shieldcortex 4.4.1 → 4.6.0

package/README.md

@@ -31,7 +31,7 @@ shieldcortex quickstart
 
 ---
 
-**Contents:** [The Problem](#-the-problem) · [What You Get](#-what-you-get) · [Quick Start](#-quick-start) · [Licensing and Trial](#-licensing-and-trial) · [Connect Servers to Cloud](#-connect-servers-to-cloud) · [Ecosystem Quickstarts](#-ecosystem-quickstarts) · [How It Compares](#-how-it-compares) · [Iron Dome](#%EF%B8%8F-iron-dome) · [Dream Mode](#-dream-mode--background-consolidation) · [Cortex](#-cortex--systematic-mistake-learning) · [OpenClaw](#-openclaw-integration) · [Dashboard](#-dashboard) · [Integrations](#-integrations) · [CLI](#-cli) · [Configuration](#%EF%B8%8F-configuration)
+**Contents:** [The Problem](#-the-problem) · [What You Get](#-what-you-get) · [Quick Start](#-quick-start) · [X-Ray Scanner](#-x-ray-scanner) · [Licensing and Trial](#-licensing-and-trial) · [Connect Servers to Cloud](#-connect-servers-to-cloud) · [Ecosystem Quickstarts](#-ecosystem-quickstarts) · [How It Compares](#-how-it-compares) · [Iron Dome](#%EF%B8%8F-iron-dome) · [Dream Mode](#-dream-mode--background-consolidation) · [Cortex](#-cortex--systematic-mistake-learning) · [OpenClaw](#-openclaw-integration) · [Dashboard](#-dashboard) · [Integrations](#-integrations) · [CLI](#-cli) · [Configuration](#%EF%B8%8F-configuration)
 
 ---
 
@@ -115,6 +115,16 @@ shieldcortex audit
 
 Actions: `quarantine` flagged packages, `clean` confirmed threats, or `auto-protect` to block future installs.
 
+**X-Ray Scanner** — deep file analysis for hidden threats in your codebase:
+
+```bash
+shieldcortex xray ./my-project          # one-off scan
+shieldcortex xray ./my-project --watch  # real-time file watcher
+shieldcortex xray ./my-project --ci --threshold=HIGH  # CI/CD gate
+```
+
+Detects prompt injection in files, steganographic payloads, obfuscated code, network beacons, eval/exec patterns, credential leaks in metadata, and dependency risk indicators. Results appear in the dashboard X-Ray tab with actionable review, ignore, resolve, and quarantine workflows.
+
 **Docker Install Safety** — auto-detects container environments and skips plugin install to avoid gateway crashes. No configuration needed.
 
 <br>
@@ -525,24 +535,23 @@ The key shift is that memory is no longer a black box:
 - `Review` tells you what should be suppressed, archived, pinned, or marked canonical
 - `Shield` tells you what got blocked before it could poison memory or behavior
 
-**Shield Overview** — scan counts, block rates, quarantine queue, threat timeline, and memory health score.
+**Command Centre** — memory health, threat pressure, X-Ray score, and urgent actions at a glance.
 
-![Shield Overview](docs/images/dashboard-shield.png)
+![Command Centre](docs/images/dashboard-overview.png)
 
-**Knowledge Graph** — focus on one entity at a time, then switch between `Read` for relationship statements, `Map` for a cleaner graph canvas, and `Bloom` for an organic branch view.
+**Constellation Graph** — all entities visible as coloured nebula clusters grouped by type. Click to bloom into individual nodes with connection lines.
 
-**Cloud Diagnostics** — inspect local-to-cloud queue health, retry pressure, sync policy, device identity, and Team-gated cloud replica controls from the local dashboard.
+![Constellation Graph](docs/images/dashboard-graph.png)
 
-**Timeline** — every memory, chronologically. Filter by category, type, or search. Edit memories inline.
+**Protection** — Iron Dome security profiles, active configuration, module status, and quarantine queue.
 
-**Audit Log** — full forensic log of every memory operation with trust scores and threat reasons.
+![Protection](docs/images/dashboard-protection.png)
 
-**New backend APIs for dashboard workflows**
+**X-Ray Scanner** — scan findings with human-readable guidance, actionable review workflow, and quarantine.
 
