hippo-memory 0.36.0 → 0.38.0

package/dist/src/client.js

@@ -0,0 +1,181 @@
+/**
+ * HTTP client wrapper for `hippo serve`.
+ *
+ * Mirrors the function signatures in src/api.ts so the CLI can route through
+ * either path uniformly. Each function takes (serverUrl, apiKey?, ...) and
+ * returns the same shape that api.ts would.
+ *
+ * Errors from the server (4xx/5xx) are mapped back into thrown Errors with
+ * the server's `error` message preserved verbatim so existing CLI handlers
+ * that match on substrings (e.g. "not found", "already superseded") still
+ * work unchanged.
+ *
+ * Network errors (ECONNREFUSED on a stale pidfile, etc.) propagate as the
+ * native fetch failure so the caller can detect them and self-heal.
+ */
+function buildHeaders(apiKey, withBody) {
+    const headers = {};
+    if (withBody)
+        headers['content-type'] = 'application/json';
+    if (apiKey)
+        headers['authorization'] = `Bearer ${apiKey}`;
+    return headers;
+}
+/**
+ * Throw an Error matching the server's error message. Keeps message strings
+ * intact so cli.ts handlers can match on the same substrings ("not found",
+ * "already superseded", "Unknown key_id") whether the call went through
+ * api.ts or client.ts.
+ */
+async function throwForStatus(res) {
+    let message = `${res.status} ${res.statusText}`;
+    try {
+        const body = await res.json();
+        if (body && typeof body.error === 'string' && body.error.length > 0) {
+            message = body.error;
+        }
+    }
+    catch {
+        // body wasn't JSON; fall back to status line.
+    }
+    throw new Error(message);
+}
+export async function remember(serverUrl, apiKey, opts) {
+    const res = await fetch(`${serverUrl}/v1/memories`, {
+        method: 'POST',
+        headers: buildHeaders(apiKey, true),
+        body: JSON.stringify(opts),
+    });
+    if (!res.ok)
+        await throwForStatus(res);
+    return await res.json();
+}
+export async function recall(serverUrl, apiKey, opts) {
+    const params = new URLSearchParams();
+    params.set('q', opts.query);
+    if (opts.limit !== undefined)
+        params.set('limit', String(opts.limit));
+    if (opts.mode !== undefined)
+        params.set('mode', opts.mode);
+    const res = await fetch(`${serverUrl}/v1/memories?${params.toString()}`, {
+        method: 'GET',
+        headers: buildHeaders(apiKey, false),
+    });
+    if (!res.ok)
+        await throwForStatus(res);
+    return await res.json();
+}
+export async function forget(serverUrl, apiKey, id) {
+    const res = await fetch(`${serverUrl}/v1/memories/${encodeURIComponent(id)}`, {
+        method: 'DELETE',
+        headers: buildHeaders(apiKey, false),
+    });
+    if (!res.ok)
+        await throwForStatus(res);
+    return await res.json();
+}
+export async function promote(serverUrl, apiKey, id) {
+    const res = await fetch(`${serverUrl}/v1/memories/${encodeURIComponent(id)}/promote`, {
+        method: 'POST',
+        headers: buildHeaders(apiKey, false),
+    });
+    if (!res.ok)
+        await throwForStatus(res);
+    return await res.json();
+}
+export async function supersede(serverUrl, apiKey, oldId, newContent) {
+    const res = await fetch(`${serverUrl}/v1/memories/${encodeURIComponent(oldId)}/supersede`, {
+        method: 'POST',
+        headers: buildHeaders(apiKey, true),
+        body: JSON.stringify({ content: newContent }),
+    });
+    if (!res.ok)
+        await throwForStatus(res);
+    return await res.json();
+}
+export async function archiveRaw(serverUrl, apiKey, id, reason) {
+    const res = await fetch(`${serverUrl}/v1/memories/${encodeURIComponent(id)}/archive`, {
+        method: 'POST',
+        headers: buildHeaders(apiKey, true),
+        body: JSON.stringify({ reason }),
+    });
+    if (!res.ok)
+        await throwForStatus(res);
+    return await res.json();
+}
+export async function authCreate(serverUrl, apiKey, opts) {
+    const res = await fetch(`${serverUrl}/v1/auth/keys`, {
+        method: 'POST',
+        headers: buildHeaders(apiKey, true),
+        body: JSON.stringify(opts),
+    });
+    if (!res.ok)
+        await throwForStatus(res);
+    return await res.json();
+}
