npm - shieldcortex - Versions diffs - 4.35.0 → 4.36.0 - Mend

shieldcortex 4.35.0 → 4.36.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (234) hide show

package/dashboard/.next/standalone/dashboard/.next/server/pages/500.html CHANGED Viewed

@@ -1,2 +1,2 @@
-<!DOCTYPE html><!--h2qG7AvaXDfMKQrI_bK4V--><html id="__next_error__"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/d878b929b21636c4.js"/><script src="/_next/static/chunks/f70f563804550a9c.js" async=""></script><script src="/_next/static/chunks/43d761df92da7cb6.js" async=""></script><script src="/_next/static/chunks/e281719dbabcca1d.js" async=""></script><script src="/_next/static/chunks/9e56d1f8f4d7adcb.js" async=""></script><script src="/_next/static/chunks/turbopack-768a6a8b9db952e0.js" async=""></script><script src="/_next/static/chunks/102f894cc892994d.js" async=""></script><script src="/_next/static/chunks/417032eeb2cd875f.js" async=""></script><meta name="next-size-adjust" content=""/><title>500: Internal Server Error.</title><script src="/_next/static/chunks/a6dad97d9634a72d.js" noModule=""></script></head><body><div hidden=""><!--$--><!--/$--></div><div style="font-family:system-ui,&quot;Segoe UI&quot;,Roboto,Helvetica,Arial,sans-serif,&quot;Apple Color Emoji&quot;,&quot;Segoe UI Emoji&quot;;height:100vh;text-align:center;display:flex;flex-direction:column;align-items:center;justify-content:center"><div style="line-height:48px"><style>body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}
-@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}</style><h1 class="next-error-h1" style="display:inline-block;margin:0 20px 0 0;padding-right:23px;font-size:24px;font-weight:500;vertical-align:top">500</h1><div style="display:inline-block"><h2 style="font-size:14px;font-weight:400;line-height:28px">Internal Server Error.</h2></div></div></div><!--$--><!--/$--><script src="/_next/static/chunks/d878b929b21636c4.js" id="_R_" async=""></script><script>(self.__next_f=self.__next_f||[]).push([0])</script><script>self.__next_f.push([1,"1:\"$Sreact.fragment\"\n2:I[57043,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n3:I[27657,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n4:I[56978,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"OutletBoundary\"]\n5:\"$Sreact.suspense\"\n7:I[56978,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"ViewportBoundary\"]\n9:I[56978,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"MetadataBoundary\"]\nb:I[30687,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n"])</script><script>self.__next_f.push([1,"0:{\"P\":null,\"b\":\"h2qG7AvaXDfMKQrI-bK4V\",\"c\":[\"\",\"_global-error\"],\"q\":\"\",\"i\":false,\"f\":[[[\"\",{\"children\":[\"__PAGE__\",{}]}],[[\"$\",\"$1\",\"c\",{\"children\":[null,[\"$\",\"$L2\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L3\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":\"$undefined\",\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]]}],{\"children\":[[\"$\",\"$1\",\"c\",{\"children\":[[\"$\",\"html\",null,{\"id\":\"__next_error__\",\"children\":[[\"$\",\"head\",null,{\"children\":[\"$\",\"title\",null,{\"children\":\"500: Internal Server Error.