?: string | undefined;
     workspaceDir?: string | undefined;
 }>;

package/dist/tools/remember.js

@@ -4,7 +4,7 @@
  * Store memories with automatic salience detection and categorization.
  */
 import { z } from 'zod';
-import { addMemory, searchMemories, detectRelationships, createMemoryLink, getLastTruncationInfo } from '../memory/store.js';
+import { addMemory, updateMemory, searchMemories, detectRelationships, createMemoryLink, getLastTruncationInfo } from '../memory/store.js';
 import { calculateSalience, analyzeSalienceFactors, explainSalience } from '../memory/salience.js';
 import { formatErrorForMcp } from '../errors.js';
 import { resolveProject } from '../context/project-context.js';
@@ -92,18 +92,29 @@ export async function executeRemember(input) {
             project: resolvedProject ?? undefined,
             limit: 3,
         });
-        // If very similar memory exists, update instead
+        // If a very similar memory exists, genuinely UPDATE it with the new
+        // content rather than silently discarding the new write. The previous
+        // behaviour reported "Updated existing similar memory" but never persisted
+        // anything — so a richer follow-up was lost while the report implied a
+        // successful update (Phase 17 A4).
         if (existing.length > 0 && existing[0].relevanceScore > 0.9) {
             const existingMemory = existing[0].memory;
+            const contentChanged = existingMemory.content !== content;
+            const updated = contentChanged
+                ? updateMemory(existingMemory.id, { content, title })
+                : existingMemory;
+            const target = updated ?? existingMemory;
             return {
                 success: true,
                 memory: {
-                    id: existingMemory.id,
-                    title: existingMemory.title,
-                    salience: existingMemory.salience,
-                    type: existingMemory.type,
-                    category: existingMemory.category,
-                    reason: 'Updated existing similar memory',
+                    id: target.id,
+                    title: target.title,
+                    salience: target.salience,
+                    type: target.type,
+                    category: target.category,
+                    reason: contentChanged
+                        ? 'Updated existing similar memory with new content'
+                        : 'Existing similar memory already up to date',
                 },
             };
         }

package/dist/worker/brain-worker.d.ts

@@ -26,6 +26,7 @@ export declare class BrainWorker {
     private lastLightTick;
     private lastMediumTick;
     private lastConsolidation;
+    private lastAuditPurge;
     /**
      * Create a new BrainWorker
      *