@gamaze/hicortex 0.18.3 → 0.19.0

package/dist/token-budget.js

@@ -92,7 +92,14 @@ function isTokenBudgetExceeded(stateDir) {
  * consistent with total (distill + consolidation).
  */
 function recordDistillUsage(stateDir, usage) {
-    if (cap <= 0 || usage.total <= 0)
+    // Record ALWAYS; the cap only governs ENFORCEMENT (isTokenBudgetExceeded)
+    // and the 80% warning below. Without this, an uncapped install (self-hosted
+    // default) never accrues distill tokens into the period meter, so the
+    // dashboard's monthly headline read consolidation-only while the per-run
+    // chart next to it showed true (distill-inclusive) totals — numbers on the
+    // same card telling different stories (#287 CR). Always-recording makes the
+    // meter the honest "what did this install spend" number everywhere.
+    if (usage.total <= 0)
         return;
     let newTotal = 0;
     let periodStart = "";
@@ -123,7 +130,8 @@ function recordDistillUsage(stateDir, usage) {
         periodStart = s.llmTokensThisPeriod.periodStart;
     }, stateDir);
     // 80% warning — dedup per period (once per month per threshold crossing).
-    if (periodStart && warnedPeriod !== periodStart && newTotal >= cap * 0.8) {
+    // Cap-gated by design: no cap → no percentage to warn about.
+    if (cap > 0 && periodStart && warnedPeriod !== periodStart && newTotal >= cap * 0.8) {
         warnedPeriod = periodStart;
         const pct = Math.round((newTotal / cap) * 100);
         console.warn(`[hicortex] Token usage at ${pct}% of monthly cap (${newTotal.toLocaleString()}/${cap.toLocaleString()}).`);

package/dist/type-classify.js

@@ -78,10 +78,13 @@ function buildTypeClassifyPrompt(content) {
         `occurrence ("tried X, failed because Y", a correction, a debugging session).\n` +
         `- knowledge: a durable truth that holds across sessions, not tied to a ` +
         `single moment ("the API is at :8787", "uv is used for packages").\n` +
-        `- decisions: a choice made that future work builds on and a later ` +
-        `decision can supersede ("switched from gemma4 to qwen3.5", "adopted the ` +
-        `graded-schema tag model"). Not knowledge (it can change) and not an ` +
-        `experience (it persists).\n\n` +
+        `- decisions: a choice the user explicitly made or confirmed (or one the ` +
+        `memory records as actually carried out/applied) that future work builds ` +
+        `on and a later decision can supersede ("switched from gemma4 to qwen3.5", ` +
+        `"adopted the graded-schema tag model"). Not knowledge (it can change) and ` +
+        `not an experience (it persists). A bare AI recommendation or proposal is ` +
+        `NEVER a decision — "AI proposed X → user declined/held" is experience ` +
+        `(#290).\n\n` +
         `IMPORTANCE (0.0–1.0):\n` +
         `- 0.8–1.0: load-bearing — a core piece of knowledge or a decision the ` +
         `agent must know.\n` +

package/dist/types.d.ts

@@ -434,6 +434,46 @@ export interface HicortexConfig {
      * set it. Period resets monthly (state.json `llmTokensThisPeriod.periodStart`).
      */
     llmTokensPerMonth?: number;
+    /**
+     * Max request body size in MB accepted by the REST/MCP server (#7). The body
+     * is fully JSON-parsed into memory before the distiller truncates content to
+     * 80K chars, so an unbounded body is an OOM vector — a tenant (hosted) or a
+     * misbehaving client could POST a huge payload to exhaust RAM. Default: 25 MB
+     * self-hosted (unchanged), 5 MB hosted (the spec §6.3 figure — ~25× the 200KB
+     * segment max, so legitimate capture never approaches it; it's a pure
+     * abuse/OOM backstop). Oversized bodies get HTTP 413.
+     */
+    distillBodyLimitMb?: number;
+    /**
+     * Output directory for backup artifacts (#6). Default `<HICORTEX_HOME>/backups`.
+     * Both the CLI (`hicortex backup`) and the nightly backup stage resolve this
+     * before calling createBackup; an unset value falls back to the home dir.
+     * Operator-owned: point at a mounted backup volume, a tmpfs, etc.
+     */
+    backupDir?: string;
+    /**
+     * Post-backup offsite hook (#6). When set, `hicortex backup` and the nightly
+     * backup stage invoke this command with the artifact path appended as the LAST
+     * arg (e.g. `"rclone copyto"` → `rclone copyto <path> remote:bucket/`). Cloud
+     * credentials + active alerting (email/Discord) stay in the operator's wrapper
+     * script, out of the product. The hook is split on whitespace (no shell); a
+     * command with quoted args containing spaces should be a wrapper script. A
+     * failing/missing/timed-out hook reports `{ok:false}` and never throws —
+     * capture/consolidation have already succeeded, so a backup-hook failure must
+     * not fail the nightly. 5 min timeout.
+     */
+    backupCommand?: string;
+    /**
+     * Account identity shown in the dashboard header (hosted). When ALL three
+     * are absent the header renders no account element (self-hosted default —
+     * nothing changes). Strings only; read via readStringConfig, null when
+     * absent/not a string. Set per-tenant by provision-tenant.sh.
+     */
+    displayName?: string;
+    /** Organization name — rendered alongside displayName as "Name · Org". */
+    orgName?: string;
+    /** Plan/tier label rendered as a small badge (e.g. "Cloud · Early bird"). */
+    planLabel?: string;
 }
 /** A config-owned life-sphere domain (see HicortexConfig.domains). */
 export interface DomainDef {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@gamaze/hicortex",
-  "version": "0.18.3",
-  "description": "Persistent agent identity for AI agents — a hand-edited identity layer, nightly-distilled experience, and lessons injected every session, shared across your whole fleet. Works with Hermes, OpenClaw, Claude Code, and Pi.",
+  "version": "0.19.0",
+  "description": "Persistent agent identity for AI agents \u2014 a hand-edited identity layer, nightly-distilled experience, and lessons injected every session, shared across your whole fleet. Works with Hermes, OpenClaw, Claude Code, and Pi.",
   "main": "dist/index.js",
   "bin": {
     "hicortex": "dist/cli.js"
@@ -47,6 +47,7 @@
     "@types/better-sqlite3": "^7.6.0",
     "@types/express": "^5.0.6",
     "@types/node": "^22.0.0",
+    "@types/tar-stream": "^3.1.4",
     "typescript": "^5.4.0",
     "vitest": "^3.0.0"
   },
@@ -69,6 +70,7 @@
     "@modelcontextprotocol/sdk": "^1.28.0",
     "better-sqlite3": "^12.11.1",
     "express": "^4.21.0",
-    "sqlite-vec": "^0.1.7"
+    "sqlite-vec": "^0.1.7",
+    "tar-stream": "^2.2.0"
   }
-}
+}