-- `GET /api/recall/explain` — explain why memories ranked for a query without mutating salience or links
-- `GET /api/v1/incidents/replay` — reconstruct a best-effort incident timeline from audit, quarantine, and retained event data
+![X-Ray Scanner](docs/images/dashboard-xray.png)
 
-![Audit Log](docs/images/dashboard-audit.png)
+**Cloud Diagnostics** — inspect local-to-cloud queue health, retry pressure, sync policy, device identity, and Team-gated cloud replica controls from the local dashboard.
 
 <br>
 
@@ -584,6 +593,9 @@ shieldcortex openclaw status      # Check OpenClaw hook status
 shieldcortex codex install        # Connect Codex CLI / VS Code
 shieldcortex consolidate          # Run Dream Mode (merge, archive, contradict)
 shieldcortex audit                # Dependency scanner (Pro)
+shieldcortex xray <path>          # Deep file analysis for hidden threats
+shieldcortex xray <path> --watch  # Real-time file watcher
+shieldcortex xray <path> --ci     # CI/CD gate (exits non-zero on findings)
 shieldcortex cortex confirm       # Capture positive feedback
 shieldcortex config --key value   # Update configuration
 ```

package/dashboard/.next/standalone/dashboard/.next/BUILD_ID

@@ -1 +1 @@
-iirFNn01-fptKDNjFObe-
+jgtHmh7zpEVcqlYNM0gvu

package/dashboard/.next/standalone/dashboard/.next/app-path-routes-manifest.json

@@ -1,4 +1,23 @@
 {
+  "/(dashboard)/admin/page": "/admin",
+  "/(dashboard)/cloud/page": "/cloud",
+  "/(dashboard)/memory/capture/page": "/memory/capture",
+  "/(dashboard)/memory/graph/page": "/memory/graph",
+  "/(dashboard)/memory/page": "/memory",
+  "/(dashboard)/memory/recall/page": "/memory/recall",
+  "/(dashboard)/memory/review/page": "/memory/review",
+  "/(dashboard)/memory/timeline/page": "/memory/timeline",
+  "/(dashboard)/overview/page": "/overview",
+  "/(dashboard)/protection/audit/page": "/protection/audit",
+  "/(dashboard)/protection/intercepts/page": "/protection/intercepts",
+  "/(dashboard)/protection/iron-dome/page": "/protection/iron-dome",
+  "/(dashboard)/protection/page": "/protection",
+  "/(dashboard)/protection/policies/page": "/protection/policies",
+  "/(dashboard)/protection/quarantine/page": "/protection/quarantine",
+  "/(dashboard)/settings/page": "/settings",
+  "/(dashboard)/supply-chain/page": "/supply-chain",
+  "/(dashboard)/supply-chain/xray/page": "/supply-chain/xray",
+  "/(dashboard)/xray/page": "/xray",
   "/_global-error/page": "/_global-error",
   "/_not-found/page": "/_not-found",
   "/page": "/"

package/dashboard/.next/standalone/dashboard/.next/build-manifest.json

@@ -7,13 +7,15 @@
     "static/chunks/a6dad97d9634a72d.js"
   ],
   "lowPriorityFiles": [
-    "static/iirFNn01-fptKDNjFObe-/_ssgManifest.js",
-    "static/iirFNn01-fptKDNjFObe-/_buildManifest.js"
+    "static/jgtHmh7zpEVcqlYNM0gvu/_ssgManifest.js",
+    "static/jgtHmh7zpEVcqlYNM0gvu/_buildManifest.js"
   ],
   "rootMainFiles": [
-    "static/chunks/6ba7a5c1a80a6791.js",
-    "static/chunks/7d08316952ccdcef.js",
-    "static/chunks/d3d8171bf50ef87e.js",
-    "static/chunks/turbopack-c2d84e7d37269ac1.js"
+    "static/chunks/d878b929b21636c4.js",
+    "static/chunks/d9ad4c35fc865415.js",
+    "static/chunks/43d761df92da7cb6.js",
+    "static/chunks/e281719dbabcca1d.js",
+    "static/chunks/9e56d1f8f4d7adcb.js",
+    "static/chunks/turbopack-79214717b23f7452.js"
   ]
 }

package/dashboard/.next/standalone/dashboard/.next/prerender-manifest.json

@@ -50,6 +50,462 @@
         "x-next-revalidate-tag-token"
       ]
     },
+    "/admin": {
+      "experimentalBypassFor": [
+        {
+          "type": "header",
+          "key": "next-action"
+        },
+        {
+          "type": "header",
+          "key": "content-type",
+          "value": "multipart/form-data;.*"
+        }
+      ],
+      "initialRevalidateSeconds": false,
+      "srcRoute": "/admin",
+      "dataRoute": "/admin.rsc",
+      "allowHeader": [
+        "host",
+        "x-matched-path",
+        "x-prerender-revalidate",
+        "x-prerender-revalidate-if-generated",
+        "x-next-revalidated-tags",
+        "x-next-revalidate-tag-token"
