npm - shieldcortex - Versions diffs - 4.39.0 → 4.40.0 - Mend

shieldcortex 4.39.0 → 4.40.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (234) hide show

package/dashboard/.next/standalone/dashboard/.next/server/pages/500.html CHANGED Viewed

@@ -1,2 +1,2 @@
-<!DOCTYPE html><!--LfTY3B6uX3j7zNwqqgvPG--><html id="__next_error__"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/d878b929b21636c4.js"/><script src="/_next/static/chunks/f70f563804550a9c.js" async=""></script><script src="/_next/static/chunks/43d761df92da7cb6.js" async=""></script><script src="/_next/static/chunks/e281719dbabcca1d.js" async=""></script><script src="/_next/static/chunks/9e56d1f8f4d7adcb.js" async=""></script><script src="/_next/static/chunks/turbopack-768a6a8b9db952e0.js" async=""></script><script src="/_next/static/chunks/102f894cc892994d.js" async=""></script><script src="/_next/static/chunks/417032eeb2cd875f.js" async=""></script><meta name="next-size-adjust" content=""/><title>500: Internal Server Error.</title><script src="/_next/static/chunks/a6dad97d9634a72d.js" noModule=""></script></head><body><div hidden=""><!--$--><!--/$--></div><div style="font-family:system-ui,&quot;Segoe UI&quot;,Roboto,Helvetica,Arial,sans-serif,&quot;Apple Color Emoji&quot;,&quot;Segoe UI Emoji&quot;;height:100vh;text-align:center;display:flex;flex-direction:column;align-items:center;justify-content:center"><div style="line-height:48px"><style>body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}
-@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}</style><h1 class="next-error-h1" style="display:inline-block;margin:0 20px 0 0;padding-right:23px;font-size:24px;font-weight:500;vertical-align:top">500</h1><div style="display:inline-block"><h2 style="font-size:14px;font-weight:400;line-height:28px">Internal Server Error.</h2></div></div></div><!--$--><!--/$--><script src="/_next/static/chunks/d878b929b21636c4.js" id="_R_" async=""></script><script>(self.__next_f=self.__next_f||[]).push([0])</script><script>self.__next_f.push([1,"1:\"$Sreact.fragment\"\n2:I[57043,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n3:I[27657,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n4:I[56978,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"OutletBoundary\"]\n5:\"$Sreact.suspense\"\n7:I[56978,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"ViewportBoundary\"]\n9:I[56978,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"MetadataBoundary\"]\nb:I[30687,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n"])</script><script>self.__next_f.push([1,"0:{\"P\":null,\"b\":\"LfTY3B6uX3j7zNwqqgvPG\",\"c\":[\"\",\"_global-error\"],\"q\":\"\",\"i\":false,\"f\":[[[\"\",{\"children\":[\"__PAGE__\",{}]}],[[\"$\",\"$1\",\"c\",{\"children\":[null,[\"$\",\"$L2\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L3\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":\"$undefined\",\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]]}],{\"children\":[[\"$\",\"$1\",\"c\",{\"children\":[[\"$\",\"html\",null,{\"id\":\"__next_error__\",\"children\":[[\"$\",\"head\",null,{\"children\":[\"$\",\"title\",null,{\"children\":\"500: Internal Server Error.