\"}]}],[\"$\",\"body\",null,{\"children\":[\"$\",\"div\",null,{\"style\":{\"fontFamily\":\"system-ui,\\\"Segoe UI\\\",Roboto,Helvetica,Arial,sans-serif,\\\"Apple Color Emoji\\\",\\\"Segoe UI Emoji\\\"\",\"height\":\"100vh\",\"textAlign\":\"center\",\"display\":\"flex\",\"flexDirection\":\"column\",\"alignItems\":\"center\",\"justifyContent\":\"center\"},\"children\":[\"$\",\"div\",null,{\"style\":{\"lineHeight\":\"48px\"},\"children\":[[\"$\",\"style\",null,{\"dangerouslySetInnerHTML\":{\"__html\":\"body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}\\n@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}\"}}],[\"$\",\"h1\",null,{\"className\":\"next-error-h1\",\"style\":{\"display\":\"inline-block\",\"margin\":\"0 20px 0 0\",\"paddingRight\":23,\"fontSize\":24,\"fontWeight\":500,\"verticalAlign\":\"top\"},\"children\":\"500\"}],[\"$\",\"div\",null,{\"style\":{\"display\":\"inline-block\"},\"children\":[\"$\",\"h2\",null,{\"style\":{\"fontSize\":14,\"fontWeight\":400,\"lineHeight\":\"28px\"},\"children\":\"Internal Server Error.\"}]}]]}]}]}]]}],[[\"$\",\"script\",\"script-0\",{\"src\":\"/_next/static/chunks/102f894cc892994d.js\",\"async\":true,\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-1\",{\"src\":\"/_next/static/chunks/417032eeb2cd875f.js\",\"async\":true,\"nonce\":\"$undefined\"}]],[\"$\",\"$L4\",null,{\"children\":[\"$\",\"$5\",null,{\"name\":\"Next.MetadataOutlet\",\"children\":\"$@6\"}]}]]}],{},null,false,false]},null,false,false],[\"$\",\"$1\",\"h\",{\"children\":[null,[\"$\",\"$L7\",null,{\"children\":\"$L8\"}],[\"$\",\"div\",null,{\"hidden\":true,\"children\":[\"$\",\"$L9\",null,{\"children\":[\"$\",\"$5\",null,{\"name\":\"Next.Metadata\",\"children\":\"$La\"}]}]}],[\"$\",\"meta\",null,{\"name\":\"next-size-adjust\",\"content\":\"\"}]]}],false]],\"m\":\"$undefined\",\"G\":[\"$b\",\"$undefined\"],\"S\":true}\n"])</script><script>self.__next_f.push([1,"8:[[\"$\",\"meta\",\"0\",{\"charSet\":\"utf-8\"}],[\"$\",\"meta\",\"1\",{\"name\":\"viewport\",\"content\":\"width=device-width, initial-scale=1\"}]]\n"])</script><script>self.__next_f.push([1,"6:null\na:[]\n"])</script></body></html>
+<!DOCTYPE html><!--_JsmCyMaqewdhBNXZu1me--><html id="__next_error__"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/d878b929b21636c4.js"/><script src="/_next/static/chunks/f70f563804550a9c.js" async=""></script><script src="/_next/static/chunks/43d761df92da7cb6.js" async=""></script><script src="/_next/static/chunks/e281719dbabcca1d.js" async=""></script><script src="/_next/static/chunks/9e56d1f8f4d7adcb.js" async=""></script><script src="/_next/static/chunks/turbopack-768a6a8b9db952e0.js" async=""></script><script src="/_next/static/chunks/102f894cc892994d.js" async=""></script><script src="/_next/static/chunks/417032eeb2cd875f.js" async=""></script><meta name="next-size-adjust" content=""/><title>500: Internal Server Error.</title><script src="/_next/static/chunks/a6dad97d9634a72d.js" noModule=""></script></head><body><div hidden=""><!--$--><!--/$--></div><div style="font-family:system-ui,&quot;Segoe UI&quot;,Roboto,Helvetica,Arial,sans-serif,&quot;Apple Color Emoji&quot;,&quot;Segoe UI Emoji&quot;;height:100vh;text-align:center;display:flex;flex-direction:column;align-items:center;justify-content:center"><div style="line-height:48px"><style>body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}