+      ]
+    },
+    "/cloud": {
+      "experimentalBypassFor": [
+        {
+          "type": "header",
+          "key": "next-action"
+        },
+        {
+          "type": "header",
+          "key": "content-type",
+          "value": "multipart/form-data;.*"
+        }
+      ],
+      "initialRevalidateSeconds": false,
+      "srcRoute": "/cloud",
+      "dataRoute": "/cloud.rsc",
+      "allowHeader": [
+        "host",
+        "x-matched-path",
+        "x-prerender-revalidate",
+        "x-prerender-revalidate-if-generated",
+        "x-next-revalidated-tags",
+        "x-next-revalidate-tag-token"
+      ]
+    },
+    "/memory/capture": {
+      "experimentalBypassFor": [
+        {
+          "type": "header",
+          "key": "next-action"
+        },
+        {
+          "type": "header",
+          "key": "content-type",
+          "value": "multipart/form-data;.*"
+        }
+      ],
+      "initialRevalidateSeconds": false,
+      "srcRoute": "/memory/capture",
+      "dataRoute": "/memory/capture.rsc",
+      "allowHeader": [
+        "host",
+        "x-matched-path",
+        "x-prerender-revalidate",
+        "x-prerender-revalidate-if-generated",
+        "x-next-revalidated-tags",
+        "x-next-revalidate-tag-token"
+      ]
+    },
+    "/memory/graph": {
+      "experimentalBypassFor": [
+        {
+          "type": "header",
+          "key": "next-action"
+        },
+        {
+          "type": "header",
+          "key": "content-type",
+          "value": "multipart/form-data;.*"
+        }
+      ],
+      "initialRevalidateSeconds": false,
+      "srcRoute": "/memory/graph",
+      "dataRoute": "/memory/graph.rsc",
+      "allowHeader": [
+        "host",
+        "x-matched-path",
+        "x-prerender-revalidate",
+        "x-prerender-revalidate-if-generated",
+        "x-next-revalidated-tags",
+        "x-next-revalidate-tag-token"
+      ]
+    },
+    "/memory": {
+      "experimentalBypassFor": [
+        {
+          "type": "header",
+          "key": "next-action"
+        },
+        {
+          "type": "header",
+          "key": "content-type",
+          "value": "multipart/form-data;.*"
+        }
+      ],
+      "initialRevalidateSeconds": false,
+      "srcRoute": "/memory",
+      "dataRoute": "/memory.rsc",
+      "allowHeader": [
+        "host",
+        "x-matched-path",
+        "x-prerender-revalidate",
+        "x-prerender-revalidate-if-generated",
+        "x-next-revalidated-tags",
+        "x-next-revalidate-tag-token"
+      ]
+    },
+    "/memory/recall": {
+      "experimentalBypassFor": [
+        {
+          "type": "header",
+          "key": "next-action"
+        },
+        {
+          "type": "header",
+          "key": "content-type",
+          "value": "multipart/form-data;.*"
+        }
+      ],
+      "initialRevalidateSeconds": false,
+      "srcRoute": "/memory/recall",
+      "dataRoute": "/memory/recall.rsc",
+      "allowHeader": [
+        "host",
+        "x-matched-path",
+        "x-prerender-revalidate",
+        "x-prerender-revalidate-if-generated",
+        "x-next-revalidated-tags",
+        "x-next-revalidate-tag-token"
+      ]
+    },
+    "/memory/review": {
+      "experimentalBypassFor": [
+        {
+          "type": "header",
+          "key": "next-action"
+        },
+        {
+          "type": "header",
+          "key": "content-type",
+          "value": "multipart/form-data;.*"
+        }
+      ],
+      "initialRevalidateSeconds": false,
+      "srcRoute": "/memory/review",
+      "dataRoute": "/memory/review.rsc",
+      "allowHeader": [
+        "host",
+        "x-matched-path",
+        "x-prerender-revalidate",
+        "x-prerender-revalidate-if-generated",
+        "x-next-revalidated-tags",
+        "x-next-revalidate-tag-token"
+      ]
+    },
+    "/memory/timeline": {
+      "experimentalBypassFor": [
+        {
+          "type": "header",
+          "key": "next-action"
+        },
+        {
+          "type": "header",
+          "key": "content-type",
+          "value": "multipart/form-data;.*"