\"}]}],[\"$\",\"body\",null,{\"children\":[\"$\",\"div\",null,{\"style\":{\"fontFamily\":\"system-ui,\\\"Segoe UI\\\",Roboto,Helvetica,Arial,sans-serif,\\\"Apple Color Emoji\\\",\\\"Segoe UI Emoji\\\"\",\"height\":\"100vh\",\"textAlign\":\"center\",\"display\":\"flex\",\"flexDirection\":\"column\",\"alignItems\":\"center\",\"justifyContent\":\"center\"},\"children\":[\"$\",\"div\",null,{\"style\":{\"lineHeight\":\"48px\"},\"children\":[[\"$\",\"style\",null,{\"dangerouslySetInnerHTML\":{\"__html\":\"body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}\\n@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}\"}}],[\"$\",\"h1\",null,{\"className\":\"next-error-h1\",\"style\":{\"display\":\"inline-block\",\"margin\":\"0 20px 0 0\",\"paddingRight\":23,\"fontSize\":24,\"fontWeight\":500,\"verticalAlign\":\"top\"},\"children\":\"500\"}],[\"$\",\"div\",null,{\"style\":{\"display\":\"inline-block\"},\"children\":[\"$\",\"h2\",null,{\"style\":{\"fontSize\":14,\"fontWeight\":400,\"lineHeight\":\"28px\"},\"children\":\"Internal Server Error.\"}]}]]}]}]}]]}],[[\"$\",\"script\",\"script-0\",{\"src\":\"/_next/static/chunks/102f894cc892994d.js\",\"async\":true,\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-1\",{\"src\":\"/_next/static/chunks/417032eeb2cd875f.js\",\"async\":true,\"nonce\":\"$undefined\"}]],[\"$\",\"$L4\",null,{\"children\":[\"$\",\"$5\",null,{\"name\":\"Next.MetadataOutlet\",\"children\":\"$@6\"}]}]]}],{},null,false,false]},null,false,false],[\"$\",\"$1\",\"h\",{\"children\":[null,[\"$\",\"$L7\",null,{\"children\":\"$L8\"}],[\"$\",\"div\",null,{\"hidden\":true,\"children\":[\"$\",\"$L9\",null,{\"children\":[\"$\",\"$5\",null,{\"name\":\"Next.Metadata\",\"children\":\"$La\"}]}]}],[\"$\",\"meta\",null,{\"name\":\"next-size-adjust\",\"content\":\"\"}]]}],false]],\"m\":\"$undefined\",\"G\":[\"$b\",\"$undefined\"],\"S\":true}\n"])</script><script>self.__next_f.push([1,"8:[[\"$\",\"meta\",\"0\",{\"charSet\":\"utf-8\"}],[\"$\",\"meta\",\"1\",{\"name\":\"viewport\",\"content\":\"width=device-width, initial-scale=1\"}]]\n"])</script><script>self.__next_f.push([1,"6:null\na:[]\n"])</script></body></html>
+<!DOCTYPE html><!--UA_86bJ_tNIyDXr_i0gK6--><html id="__next_error__"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/d878b929b21636c4.js"/><script src="/_next/static/chunks/f70f563804550a9c.js" async=""></script><script src="/_next/static/chunks/43d761df92da7cb6.js" async=""></script><script src="/_next/static/chunks/e281719dbabcca1d.js" async=""></script><script src="/_next/static/chunks/9e56d1f8f4d7adcb.js" async=""></script><script src="/_next/static/chunks/turbopack-768a6a8b9db952e0.js" async=""></script><script src="/_next/static/chunks/102f894cc892994d.js" async=""></script><script src="/_next/static/chunks/417032eeb2cd875f.js" async=""></script><meta name="next-size-adjust" content=""/><title>500: Internal Server Error.</title><script src="/_next/static/chunks/a6dad97d9634a72d.js" noModule=""></script></head><body><div hidden=""><!--$--><!--/$--></div><div style="font-family:system-ui,&quot;Segoe UI&quot;,Roboto,Helvetica,Arial,sans-serif,&quot;Apple Color Emoji&quot;,&quot;Segoe UI Emoji&quot;;height:100vh;text-align:center;display:flex;flex-direction:column;align-items:center;justify-content:center"><div style="line-height:48px"><style>body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}