+@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}</style><h1 class="next-error-h1" style="display:inline-block;margin:0 20px 0 0;padding-right:23px;font-size:24px;font-weight:500;vertical-align:top">500</h1><div style="display:inline-block"><h2 style="font-size:14px;font-weight:400;line-height:28px">Internal Server Error.</h2></div></div></div><!--$--><!--/$--><script src="/_next/static/chunks/d878b929b21636c4.js" id="_R_" async=""></script><script>(self.__next_f=self.__next_f||[]).push([0])</script><script>self.__next_f.push([1,"1:\"$Sreact.fragment\"\n2:I[57043,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n3:I[27657,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n4:I[56978,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"OutletBoundary\"]\n5:\"$Sreact.suspense\"\n7:I[56978,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"ViewportBoundary\"]\n9:I[56978,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"MetadataBoundary\"]\nb:I[30687,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n"])</script><script>self.__next_f.push([1,"0:{\"P\":null,\"b\":\"_JsmCyMaqewdhBNXZu1me\",\"c\":[\"\",\"_global-error\"],\"q\":\"\",\"i\":false,\"f\":[[[\"\",{\"children\":[\"__PAGE__\",{}]}],[[\"$\",\"$1\",\"c\",{\"children\":[null,[\"$\",\"$L2\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L3\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":\"$undefined\",\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]]}],{\"children\":[[\"$\",\"$1\",\"c\",{\"children\":[[\"$\",\"html\",null,{\"id\":\"__next_error__\",\"children\":[[\"$\",\"head\",null,{\"children\":[\"$\",\"title\",null,{\"children\":\"500: Internal Server Error.\"}]}],[\"$\",\"body\",null,{\"children\":[\"$\",\"div\",null,{\"style\":{\"fontFamily\":\"system-ui,\\\"Segoe UI\\\",Roboto,Helvetica,Arial,sans-serif,\\\"Apple Color Emoji\\\",\\\"Segoe UI Emoji\\\"\",\"height\":\"100vh\",\"textAlign\":\"center\",\"display\":\"flex\",\"flexDirection\":\"column\",\"alignItems\":\"center\",\"justifyContent\":\"center\"},\"children\":[\"$\",\"div\",null,{\"style\":{\"lineHeight\":\"48px\"},\"children\":[[\"$\",\"style\",null,{\"dangerouslySetInnerHTML\":{\"__html\":\"body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}\\n@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}\"}}],[\"$\",\"h1\",null,{\"className\":\"next-error-h1\",\"style\":{\"display\":\"inline-block\",\"margin\":\"0 20px 0 0\",\"paddingRight\":23,\"fontSize\":24,\"fontWeight\":500,\"verticalAlign\":\"top\"},\"children\":\"500\"}],[\"$\",\"div\",null,{\"style\":{\"display\":\"inline-block\"},\"children\":[\"$\",\"h2\",null,{\"style\":{\"fontSize\":14,\"fontWeight\":400,\"lineHeight\":\"28px\"},\"children\":\"Internal Server Error.\"}]}]]}]}]}]]}],[[\"$\",\"script\",\"script-0\",{\"src\":\"/_next/static/chunks/102f894cc892994d.js\",\"async\":true,\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-1\",{\"src\":\"/_next/static/chunks/417032eeb2cd875f.js\",\"async\":true,\"nonce\":\"$undefined\"}]],[\"$\",\"$L4\",null,{\"children\":[\"$\",\"$5\",null,{\"name\":\"Next.MetadataOutlet\",\"children\":\"$@6\"}]}]]}],{},null,false,false]},null,false,false],[\"$\",\"$1\",\"h\",{\"children\":[null,[\"$\",\"$L7\",null,{\"children\":\"$L8\"}],[\"$\",\"div\",null,{\"hidden\":true,\"children\":[\"$\",\"$L9\",null,{\"children\":[\"$\",\"$5\",null,{\"name\":\"Next.Metadata\",\"children\":\"$La\"}]}]}],[\"$\",\"meta\",null,{\"name\":\"next-size-adjust\",\"content\":\"\"}]]}],false]],\"m\":\"$undefined\",\"G\":[\"$b\",\"$undefined\"],\"S\":true}\n"])</script><script>self.__next_f.push([1,"8:[[\"$\",\"meta\",\"0\",{\"charSet\":\"utf-8\"}],[\"$\",\"meta\",\"1\",{\"name\":\"viewport\",\"content\":\"width=device-width, initial-scale=1\"}]]\n"])</script><script>self.__next_f.push([1,"6:null\na:[]\n"])</script></body></html>