+export async function authList(serverUrl, apiKey, opts) {
+    const params = new URLSearchParams();
+    params.set('active', opts.active ? 'true' : 'false');
+    const res = await fetch(`${serverUrl}/v1/auth/keys?${params.toString()}`, {
+        method: 'GET',
+        headers: buildHeaders(apiKey, false),
+    });
+    if (!res.ok)
+        await throwForStatus(res);
+    return await res.json();
+}
+export async function authRevoke(serverUrl, apiKey, keyId) {
+    const res = await fetch(`${serverUrl}/v1/auth/keys/${encodeURIComponent(keyId)}`, {
+        method: 'DELETE',
+        headers: buildHeaders(apiKey, false),
+    });
+    if (!res.ok)
+        await throwForStatus(res);
+    return await res.json();
+}
+export async function auditList(serverUrl, apiKey, opts) {
+    const params = new URLSearchParams();
+    if (opts.op !== undefined)
+        params.set('op', opts.op);
+    if (opts.since !== undefined)
+        params.set('since', opts.since);
+    if (opts.limit !== undefined)
+        params.set('limit', String(opts.limit));
+    const qs = params.toString();
+    const url = qs.length > 0 ? `${serverUrl}/v1/audit?${qs}` : `${serverUrl}/v1/audit`;
+    const res = await fetch(url, {
+        method: 'GET',
+        headers: buildHeaders(apiKey, false),
+    });
+    if (!res.ok)
+        await throwForStatus(res);
+    return await res.json();
+}
+/**
+ * True for fetch failures that look like "server not actually running" (the
+ * pidfile said one was, but the connection refused, or DNS / abort errors).
+ * The CLI uses this to detect a stale pidfile and self-heal back to direct mode.
+ */
+export function isConnectionRefused(err) {
+    if (!(err instanceof Error))
+        return false;
+    const message = err.message.toLowerCase();
+    // Node fetch wraps the underlying cause; the surface message contains 'fetch failed'
+    // and the cause has the syscall code. We check both shapes.
+    if (message.includes('econnrefused'))
+        return true;
+    if (message.includes('connect econnrefused'))
+        return true;
+    const cause = err.cause;
+    if (cause && typeof cause === 'object') {
+        const code = cause.code;
+        if (code === 'ECONNREFUSED' || code === 'ECONNRESET')
+            return true;
+    }
+    // Fallthrough: 'fetch failed' alone is suspicious. Treat as connection failure
+    // so the CLI heals on a stale pidfile rather than surfacing a cryptic error.
+    if (message.includes('fetch failed'))
+        return true;
+    return false;
+}
+//# sourceMappingURL=client.js.map

package/dist/src/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAeH,SAAS,YAAY,CAAC,MAA0B,EAAE,QAAiB;IACjE,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,QAAQ;QAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;IAC3D,IAAI,MAAM;QAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,MAAM,EAAE,CAAC;IAC1D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,cAAc,CAAC,GAAa;IACzC,IAAI,OAAO,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAwB,CAAC;QACpD,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,8CAA8C;IAChD,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,SAAiB,EACjB,MAA0B,EAC1B,IAAkB;IAElB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,cAAc,EAAE;QAClD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC;QACnC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,MAAM,GAAG,CAAC,IAAI,EAAoB,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,SAAiB,EACjB,MAA0B,EAC1B,IAAgB;IAEhB,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACtE,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,gBAAgB,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE;QACvE,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC;KACrC,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,MAAM,GAAG,CAAC,IAAI,EAAkB,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,SAAiB,EACjB,MAA0B,EAC1B,EAAU;IAEV,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,gBAAgB,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE;QAC5E,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC;KACrC,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,MAAM,GAAG,CAAC,IAAI,EAA8B,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,SAAiB,EACjB,MAA0B,EAC1B,EAAU;IAEV,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,gBAAgB,kBAAkB,CAAC,EAAE,CAAC,UAAU,EAAE;QACpF,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC;KACrC,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,MAAM,GAAG,CAAC,IAAI,EAAsD,CAAC;AAC9E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,SAAiB,EACjB,MAA0B,EAC1B,KAAa,EACb,UAAkB;IAElB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,gBAAgB,kBAAkB,CAAC,KAAK,CAAC,YAAY,EAAE;QACzF,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC;QACnC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;KAC9C,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,MAAM,GAAG,CAAC,IAAI,EAAgD,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,SAAiB,EACjB,MAA0B,EAC1B,EAAU,EACV,MAAc;IAEd,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,gBAAgB,kBAAkB,CAAC,EAAE,CAAC,UAAU,EAAE;QACpF,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC;QACnC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;KACjC,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,MAAM,GAAG,CAAC,IAAI,EAAsC,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,SAAiB,EACjB,MAA0B,EAC1B,IAAoB;IAEpB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,eAAe,EAAE;QACnD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC;QACnC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,MAAM,GAAG,CAAC,IAAI,EAAsB,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,SAAiB,EACjB,MAA0B,EAC1B,IAAyB;IAEzB,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,iBAAiB,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE;QACxE,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC;KACrC,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,MAAM,GAAG,CAAC,IAAI,EAAsB,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,SAAiB,EACjB,MAA0B,EAC1B,KAAa;IAEb,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,iBAAiB,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE;QAChF,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC;KACrC,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,MAAM,GAAG,CAAC,IAAI,EAAqC,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,SAAiB,EACjB,MAA0B,EAC1B,IAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,IAAI,IAAI,CAAC,EAAE,KAAK,SAAS;QAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACrD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9D,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACtE,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,SAAS,WAAW,CAAC;IACpF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC;KACrC,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,MAAM,GAAG,CAAC,IAAI,EAAkB,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,IAAI,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;IAC1C,qFAAqF;IACrF,4DAA4D;IAC5D,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,MAAM,KAAK,GAAI,GAA2B,CAAC,KAAK,CAAC;IACjD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,GAAI,KAA4B,CAAC,IAAI,CAAC;QAChD,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,YAAY;YAAE,OAAO,IAAI,CAAC;IACpE,CAAC;IACD,+EAA+E;IAC/E,6EAA6E;IAC7E,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/src/config.js

@@ -0,0 +1,108 @@
+/**
+ * Config support for Hippo: reads .hippo/config.json with sane defaults.
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+import { DEFAULT_PHYSICS_CONFIG, mergePhysicsConfig } from './physics-config.js';
+const DEFAULT_CONFIG = {
+    defaultHalfLifeDays: 7,
+    defaultBudget: 4000,
+    defaultContextBudget: 3000,
+    decayBasis: 'adaptive',
+    autoLearnOnSleep: true,
+    autoShareOnSleep: true,
+    autoSleep: {
+        enabled: true,
+        threshold: 50,
+    },
+    embeddings: {
+        enabled: 'auto',
+        model: 'Xenova/all-MiniLM-L6-v2',
+        hybridWeight: 0.6,
+    },
+    global: {
+        enabled: true,
+    },
+    gitLearnPatterns: [
+        'fix', 'revert', 'bug', 'error', 'hotfix', 'bugfix',
+        'refactor', 'perf', 'chore', 'breaking', 'deprecate',
+    ],
+    physics: { ...DEFAULT_PHYSICS_CONFIG },
+    mmr: {
+        enabled: true,
+        lambda: 0.7,
+    },
+    search: {
+        localBump: 1.2,
+    },
+    replay: {
+        count: 5,
+    },
+    autoTraceCapture: true,
+    autoTraceWindowDays: 7,