+@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}</style><h1 class="next-error-h1" style="display:inline-block;margin:0 20px 0 0;padding-right:23px;font-size:24px;font-weight:500;vertical-align:top">500</h1><div style="display:inline-block"><h2 style="font-size:14px;font-weight:400;line-height:28px">Internal Server Error.</h2></div></div></div><!--$--><!--/$--><script src="/_next/static/chunks/d878b929b21636c4.js" id="_R_" async=""></script><script>(self.__next_f=self.__next_f||[]).push([0])</script><script>self.__next_f.push([1,"1:\"$Sreact.fragment\"\n2:I[57043,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n3:I[27657,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n4:I[56978,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"OutletBoundary\"]\n5:\"$Sreact.suspense\"\n7:I[56978,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"ViewportBoundary\"]\n9:I[56978,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"MetadataBoundary\"]\nb:I[30687,[\"/_next/static/chunks/102f894cc892994d.js\",\"/_next/static/chunks/417032eeb2cd875f.js\"],\"default\"]\n"])</script><script>self.__next_f.push([1,"0:{\"P\":null,\"b\":\"UA_86bJ-tNIyDXr-i0gK6\",\"c\":[\"\",\"_global-error\"],\"q\":\"\",\"i\":false,\"f\":[[[\"\",{\"children\":[\"__PAGE__\",{}]}],[[\"$\",\"$1\",\"c\",{\"children\":[null,[\"$\",\"$L2\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L3\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":\"$undefined\",\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]]}],{\"children\":[[\"$\",\"$1\",\"c\",{\"children\":[[\"$\",\"html\",null,{\"id\":\"__next_error__\",\"children\":[[\"$\",\"head\",null,{\"children\":[\"$\",\"title\",null,{\"children\":\"500: Internal Server Error.\"}]}],[\"$\",\"body\",null,{\"children\":[\"$\",\"div\",null,{\"style\":{\"fontFamily\":\"system-ui,\\\"Segoe UI\\\",Roboto,Helvetica,Arial,sans-serif,\\\"Apple Color Emoji\\\",\\\"Segoe UI Emoji\\\"\",\"height\":\"100vh\",\"textAlign\":\"center\",\"display\":\"flex\",\"flexDirection\":\"column\",\"alignItems\":\"center\",\"justifyContent\":\"center\"},\"children\":[\"$\",\"div\",null,{\"style\":{\"lineHeight\":\"48px\"},\"children\":[[\"$\",\"style\",null,{\"dangerouslySetInnerHTML\":{\"__html\":\"body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}\\n@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}\"}}],[\"$\",\"h1\",null,{\"className\":\"next-error-h1\",\"style\":{\"display\":\"inline-block\",\"margin\":\"0 20px 0 0\",\"paddingRight\":23,\"fontSize\":24,\"fontWeight\":500,\"verticalAlign\":\"top\"},\"children\":\"500\"}],[\"$\",\"div\",null,{\"style\":{\"display\":\"inline-block\"},\"children\":[\"$\",\"h2\",null,{\"style\":{\"fontSize\":14,\"fontWeight\":400,\"lineHeight\":\"28px\"},\"children\":\"Internal Server Error.\"}]}]]}]}]}]]}],[[\"$\",\"script\",\"script-0\",{\"src\":\"/_next/static/chunks/102f894cc892994d.js\",\"async\":true,\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-1\",{\"src\":\"/_next/static/chunks/417032eeb2cd875f.js\",\"async\":true,\"nonce\":\"$undefined\"}]],[\"$\",\"$L4\",null,{\"children\":[\"$\",\"$5\",null,{\"name\":\"Next.MetadataOutlet\",\"children\":\"$@6\"}]}]]}],{},null,false,false]},null,false,false],[\"$\",\"$1\",\"h\",{\"children\":[null,[\"$\",\"$L7\",null,{\"children\":\"$L8\"}],[\"$\",\"div\",null,{\"hidden\":true,\"children\":[\"$\",\"$L9\",null,{\"children\":[\"$\",\"$5\",null,{\"name\":\"Next.Metadata\",\"children\":\"$La\"}]}]}],[\"$\",\"meta\",null,{\"name\":\"next-size-adjust\",\"content\":\"\"}]]}],false]],\"m\":\"$undefined\",\"G\":[\"$b\",\"$undefined\"],\"S\":true}\n"])</script><script>self.__next_f.push([1,"8:[[\"$\",\"meta\",\"0\",{\"charSet\":\"utf-8\"}],[\"$\",\"meta\",\"1\",{\"name\":\"viewport\",\"content\":\"width=device-width, initial-scale=1\"}]]\n"])</script><script>self.__next_f.push([1,"6:null\na:[]\n"])</script></body></html>