package/dist/api/routes/memories.js CHANGED Viewed

@@ -553,7 +553,11 @@ export function registerMemoryRoutes(app, deps) {
                 salience,
                 memoryPurpose: memoryPurpose || undefined,
                 memoryScope: memoryScope || undefined,
-            });
+            }, undefined,
+            // Operator-attributable dashboard write → api:dashboard (trust 0.7):
+            // scanned like every write, but stays broadly recallable (above the
+            // sub-agent band) rather than the generic unattributed 0.3.
+            { type: 'api', identifier: 'dashboard' });
             res.status(201).json(memory);
         }
         catch (error) {
@@ -564,6 +568,15 @@ export function registerMemoryRoutes(app, deps) {
                     message: 'Use the dashboard control panel to resume memory creation.',
                 });
             }
+            // The dashboard write is now scanned — surface a defence block as a 422,
+            // not a generic 500.
+            if (error.name === 'MemoryBlockedError') {
+                return res.status(422).json({
+                    error: 'Blocked by the defence pipeline',
+                    blocked: true,
+                    message: error.message,
+                });
+            }
             res.status(500).json({ error: error.message });
         }
     });

package/dist/defence/quarantine/review.js CHANGED Viewed

@@ -1,8 +1,8 @@
 import { getDatabase, withTransaction } from '../../database/init.js';
-import { addMemory } from '../../memory/store.js';
+import { addMemory, MemoryBlockedError } from '../../memory/store.js';
 function getPendingQuarantineRow(id) {
     const db = getDatabase();
-    const row = db.prepare(`SELECT id, original_title, original_content, project, source_type, source_identifier, reason
+    const row = db.prepare(`SELECT id, original_title, original_content, project, source_type, source_identifier, reason, firewall_result
        FROM quarantine
       WHERE id = ? AND status = 'pending'`).get(id);
     return row ?? null;
@@ -31,16 +31,20 @@ function promoteApprovedQuarantineRow(row, reviewedBy) {
             approvedFromQuarantine: true,
             quarantineId: row.id,
             quarantineReason: row.reason ?? null,
+            // Original provenance is preserved here (the trust now reflects the
+            // human approval, not the original source).
             originalSourceType: row.source_type ?? null,
             originalSourceIdentifier: row.source_identifier ?? null,
         },
         captureMethod: 'review',
         reviewedBy,
         sourceKind: normalizeSourceKind(row.source_type),
-        source: row.source_type && row.source_identifier
-            ? `${row.source_type}:${row.source_identifier}`
-            : 'quarantine:review',
-    });
+    }, undefined,
+    // A human approving the item IS the parent-approval the quarantine was
+    // waiting for, so admit at user:approved (0.9 — out of the 0.5–0.7 auto-
+    // quarantine band, so it isn't re-quarantined in a loop). The pipeline still
+    // RE-SCANS, so genuinely-malicious content fails closed (caller catches it).
+    { type: 'user', identifier: 'approved' });
 }
 function markPendingRowReviewed(id, status, reviewedBy) {
     const db = getDatabase();
@@ -58,7 +62,25 @@ function approveExistingPendingRow(row, reviewedBy) {
             status: 'approved',
         };
     }
-    const memory = promoteApprovedQuarantineRow(row, reviewedBy);
+    // Never re-admit content the pipeline HARD-BLOCKED. Approving a BLOCK item
+    // rejects it instead of laundering hard-rejected poison back into memory.
+    if (row.firewall_result === 'BLOCK') {
+        markPendingRowReviewed(row.id, 'rejected', reviewedBy);
+        return { id: row.id, status: 'rejected' };
+    }
+    // QUARANTINE (soft hold): re-admit through the pipeline at operator-approved
+    // trust. If the content now hard-blocks, fail closed — reject, don't admit.
+    let memory;
+    try {
+        memory = promoteApprovedQuarantineRow(row, reviewedBy);
+    }
+    catch (e) {
+        if (e instanceof MemoryBlockedError) {
+            markPendingRowReviewed(row.id, 'rejected', reviewedBy);
+            return { id: row.id, status: 'rejected' };
+        }
+        throw e;
+    }
     markPendingRowReviewed(row.id, 'approved', reviewedBy);
     return {
         id: row.id,

package/dist/defence/trust/recall-filter.js CHANGED Viewed

@@ -11,9 +11,13 @@ export function filterByTrust(results, minTrust, context) {
         // Filter below minimum trust
         if (score < minTrust)
             return false;
-        // CONFIDENTIAL: only include if context matches
+        // CONFIDENTIAL: context-scope only when the row actually DECLARES a
+        // context. metadata.context is not written on store today, so requiring
+        // equality dropped every CONFIDENTIAL (any email/phone-bearing) row from
+        // recall — silent amnesia. Drop only a declared-but-mismatched context.
         if (item.sensitivity_level === 'CONFIDENTIAL') {
-            if (!context || item.metadata?.context !== context)
+            const rowContext = item.metadata?.context;
+            if (rowContext != null && context != null && rowContext !== context)
                 return false;
         }
         return true;