+        }
+      ],
+      "initialRevalidateSeconds": false,
+      "srcRoute": "/memory/timeline",
+      "dataRoute": "/memory/timeline.rsc",
+      "allowHeader": [
+        "host",
+        "x-matched-path",
+        "x-prerender-revalidate",
+        "x-prerender-revalidate-if-generated",
+        "x-next-revalidated-tags",
+        "x-next-revalidate-tag-token"
+      ]
+    },
+    "/overview": {
+      "experimentalBypassFor": [
+        {
+          "type": "header",
+          "key": "next-action"
+        },
+        {
+          "type": "header",
+          "key": "content-type",
+          "value": "multipart/form-data;.*"
+        }
+      ],
+      "initialRevalidateSeconds": false,
+      "srcRoute": "/overview",
+      "dataRoute": "/overview.rsc",
+      "allowHeader": [
+        "host",
+        "x-matched-path",
+        "x-prerender-revalidate",
+        "x-prerender-revalidate-if-generated",
+        "x-next-revalidated-tags",
+        "x-next-revalidate-tag-token"
+      ]
+    },
+    "/protection/audit": {
+      "experimentalBypassFor": [
+        {
+          "type": "header",
+          "key": "next-action"
+        },
+        {
+          "type": "header",
+          "key": "content-type",
+          "value": "multipart/form-data;.*"
+        }
+      ],
+      "initialRevalidateSeconds": false,
+      "srcRoute": "/protection/audit",
+      "dataRoute": "/protection/audit.rsc",
+      "allowHeader": [
+        "host",
+        "x-matched-path",
+        "x-prerender-revalidate",
+        "x-prerender-revalidate-if-generated",
+        "x-next-revalidated-tags",
+        "x-next-revalidate-tag-token"
+      ]
+    },
+    "/protection/intercepts": {
+      "experimentalBypassFor": [
+        {
+          "type": "header",
+          "key": "next-action"
+        },
+        {
+          "type": "header",
+          "key": "content-type",
+          "value": "multipart/form-data;.*"
+        }
+      ],
+      "initialRevalidateSeconds": false,
+      "srcRoute": "/protection/intercepts",
+      "dataRoute": "/protection/intercepts.rsc",
+      "allowHeader": [
+        "host",
+        "x-matched-path",
+        "x-prerender-revalidate",
+        "x-prerender-revalidate-if-generated",
+        "x-next-revalidated-tags",
+        "x-next-revalidate-tag-token"
+      ]
+    },
+    "/protection/iron-dome": {
+      "experimentalBypassFor": [
+        {
+          "type": "header",
+          "key": "next-action"
+        },
+        {
+          "type": "header",
+          "key": "content-type",
+          "value": "multipart/form-data;.*"
+        }
+      ],
+      "initialRevalidateSeconds": false,
+      "srcRoute": "/protection/iron-dome",
+      "dataRoute": "/protection/iron-dome.rsc",
+      "allowHeader": [
+        "host",
+        "x-matched-path",
+        "x-prerender-revalidate",
+        "x-prerender-revalidate-if-generated",
+        "x-next-revalidated-tags",
+        "x-next-revalidate-tag-token"
+      ]
+    },
+    "/protection": {
+      "experimentalBypassFor": [
+        {
+          "type": "header",
+          "key": "next-action"
+        },
+        {
+          "type": "header",
+          "key": "content-type",
+          "value": "multipart/form-data;.*"
+        }
+      ],
+      "initialRevalidateSeconds": false,
+      "srcRoute": "/protection",
+      "dataRoute": "/protection.rsc",
+      "allowHeader": [
+        "host",
+        "x-matched-path",
+        "x-prerender-revalidate",
+        "x-prerender-revalidate-if-generated",
+        "x-next-revalidated-tags",
+        "x-next-revalidate-tag-token"
+      ]
+    },
+    "/protection/policies": {
+      "experimentalBypassFor": [
+        {
+          "type": "header",
+          "key": "next-action"
+        },
+        {
+          "type": "header",
+          "key": "content-type",
+          "value": "multipart/form-data;.*"
+        }
+      ],
+      "initialRevalidateSeconds": false,
+      "srcRoute": "/protection/policies",
+      "dataRoute": "/protection/policies.rsc",
+      "allowHeader": [