package/dist/cloud/cli.js CHANGED Viewed

@@ -1,4 +1,4 @@
-import { getCloudConfig, setCloudConfig, getCloudSyncControls, setCloudSyncControls, getDefenceMode, setDefenceMode, getVerifyConfig, setVerifyConfig, getReviewCopilotConfig, getOpenClawAutoMemory, setOpenClawAutoMemory, isProactiveRecallEnabled, setProactiveRecall, restore410Defaults, getRankerConfig, setRankerConfig, getToolResponseScanConfig, setToolResponseScanConfig, } from './config.js';
+import { getCloudConfig, setCloudConfig, getCloudSyncControls, setCloudSyncControls, getDefenceMode, setDefenceMode, getVerifyConfig, setVerifyConfig, getReviewCopilotConfig, getOpenClawAutoMemory, setOpenClawAutoMemory, isProactiveRecallEnabled, setProactiveRecall, restore410Defaults, getRankerConfig, setRankerConfig, getToolResponseScanConfig, setToolResponseScanConfig, isRevokeBySourceEnabled, setRevokeBySourceEnabled, } from './config.js';
 const VALID_RANKER_ENGINES = ['rrf', 'legacy'];
 import { syncAllGraphToCloud } from './graph-sync.js';
 import { syncAllMemoriesToCloud } from './memory-sync.js';
@@ -22,6 +22,7 @@ export function handleCloudConfig(args) {
         console.log('\nShieldCortex Configuration:');
         console.log(`  Defence Mode: ${mode}`);
         console.log(`  Tool-Output Firewall: ${toolFirewall.scanToolResponses ? toolFirewall.toolResponseMode : 'Off'}`);
+        console.log(`  Revoke-by-source: ${isRevokeBySourceEnabled() ? 'Enabled (destructive)' : 'Disabled (default)'}`);
         console.log(`  Cloud Enabled:  ${config.cloudEnabled ? 'Yes' : 'No'}`);
         console.log(`  API Key:  ${config.cloudApiKey ? config.cloudApiKey.substring(0, 12) + '...' : 'Not set'}`);
         console.log(`  Base URL: ${config.cloudBaseUrl}`);
@@ -210,6 +211,16 @@ export function handleCloudConfig(args) {
         console.log('Tool-output firewall enabled (scanning on).');
         changed = true;
     }
+    if (args.includes('--allow-revoke-by-source')) {
+        setRevokeBySourceEnabled(true);
+        console.log('Revoke-by-source ENABLED. `forget --fromSource` can now bulk-delete a source\'s memories (trust-hierarchy ACL still applies). Disable again with --disallow-revoke-by-source when done.');
+        changed = true;
+    }
+    if (args.includes('--disallow-revoke-by-source')) {
+        setRevokeBySourceEnabled(false);
+        console.log('Revoke-by-source disabled (default).');
+        changed = true;
+    }
     if (args.includes('--upsell-mute')) {
         setUpsellState({ proMuted: true });
         console.log('Pro upsell muted. Re-enable with --upsell-unmute.');
@@ -238,6 +249,7 @@ export function handleCloudConfig(args) {
         console.log('  --tool-firewall-enforce   Redact/withhold threatening tool output before the agent sees it');
         console.log('  --tool-firewall-advisory  Log tool-output threats but deliver intact (default)');
         console.log('  --tool-firewall-off / --tool-firewall-on  Disable / enable tool-output scanning');
+        console.log('  --allow-revoke-by-source / --disallow-revoke-by-source  Enable/disable destructive forget --fromSource (default: disabled)');
         console.log('  --restore-4.10-defaults  Restore pre-v4.11.0 defaults (recall on, strict interceptor, minimal preamble)');
         console.log('  --upsell-mute          Suppress the Pro upsell footer in doctor');
         console.log('  --upsell-unmute        Allow the Pro upsell footer to surface again');

package/dist/cloud/config.d.ts CHANGED Viewed

@@ -191,6 +191,16 @@ export declare function getToolResponseScanConfig(): ToolResponseScanConfig;
  * Persists tool response scanning config.
  */
 export declare function setToolResponseScanConfig(updates: Partial<ToolResponseScanConfig>): void;
+/**
+ * revoke-by-source (bulk delete all memories from a source) is a destructive
+ * mass-delete primitive. Because a prompt-injection adversary runs AS the agent
+ * at the agent's own trust, no in-band (trust) check can distinguish "the human
+ * asked" from "an injection asked". So it is gated OFF by default and can only
+ * be enabled by an out-of-band human action (editing config / the CLI flag) that
+ * a hijacked agent cannot perform.
+ */
+export declare function isRevokeBySourceEnabled(): boolean;
+export declare function setRevokeBySourceEnabled(enabled: boolean): void;
 /**
  * Returns a stable UUID for this machine.
  * Generates and persists on first call; reads from config thereafter.