package/dist/defence/trust/source-scorer.js CHANGED Viewed

@@ -5,6 +5,11 @@ import { scoreAgent, buildAgentHierarchy } from './agent-scorer.js';
 const BASE_SCORES = {
     'user:direct': 1.0,
     'user:approved': 0.9,
+    // Bulk import (restore from a backup/JSON). The generic `file` type is 0.6,
+    // which sits inside the 0.5–0.7 auto-quarantine band and would quarantine
+    // every imported row. Pin below the band so a benign restore succeeds while
+    // imported file data stays scanned + low-trust until reviewed.
+    'file:import': 0.4,
 };
 const TYPE_SCORES = {
     user: 1.0,

package/dist/memory/consolidate.js CHANGED Viewed

@@ -408,16 +408,26 @@ export function clusterAndSummarise(options) {
                     bestCount = count;
                 }
             }
-            addMemory({
-                type: 'long_term',
-                category: category,
-                title: summaryTitle,
-                content: summaryContent,
-                project: bestProject || undefined,
-                tags: ['auto-summary'],
-                salience: 0.6,
-            });
-            summariesCreated++;
+            try {
+                addMemory({
+                    type: 'long_term',
+                    category: category,
+                    title: summaryTitle,
+                    content: summaryContent,
+                    project: bestProject || undefined,
+                    tags: ['auto-summary'],
+                    salience: 0.6,
+                }, undefined,
+                // System-generated consolidation summary — honest cli provenance
+                // (trust 0.9, above the auto-quarantine band so it isn't held).
+                { type: 'cli', identifier: 'consolidate:summary' });
+                summariesCreated++;
+            }
+            catch {
+                // A summary whose content trips the (now-unconditional) defence scan
+                // must NOT abort the whole consolidation transaction — skip it, like the
+                // per-row guard in importMemories.
+            }
         }
         return { clusters, summariesCreated };
     });
@@ -800,22 +810,44 @@ export function exportMemories(project) {
  * Import memories from JSON
  */
 export function importMemories(json) {
-    // Wrap in transaction for atomic import
+    // Wrap in transaction for atomic import. addMemory opens its own nested
+    // transaction (better-sqlite3 SAVEPOINT), so a per-row block rolls back only
+    // that row and the clean rows still commit.
     return withTransaction(() => {
-        const db = getDatabase();
         const memories = JSON.parse(json);
-        const stmt = db.prepare(`
-      INSERT INTO memories (type, category, title, content, project, tags, salience, metadata)
-      VALUES (?, ?, ?, ?, ?, ?, ?, ?)
-    `);
+        // SELECT * exports store tags/metadata as JSON TEXT — parse back to the
+        // array/object shapes addMemory expects.
+        const parseJsonField = (value, fallback) => {
+            if (typeof value !== 'string')
+                return value ?? fallback;
+            try {
+                return JSON.parse(value);
+            }
+            catch {
+                return fallback;
+            }
+        };
         let imported = 0;
         for (const memory of memories) {
             try {
-                stmt.run(memory.type, memory.category, memory.title, memory.content, memory.project || null, memory.tags || '[]', memory.salience || 0.5, memory.metadata || '{}');
+                // Route every imported row through the defence pipeline + attribute it
+                // to file:import (trust 0.4 — below the auto-quarantine band). Closes
+                // the raw-INSERT bypass that admitted unscanned rows at trust 1.0 /
+                // 'user:direct'. The pipeline BLOCKs poisoned rows (caught below).
+                addMemory({
+                    type: memory.type,
+                    category: memory.category,
+                    title: String(memory.title ?? ''),
+                    content: String(memory.content ?? ''),
+                    project: typeof memory.project === 'string' ? memory.project : undefined,
+                    tags: parseJsonField(memory.tags, []),
+                    salience: typeof memory.salience === 'number' ? memory.salience : 0.5,
+                    metadata: parseJsonField(memory.metadata, {}),
+                }, DEFAULT_CONFIG, { type: 'file', identifier: 'import' });
                 imported++;
             }
             catch {
-                // Skip duplicates or invalid entries
+                // Skip rows the defence pipeline blocks (poisoned), or invalid entries.
             }
         }
         return imported;