+        "host",
+        "x-matched-path",
+        "x-prerender-revalidate",
+        "x-prerender-revalidate-if-generated",
+        "x-next-revalidated-tags",
+        "x-next-revalidate-tag-token"
+      ]
+    },
+    "/protection/quarantine": {
+      "experimentalBypassFor": [
+        {
+          "type": "header",
+          "key": "next-action"
+        },
+        {
+          "type": "header",
+          "key": "content-type",
+          "value": "multipart/form-data;.*"
+        }
+      ],
+      "initialRevalidateSeconds": false,
+      "srcRoute": "/protection/quarantine",
+      "dataRoute": "/protection/quarantine.rsc",
+      "allowHeader": [
+        "host",
+        "x-matched-path",
+        "x-prerender-revalidate",
+        "x-prerender-revalidate-if-generated",
+        "x-next-revalidated-tags",
+        "x-next-revalidate-tag-token"
+      ]
+    },
+    "/settings": {
+      "experimentalBypassFor": [
+        {
+          "type": "header",
+          "key": "next-action"
+        },
+        {
+          "type": "header",
+          "key": "content-type",
+          "value": "multipart/form-data;.*"
+        }
+      ],
+      "initialRevalidateSeconds": false,
+      "srcRoute": "/settings",
+      "dataRoute": "/settings.rsc",
+      "allowHeader": [
+        "host",
+        "x-matched-path",
+        "x-prerender-revalidate",
+        "x-prerender-revalidate-if-generated",
+        "x-next-revalidated-tags",
+        "x-next-revalidate-tag-token"
+      ]
+    },
+    "/supply-chain": {
+      "experimentalBypassFor": [
+        {
+          "type": "header",
+          "key": "next-action"
+        },
+        {
+          "type": "header",
+          "key": "content-type",
+          "value": "multipart/form-data;.*"
+        }
+      ],
+      "initialRevalidateSeconds": false,
+      "srcRoute": "/supply-chain",
+      "dataRoute": "/supply-chain.rsc",
+      "allowHeader": [
+        "host",
+        "x-matched-path",
+        "x-prerender-revalidate",
+        "x-prerender-revalidate-if-generated",
+        "x-next-revalidated-tags",
+        "x-next-revalidate-tag-token"
+      ]
+    },
+    "/supply-chain/xray": {
+      "experimentalBypassFor": [
+        {
+          "type": "header",
+          "key": "next-action"
+        },
+        {
+          "type": "header",
+          "key": "content-type",
+          "value": "multipart/form-data;.*"
+        }
+      ],
+      "initialRevalidateSeconds": false,
+      "srcRoute": "/supply-chain/xray",
+      "dataRoute": "/supply-chain/xray.rsc",
+      "allowHeader": [
+        "host",
+        "x-matched-path",
+        "x-prerender-revalidate",
+        "x-prerender-revalidate-if-generated",
+        "x-next-revalidated-tags",
+        "x-next-revalidate-tag-token"
+      ]
+    },
+    "/xray": {
+      "experimentalBypassFor": [
+        {
+          "type": "header",
+          "key": "next-action"
+        },
+        {
+          "type": "header",
+          "key": "content-type",
+          "value": "multipart/form-data;.*"
+        }
+      ],
+      "initialRevalidateSeconds": false,
+      "srcRoute": "/xray",
+      "dataRoute": "/xray.rsc",
+      "allowHeader": [
+        "host",
+        "x-matched-path",
+        "x-prerender-revalidate",
+        "x-prerender-revalidate-if-generated",
+        "x-next-revalidated-tags",
+        "x-next-revalidate-tag-token"
+      ]
+    },
     "/": {
       "experimentalBypassFor": [
         {
@@ -78,8 +534,8 @@
   "dynamicRoutes": {},
   "notFoundRoutes": [],
   "preview": {
-    "previewModeId": "7ba5be724d8e26ed3788d48a856ab087",
-    "previewModeSigningKey": "e1f343b7d048ef6229c8ac77c5190dcdea85f7cdbceff6370e829cfc6660018e",
-    "previewModeEncryptionKey": "6c5b3223e7a01b2120bfc5eb570c8d817fd48ee2fd3e9e53a5f2cc78f615a021"
+    "previewModeId": "853cd22d277d51e8ea57752629d21c9f",
+    "previewModeSigningKey": "ee40cd5b604b608d4ea86d74bb2efb82c9b97d7d1a11f5436c9aa7aeba9854f1",
+    "previewModeEncryptionKey": "c3c7f0de7d7cc2e217cadff310ab45924509ed0e2450f00eac3941a548cd4f18"
   }
 }