package/dist/cloud/config.js CHANGED Viewed

@@ -938,6 +938,21 @@ export function setToolResponseScanConfig(updates) {
             raw.toolResponseMode = updates.toolResponseMode;
     });
 }
+// ── Revoke-by-source gate ─────────────────────────────
+/**
+ * revoke-by-source (bulk delete all memories from a source) is a destructive
+ * mass-delete primitive. Because a prompt-injection adversary runs AS the agent
+ * at the agent's own trust, no in-band (trust) check can distinguish "the human
+ * asked" from "an injection asked". So it is gated OFF by default and can only
+ * be enabled by an out-of-band human action (editing config / the CLI flag) that
+ * a hijacked agent cannot perform.
+ */
+export function isRevokeBySourceEnabled() {
+    return readRawConfig().allowRevokeBySource === true;
+}
+export function setRevokeBySourceEnabled(enabled) {
+    mutateRawConfig((raw) => { raw.allowRevokeBySource = enabled; });
+}
 // ── Device Identity ────────────────────────────────────
 /**
  * Returns a stable UUID for this machine.

package/dist/defence/audit/queries.d.ts CHANGED Viewed

@@ -21,7 +21,7 @@ export interface AgentTimelinePoint {
 export interface AuditQueryOptions {
     startTime?: string;
     endTime?: string;
-    operation?: 'write' | 'read' | 'delete' | 'update';
+    operation?: 'write' | 'read' | 'delete' | 'update' | 'revoke';
     source?: string;
     firewallResult?: FirewallResult;
     memoryId?: number;

package/dist/defence/trust/access-control.d.ts CHANGED Viewed

@@ -22,7 +22,4 @@ export interface AccessCheckMemory {
     source?: string | null;
     sensitivity_level?: string | null;
 }
-/**
- * Check whether a source has access to a memory for a given operation.
- */
-export declare function checkAccess(memory: AccessCheckMemory, source: DefenceSource, operation: 'read' | 'write' | 'delete'): AccessPolicy;
+export declare function checkAccess(memory: AccessCheckMemory, source: DefenceSource, operation: 'read' | 'write' | 'delete' | 'revoke'): AccessPolicy;

package/dist/defence/trust/access-control.js CHANGED Viewed

@@ -12,6 +12,13 @@ import { scoreSource } from './source-scorer.js';
 /**
  * Check whether a source has access to a memory for a given operation.
  */
+/** Parse a stored "type:identifier" source string back into a DefenceSource. */
+function parseStoredSource(stored) {
+    const i = stored.indexOf(':');
+    if (i === -1)
+        return { type: 'agent', identifier: stored }; // unknown shape → low-trust agent
+    return { type: stored.slice(0, i), identifier: stored.slice(i + 1) };
+}
 export function checkAccess(memory, source, operation) {
     const trust = scoreSource(source).score;
     const memorySource = memory.source || '__system:unattributed';
@@ -50,6 +57,31 @@ export function checkAccess(memory, source, operation) {
         }
         return deny('Can only delete own memories (trust ≥0.5)');
     }
+    if (operation === 'revoke') {
+        // Trust-hierarchy revoke (revoke-by-source remediation): own cleanup, OR a
+        // high-trust caller may purge a STRICTLY lower-trust source's memories.
+        // Equal/higher-trust targets are protected, so a 0.9 agent can never revoke
+        // user:direct (1.0). Single-row 'delete' stays own-only — this override is
+        // reachable only through the explicit revoke path.
+        if (isOwner && trust >= 0.5) {
+            return { canRead: true, canWrite: false, canDelete: true, writeRequiresQuarantine: false, reason: 'Owner revoke' };
+        }
+        // Fail-safe: never mass-revoke unattributed / unclassifiable memories. They
+        // have no clear owner to outrank, and a 0-trust target would be outranked by
+        // any caller — so a high-trust caller must NOT be able to sweep null-source
+        // rows by source.
+        if (!memory.source || memorySource === '__system:unattributed') {
+            return deny('Revoke denied: unattributed memories cannot be revoked by source');
+        }
+        const targetTrust = scoreSource(parseStoredSource(memorySource)).score;
+        if (targetTrust > 0 && trust >= 0.7 && trust > targetTrust) {
+            return {
+                canRead: true, canWrite: false, canDelete: true, writeRequiresQuarantine: false,
+                reason: `Trust-hierarchy revoke (caller ${trust.toFixed(2)} > target ${targetTrust.toFixed(2)})`,
+            };
+        }
+        return deny('Revoke denied: must own the source or outrank it (trust ≥0.7 and strictly > a known target source trust)');
+    }
     return deny('Unknown operation');
 }
 function allow(reason) {