package/dist/memory/lifecycle.js CHANGED Viewed

@@ -26,6 +26,11 @@ import { activateMemory as spreadActivation } from './activation.js';
 import { jaccardSimilarity } from './similarity.js';
 import { emitMemoryAccessed, emitMemoryUpdated, persistEvent, } from '../api/events.js';
 import { createMemoryLink } from './links.js';
+import { runDefencePipeline } from '../defence/index.js';
+// Enrichment text is recall-query / caller-derived (attacker-influenced); scan
+// it before persisting. Trust doesn't matter here (the row keeps its own) — we
+// only act on the firewall verdict, so a low-trust web source is fine.
+const ENRICH_SOURCE = { type: 'web', identifier: 'enrichment' };
 // Cyclic import — see header. getMemoryById/rowToMemory/getMemoriesByType
 // live in store.ts; MAX_CONTENT_SIZE is the per-memory content budget
 // that both truncateContent (store.ts) and enrichMemory (here) honour.
@@ -194,6 +199,14 @@ export function enrichMemory(memoryId, newContext, contextType = 'access') {
     if (newContent.length > MAX_CONTENT_SIZE - 500) {
         return { enriched: false, reason: 'Content size limit reached' };
     }
+    // DEFENCE: re-scan the merged content before persisting — the read-path
+    // analogue of mergeMemories. The appended text comes from a recall query /
+    // caller and could straddle an injection or credential into a clean stored
+    // row. Skip (don't poison) on a non-ALLOW verdict.
+    const defenceResult = runDefencePipeline(newContent, memory.title, ENRICH_SOURCE, undefined, memory.project ?? undefined);
+    if (defenceResult.firewall.result !== 'ALLOW') {
+        return { enriched: false, reason: `Enrichment blocked by defence: ${defenceResult.firewall.reason}` };
+    }
     // Update memory
     db.prepare(`
     UPDATE memories

package/dist/memory/store.d.ts CHANGED Viewed

@@ -7,6 +7,7 @@
 import { Memory, MemoryInput, MemoryType, MemoryConfig } from './types.js';
 import type { DefenceSource } from '../defence/types.js';
 export declare const MAX_CONTENT_SIZE: number;
+export declare const UNATTRIBUTED_SOURCE: DefenceSource;
 /**
  * Get truncation info from the last addMemory call
  */