package/dist/defence/types.d.ts CHANGED Viewed

@@ -130,7 +130,7 @@ export interface QuarantineEntry {
     audit_id: number | null;
 }
 /** Operation that produced an audit row (provenance ledger discriminator). */
-export type AuditOperation = 'write' | 'read' | 'delete' | 'update';
+export type AuditOperation = 'write' | 'read' | 'delete' | 'update' | 'revoke';
 export interface AuditEntry {
     id: number;
     memory_id: number | null;

package/dist/memory/store.d.ts CHANGED Viewed

@@ -34,7 +34,7 @@ export declare function logAllowedRead(source: DefenceSource, tool: string, memo
  * audit.memory_id FK is ON DELETE SET NULL, so a live reference can't survive.
  * The deleted id is preserved in `reason` + `blocked_patterns` for forensics.
  */
-export declare function logAllowedDelete(memoryId: number, source: DefenceSource, project?: string | null): void;
+export declare function logAllowedDelete(memoryId: number, source: DefenceSource, project?: string | null, operation?: AuditOperation): void;
 /**
  * Error thrown when memory creation is paused
  */
@@ -65,7 +65,9 @@ export declare function mergeMemories(keptId: number, removedId: number, options
 /**
  * Delete a memory
  */
-export declare function deleteMemory(id: number, source?: DefenceSource): boolean;
+export declare function deleteMemory(id: number, source?: DefenceSource, opts?: {
+    mode?: 'delete' | 'revoke';
+}): boolean;
 /**
  * Get all memories for a project
  */

package/dist/memory/store.js CHANGED Viewed

@@ -283,7 +283,7 @@ export function logAllowedRead(source, tool, memoryIds, project) {
  * audit.memory_id FK is ON DELETE SET NULL, so a live reference can't survive.
  * The deleted id is preserved in `reason` + `blocked_patterns` for forensics.
  */
-export function logAllowedDelete(memoryId, source, project) {
+export function logAllowedDelete(memoryId, source, project, operation = 'delete') {
     logAudit({
         memory_id: null,
         project: project ?? null,
@@ -293,7 +293,7 @@ export function logAllowedDelete(memoryId, source, project) {
         trust_score: scoreSource(source).score,
         sensitivity_level: 'INTERNAL',
         firewall_result: 'ALLOW',
-        operation: 'delete',
+        operation,
         anomaly_score: 0,
         threat_indicators: '[]',
         blocked_patterns: JSON.stringify([memoryId]),
@@ -936,15 +936,17 @@ export function mergeMemories(keptId, removedId, options, source = { type: 'cli'
 /**
  * Delete a memory
  */
-export function deleteMemory(id, source) {
+export function deleteMemory(id, source, opts) {
     const db = getDatabase();
-    // ACCESS CONTROL: Check delete permission
+    const aclOp = opts?.mode ?? 'delete';
+    // ACCESS CONTROL: Check delete permission. mode 'revoke' uses the
+    // trust-hierarchy rule (own OR outrank); 'delete' (default) stays own-only.
     if (source) {
         const row = db.prepare('SELECT id, source, sensitivity_level FROM memories WHERE id = ?').get(id);
         if (row) {
-            const policy = checkAccess({ id: row.id, source: row.source, sensitivity_level: row.sensitivity_level }, source, 'delete');
+            const policy = checkAccess({ id: row.id, source: row.source, sensitivity_level: row.sensitivity_level }, source, aclOp);
             if (!policy.canDelete) {
-                logAccessDenial(id, source, policy.reason, 'delete');
+                logAccessDenial(id, source, policy.reason, aclOp);
                 return false;
             }
         }
@@ -966,7 +968,7 @@ export function deleteMemory(id, source) {
         // caller is attributed. Internal source-less deletes (merge/consolidation)
         // are machinery, not user actions, so they're not audited here.
         if (source) {
-            logAllowedDelete(id, source, memory.project ?? null);
+            logAllowedDelete(id, source, memory.project ?? null, aclOp);
         }
         if (isFeatureEnabled('cloud_sync')) {
             syncMemoryDeleteToCloud(memory);