package/dist/memory/store.js CHANGED Viewed

@@ -32,6 +32,13 @@ import { createMemoryLink, detectRelationships } from './links.js';
 // Anti-bloat: Maximum content size per memory (10KB).
 // Exported because lifecycle.ts also enforces this budget inside enrichMemory.
 export const MAX_CONTENT_SIZE = 10 * 1024;
+// Synthetic source for writes that arrive without an attributed DefenceSource
+// (dashboard REST POST, bulk paths, etc). It MUST score strictly below the
+// 0.5–0.7 auto-quarantine band (web = 0.3) so unattributed writes are SCANNED
+// + stamped low-trust rather than admitted unscanned at trust 1.0 — but are not
+// force-quarantined (which would make every source-less write throw). Closing
+// the old `if (source)` defence-pipeline bypass.
+export const UNATTRIBUTED_SOURCE = { type: 'web', identifier: 'unattributed' };
 // Track truncation info globally for the last addMemory call
 let lastTruncationInfo = null;
 /**
@@ -326,43 +333,46 @@ export function addMemory(input, config = DEFAULT_CONFIG, source) {
         });
         throw new MemoryBlockedError(`Rate limited: exceeded ${RATE_LIMIT_MAX} writes per minute`);
     }
-    // DEFENCE PIPELINE: Scan content before storage
-    let defenceResult = null;
-    if (source) {
-        defenceResult = runDefencePipeline(input.content, input.title, source, undefined, input.project);
-        // Auto-quarantine sub-agent writes (trust 0.5–0.7)
-        const trust = defenceResult.trust.score;
-        if (defenceResult.allowed && trust >= 0.5 && trust < 0.7) {
-            defenceResult.allowed = false;
-            defenceResult.firewall.result = 'QUARANTINE';
-            defenceResult.firewall.reason = `Sub-agent write (trust=${trust.toFixed(3)}) requires parent approval`;
-            // Pipeline returned ALLOW so pipeline.ts didn't sync quarantine content.
-            // Sync it now since we've overridden to QUARANTINE post-pipeline.
-            if (isFeatureEnabled('cloud_sync'))
-                try {
-                    const indicators = defenceResult.firewall.threatIndicators.map(t => typeof t === 'string' ? t : t.pattern ?? String(t));
-                    syncQuarantineToCloud({
-                        original_content: input.content,
-                        original_title: input.title,
-                        source_type: source.type,
-                        source_identifier: source.identifier,
-                        reason: defenceResult.firewall.reason,
-                        threat_indicators: indicators,
-                        anomaly_score: defenceResult.firewall.anomalyScore,
-                        firewall_result: defenceResult.firewall.result,
-                        project: input.project ?? null,
-                        sensitivity_level: defenceResult.sensitivity.level,
-                    });
-                }
-                catch {
-                    // Cloud sync must never affect local quarantine flow
-                }
-        }
-        if (!defenceResult.allowed) {
-            // Store in quarantine instead of memory
-            quarantineMemory(input, source, defenceResult);
-            throw new MemoryBlockedError(defenceResult.firewall.reason);
-        }
+    // DEFENCE PIPELINE: Scan EVERY write before storage. Source-less writes get a
+    // conservative low-trust synthetic source (UNATTRIBUTED_SOURCE = web:0.3) so
+    // they are still scanned + stamped low-trust instead of admitted unscanned at
+    // trust 1.0 — closing the old `if (source)` bypass. Rate-limiting stays gated
+    // on an explicit source (above) so bulk source-less/import writes aren't
+    // throttled by the shared synthetic key.
+    const effectiveSource = source ?? UNATTRIBUTED_SOURCE;
+    const defenceResult = runDefencePipeline(input.content, input.title, effectiveSource, undefined, input.project);
+    // Auto-quarantine sub-agent writes (trust 0.5–0.7)
+    const trust = defenceResult.trust.score;
+    if (defenceResult.allowed && trust >= 0.5 && trust < 0.7) {
+        defenceResult.allowed = false;
+        defenceResult.firewall.result = 'QUARANTINE';
+        defenceResult.firewall.reason = `Sub-agent write (trust=${trust.toFixed(3)}) requires parent approval`;
+        // Pipeline returned ALLOW so pipeline.ts didn't sync quarantine content.
+        // Sync it now since we've overridden to QUARANTINE post-pipeline.
+        if (isFeatureEnabled('cloud_sync'))
+            try {
+                const indicators = defenceResult.firewall.threatIndicators.map(t => typeof t === 'string' ? t : t.pattern ?? String(t));
+                syncQuarantineToCloud({
+                    original_content: input.content,
+                    original_title: input.title,
+                    source_type: effectiveSource.type,
+                    source_identifier: effectiveSource.identifier,
+                    reason: defenceResult.firewall.reason,
+                    threat_indicators: indicators,
+                    anomaly_score: defenceResult.firewall.anomalyScore,
+                    firewall_result: defenceResult.firewall.result,
+                    project: input.project ?? null,
+                    sensitivity_level: defenceResult.sensitivity.level,
+                });
+            }
+            catch {
+                // Cloud sync must never affect local quarantine flow
+            }
+    }
+    if (!defenceResult.allowed) {
+        // Store in quarantine instead of memory
+        quarantineMemory(input, effectiveSource, defenceResult);
+        throw new MemoryBlockedError(defenceResult.firewall.reason);
     }
     const db = getDatabase();
     // Calculate salience if not provided
@@ -377,7 +387,7 @@ export function addMemory(input, config = DEFAULT_CONFIG, source) {
     const scope = input.scope ??
         (detectGlobalPattern(input.content, category, tags) ? 'global' : 'project');
     const transferable = input.transferable ?? (scope === 'global' ? 1 : 0);
-    const sourceDetails = inferSourceDetails({ ...input, tags }, source);
+    const sourceDetails = inferSourceDetails({ ...input, tags }, effectiveSource);
     const status = input.status ?? 'active';
     const pinned = input.pinned ? 1 : 0;
     const cloudExcluded = input.cloudExcluded ? 1 : 0;
@@ -400,14 +410,11 @@ export function addMemory(input, config = DEFAULT_CONFIG, source) {
     const insertedId = db.transaction(() => {
         const memoryUuid = randomUUID();
         const result = stmt.run(memoryUuid, type, category, input.title, truncationResult.content, input.project || null, JSON.stringify(tags), salience, JSON.stringify(input.metadata || {}), scope, transferable, status, pinned, input.reviewedBy ? new Date().toISOString() : null, input.reviewedBy ?? null, sourceDetails.sourceKind, sourceDetails.captureMethod, cloudExcluded, input.memoryPurpose || 'project', input.memoryScope || 'private');
-        if (defenceResult) {
-            db.prepare(`UPDATE memories SET trust_score = ?, sensitivity_level = ?, source = ? WHERE id = ?`)
-                .run(defenceResult.trust.score, defenceResult.sensitivity.level, sourceDetails.sourceValue, result.lastInsertRowid);
-        }
-        else {
-            db.prepare(`UPDATE memories SET source = ?, trust_score = COALESCE(trust_score, ?), sensitivity_level = COALESCE(sensitivity_level, ?) WHERE id = ?`)
-                .run(sourceDetails.sourceValue, input.trustScore ?? 1.0, input.sensitivityLevel ?? 'INTERNAL', result.lastInsertRowid);
-        }
+        // defenceResult is always set now (every write is scanned), so always stamp
+        // the pipeline's real trust + sensitivity alongside the resolved source —
+        // no source-less branch can default to trust 1.0 / unscanned INTERNAL.
+        db.prepare(`UPDATE memories SET trust_score = ?, sensitivity_level = ?, source = ? WHERE id = ?`)
+            .run(defenceResult.trust.score, defenceResult.sensitivity.level, sourceDetails.sourceValue, result.lastInsertRowid);
         return result.lastInsertRowid;
     })();
     const memory = getMemoryById(insertedId);
@@ -454,14 +461,14 @@ export function addMemory(input, config = DEFAULT_CONFIG, source) {
         // Don't fail memory creation if linking fails
         console.error('[shieldcortex] Auto-link failed:', e);
     }
-    // DEFENCE: Store fragmentation data for cross-memory payload detection
-    if (source) {
-        try {
-            storeFragmentationData(memory.id, truncationResult.content);
-        }
-        catch (e) {
-            console.warn('[shieldcortex] Fragmentation data storage failed:', e instanceof Error ? e.message : e);
-        }
+    // DEFENCE: Store fragmentation data for cross-memory payload detection.
+    // Un-gated from `if (source)` so source-less writes also feed the temporal
+    // assembly corpus (a blind spot the write-bypass left).
+    try {
+        storeFragmentationData(memory.id, truncationResult.content);
+    }
+    catch (e) {
+        console.warn('[shieldcortex] Fragmentation data storage failed:', e instanceof Error ? e.message : e);
     }
     // SEMANTIC SEARCH: Generate embedding asynchronously (don't block INSERT)
     const memoryId = memory.id;
@@ -582,6 +589,18 @@ export function updateMemory(id, updates) {
     const existing = getMemoryById(id);
     if (!existing)
         return null;
+    // DEFENCE: re-scan when content/title changes — the UPDATE path is otherwise
+    // an unscanned write (reachable via remember-dedup + the dashboard PATCH).
+    // Mirror mergeMemories: fail closed on a non-ALLOW verdict so a poison content
+    // replace can't overwrite a clean row unchecked.
+    if (updates.content !== undefined || updates.title !== undefined) {
+        const scanContent = updates.content !== undefined ? updates.content : existing.content;
+        const scanTitle = updates.title !== undefined ? updates.title : existing.title;
+        const defenceResult = runDefencePipeline(scanContent, scanTitle, UNATTRIBUTED_SOURCE, undefined, existing.project ?? undefined);
+        if (defenceResult.firewall.result !== 'ALLOW') {
+            throw new MemoryBlockedError(defenceResult.firewall.reason);
+        }
+    }
     const fields = [];
     const values = [];
     if (updates.title !== undefined) {

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "shieldcortex",
-  "version": "4.35.0",
+  "version": "4.36.0",
   "description": "Trustworthy memory and security for AI agents. Recall debugging, review queue, OpenClaw session capture, and memory poisoning defence for Claude Code, Codex, OpenClaw, LangChain, and MCP agents.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",