package/dist/server.js CHANGED Viewed

@@ -23,6 +23,7 @@ import { checkDatabaseSize } from './database/init.js';
 import { queryAuditLogs, getAuditStats, getLifetimeStats } from './defence/audit/index.js';
 import { scanExistingMemories } from './defence/scanner/index.js';
 import { resolveToolSource as resolveToolSourceImpl } from './defence/trust/resolve-tool-source.js';
+import { inferSourceFromEnvironment } from './defence/trust/env-detector.js';
 import { scanToolResponse, shouldScanToolResponse } from './defence/tool-response-scanner.js';
 import { UNTRUSTED_TOOL_TAG } from './defence/tool-response-enforce.js';
 import { guardReadBySensitivity, guardContextSummary } from './defence/trust/read-guard.js';
@@ -287,8 +288,15 @@ Modes: search (query-based), recent (by time), important (by salience)`, {
         confirm: z.boolean().optional().default(false)
             .describe('Confirm bulk delete'),
         source: sourceParam,
+        fromSource: z.string().optional()
+            .describe('Revoke-by-source: delete all memories written by this source ("type:identifier", or "type:*" for a whole type). Authorised by the trust-hierarchy revoke ACL (own the source or outrank it). Use project:"*" to revoke across all projects.'),
     }, { title: 'Delete Memories', readOnlyHint: false, destructiveHint: true, idempotentHint: false }, withKillSwitchGuard('memory_write', async (args) => {
-        const source = resolveToolSource(args.source, 'forget');
+        // Delete is destructive, and revoke-by-source grants cross-identity power,
+        // so the caller identity MUST be the unspoofable runtime identity — derive
+        // it from the environment, NOT the MCP-declared `source` param. Honouring a
+        // declared identity would let a caller claim ownership of any peer source's
+        // memories (the clamp only caps trust SCORE, not identity).
+        const source = inferSourceFromEnvironment().source;
         const result = await executeForget({ ...args, source });
         return {
             content: [{ type: 'text', text: formatForgetResult(result) }],

package/dist/tools/forget.d.ts CHANGED Viewed

@@ -23,6 +23,7 @@ export declare const forgetSchema: z.ZodObject<{
         type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
         identifier: string;
     }>>;
+    fromSource: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     confirm: boolean;
     dryRun: boolean;
@@ -36,6 +37,7 @@ export declare const forgetSchema: z.ZodObject<{
     query?: string | undefined;
     olderThan?: number | undefined;
     belowSalience?: number | undefined;
+    fromSource?: string | undefined;
 }, {
     source?: {
         type: "user" | "cli" | "hook" | "email" | "web" | "agent" | "file" | "api" | "tool_response";
@@ -49,6 +51,7 @@ export declare const forgetSchema: z.ZodObject<{
     olderThan?: number | undefined;
     belowSalience?: number | undefined;
     dryRun?: boolean | undefined;
+    fromSource?: string | undefined;
 }>;
 export type ForgetInput = z.infer<typeof forgetSchema>;
 /**

package/dist/tools/forget.js CHANGED Viewed

@@ -8,6 +8,13 @@ import { deleteMemory, searchMemories, getMemoryById } from '../memory/store.js'
 import { getDatabase, withTransaction } from '../database/init.js';
 import { MemoryNotFoundError, BulkDeleteSafetyError, formatErrorForMcp, } from '../errors.js';
 import { resolveProject } from '../context/project-context.js';
+import { isRevokeBySourceEnabled } from '../cloud/config.js';
+/**
+ * Upper bound on rows a single revoke-by-source call may delete. Caps the blast
+ * radius of the mass-delete primitive — a larger match must be narrowed (by
+ * project/category/etc.) or paged.
+ */
+const MAX_REVOKE_ROWS = 500;
 // Input schema for the forget tool
 export const forgetSchema = z.object({
     id: z.number().optional().describe('Specific memory ID to delete'),
@@ -28,6 +35,8 @@ export const forgetSchema = z.object({
         type: z.enum(['user', 'cli', 'hook', 'email', 'web', 'agent', 'file', 'api', 'tool_response']),
         identifier: z.string(),
     }).optional().describe('Caller identity for access control'),
+    fromSource: z.string().optional()
+        .describe('Revoke-by-source: delete all memories written by this source. Exact "type:identifier", or a "type:*" / "type:" prefix to revoke a whole source type. Authorised by the trust-hierarchy revoke ACL (you must own the source or outrank it). Distinct from `source` (the caller).'),
 });
 /**
  * Execute the forget tool
@@ -35,6 +44,15 @@ export const forgetSchema = z.object({
 export async function executeForget(input) {
     try {
         const db = getDatabase();
+        // Revoke-by-source gate: a destructive mass-delete primitive that a hijacked
+        // agent must not be able to invoke. OFF by default; only an out-of-band human
+        // action (`shieldcortex config --allow-revoke-by-source`) enables it.
+        if (input.fromSource !== undefined && !isRevokeBySourceEnabled()) {
+            return {
+                success: false,
+                error: 'revoke-by-source is disabled. Enable it deliberately with `shieldcortex config --allow-revoke-by-source` (an out-of-band action), then re-run.',
+            };
+        }
         // Resolve project (auto-detect if not provided)
         const resolvedProject = resolveProject(input.project);
         const source = input.source;
@@ -101,6 +119,28 @@ export async function executeForget(input) {
             conditions.push('salience < ?');
             params.push(input.belowSalience);
         }
+        // Revoke-by-source: target every memory written by a given source. Exact
+        // "type:identifier", or a "type:*" / "type:" prefix for a whole source type.
+        // Per-row authorisation is the trust-hierarchy revoke ACL (in deleteMemory
+        // via mode:'revoke') — this clause only SELECTS the candidates. Project scope
+        // still applies; pass project:"*" to revoke a source across all projects.
+        if (input.fromSource !== undefined) {
+            const fs = input.fromSource.trim();
+            if (!fs || fs === '*' || fs === ':' || fs === ':*') {
+                return {
+                    success: false,
+                    error: 'fromSource must name a source (e.g. "agent:agent-spawned" or "agent:*"), not a blanket wildcard.',
+                };
+            }
+            if (fs.endsWith(':*') || fs.endsWith(':')) {
+                conditions.push('source LIKE ?');
+                params.push(`${fs.replace(/:\*?$/, '')}:%`);
+            }
+            else {
+                conditions.push('source = ?');
+                params.push(fs);
+            }
+        }
         if (conditions.length === 0) {
             return {
                 success: false,
@@ -113,6 +153,15 @@ export async function executeForget(input) {
         if (affected.length === 0) {
             return { success: true, deleted: 0, memories: [] };
         }
+        // Blast-radius cap on revoke-by-source: refuse a single call that would
+        // delete more than MAX_REVOKE_ROWS — narrow it (by project/category/etc.).
+        if (input.fromSource !== undefined && affected.length > MAX_REVOKE_ROWS) {
+            return {
+                success: false,
+                wouldDelete: affected.length,
+                error: `revoke-by-source matched ${affected.length} memories (cap ${MAX_REVOKE_ROWS}). Narrow the scope (project/category/query) and re-run.`,
+            };
+        }
         // Dry run - just show what would be deleted
         if (input.dryRun) {
             return {
@@ -138,10 +187,13 @@ export async function executeForget(input) {
         // delete, and the dashboard `memory_deleted` event. A low-trust / non-owner
         // caller therefore can't mass-delete protected memories. better-sqlite3 is
         // synchronous, so the per-row loop stays inside one transaction atomically.
+        // revoke-by-source uses the trust-hierarchy revoke ACL (own OR outrank);
+        // every other bulk forget stays own-only.
+        const deleteMode = input.fromSource !== undefined ? 'revoke' : 'delete';
         const deletedMemories = [];
         withTransaction(() => {
             for (const memory of affected) {
-                if (deleteMemory(memory.id, source)) {
+                if (deleteMemory(memory.id, source, { mode: deleteMode })) {
                     deletedMemories.push(memory);
                 }
             }

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "shieldcortex",
-  "version": "4.39.0",
+  "version": "4.40.0",
   "description": "Trustworthy memory and security for AI agents. Recall debugging, review queue, OpenClaw session capture, and memory poisoning defence for Claude Code, Codex, OpenClaw, LangChain, and MCP agents.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

/package/dashboard/.next/standalone/dashboard/.next/static/{LfTY3B6uX3j7zNwqqgvPG → UA_86bJ-tNIyDXr-i0gK6}/_buildManifest.js RENAMED Viewed

File without changes

/package/dashboard/.next/standalone/dashboard/.next/static/{LfTY3B6uX3j7zNwqqgvPG → UA_86bJ-tNIyDXr-i0gK6}/_clientMiddlewareManifest.json RENAMED Viewed

File without changes

/package/dashboard/.next/standalone/dashboard/.next/static/{LfTY3B6uX3j7zNwqqgvPG → UA_86bJ-tNIyDXr-i0gK6}/_ssgManifest.js RENAMED Viewed

File without changes