+    pinnedInject: {
+        enabled: true,
+        budget: 1500,
+    },
+    extraction: {
+        enabled: 'auto',
+        model: 'claude-sonnet-4-6',
+    },
+    multihop: {
+        enabled: false,
+    },
+    salience: {
+        enabled: false,
+        recentWindow: 20,
+        overlapThreshold: 0.6,
+        minContentLength: 5,
+        maxRepeatErrors: 4,
+    },
+    ambient: {
+        enabled: true,
+    },
+};
+export function loadConfig(hippoRoot) {
+    const configPath = path.join(hippoRoot, 'config.json');
+    if (!fs.existsSync(configPath))
+        return { ...DEFAULT_CONFIG };
+    try {
+        const raw = JSON.parse(fs.readFileSync(configPath, 'utf8'));
+        const basis = raw.decayBasis;
+        const validBasis = basis === 'clock' || basis === 'session' || basis === 'adaptive';
+        return {
+            defaultHalfLifeDays: raw.defaultHalfLifeDays ?? DEFAULT_CONFIG.defaultHalfLifeDays,
+            defaultBudget: raw.defaultBudget ?? DEFAULT_CONFIG.defaultBudget,
+            defaultContextBudget: raw.defaultContextBudget ?? DEFAULT_CONFIG.defaultContextBudget,
+            decayBasis: validBasis ? basis : DEFAULT_CONFIG.decayBasis,
+            autoLearnOnSleep: raw.autoLearnOnSleep ?? DEFAULT_CONFIG.autoLearnOnSleep,
+            autoShareOnSleep: raw.autoShareOnSleep ?? DEFAULT_CONFIG.autoShareOnSleep,
+            autoSleep: { ...DEFAULT_CONFIG.autoSleep, ...(raw.autoSleep ?? {}) },
+            embeddings: { ...DEFAULT_CONFIG.embeddings, ...(raw.embeddings ?? {}) },
+            global: { ...DEFAULT_CONFIG.global, ...(raw.global ?? {}) },
+            gitLearnPatterns: raw.gitLearnPatterns ?? DEFAULT_CONFIG.gitLearnPatterns,
+            physics: mergePhysicsConfig(raw.physics),
+            mmr: { ...DEFAULT_CONFIG.mmr, ...(raw.mmr ?? {}) },
+            search: { ...DEFAULT_CONFIG.search, ...(raw.search ?? {}) },
+            replay: { ...DEFAULT_CONFIG.replay, ...(raw.replay ?? {}) },
+            autoTraceCapture: raw.autoTraceCapture ?? DEFAULT_CONFIG.autoTraceCapture,
+            autoTraceWindowDays: raw.autoTraceWindowDays ?? DEFAULT_CONFIG.autoTraceWindowDays,
+            pinnedInject: { ...DEFAULT_CONFIG.pinnedInject, ...(raw.pinnedInject ?? {}) },
+            extraction: { ...DEFAULT_CONFIG.extraction, ...(raw.extraction ?? {}) },
+            multihop: { ...DEFAULT_CONFIG.multihop, ...(raw.multihop ?? {}) },
+            salience: { ...DEFAULT_CONFIG.salience, ...(raw.salience ?? {}) },
+            ambient: { ...DEFAULT_CONFIG.ambient, ...(raw.ambient ?? {}) },
+        };
+    }
+    catch (err) {
+        if (fs.existsSync(configPath)) {
+            console.error(`Warning: failed to parse ${configPath}: ${err instanceof Error ? err.message : err}`);
+        }
+        return { ...DEFAULT_CONFIG };
+    }
+}
+export function saveConfig(hippoRoot, config) {
+    const configPath = path.join(hippoRoot, 'config.json');
+    fs.writeFileSync(configPath, JSON.stringify(config, null, 2), 'utf8');
+}
+//# sourceMappingURL=config.js.map

package/dist/src/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAsB,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAyErG,MAAM,cAAc,GAAgB;IAClC,mBAAmB,EAAE,CAAC;IACtB,aAAa,EAAE,IAAI;IACnB,oBAAoB,EAAE,IAAI;IAC1B,UAAU,EAAE,UAAU;IACtB,gBAAgB,EAAE,IAAI;IACtB,gBAAgB,EAAE,IAAI;IACtB,SAAS,EAAE;QACT,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,EAAE;KACd;IACD,UAAU,EAAE;QACV,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,yBAAyB;QAChC,YAAY,EAAE,GAAG;KAClB;IACD,MAAM,EAAE;QACN,OAAO,EAAE,IAAI;KACd;IACD,gBAAgB,EAAE;QAChB,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ;QACnD,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW;KACrD;IACD,OAAO,EAAE,EAAE,GAAG,sBAAsB,EAAE;IACtC,GAAG,EAAE;QACH,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,GAAG;KACZ;IACD,MAAM,EAAE;QACN,SAAS,EAAE,GAAG;KACf;IACD,MAAM,EAAE;QACN,KAAK,EAAE,CAAC;KACT;IACD,gBAAgB,EAAE,IAAI;IACtB,mBAAmB,EAAE,CAAC;IACtB,YAAY,EAAE;QACZ,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,IAAI;KACb;IACD,UAAU,EAAE;QACV,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,mBAAmB;KAC3B;IACD,QAAQ,EAAE;QACR,OAAO,EAAE,KAAK;KACf;IACD,QAAQ,EAAE;QACR,OAAO,EAAE,KAAK;QACd,YAAY,EAAE,EAAE;QAChB,gBAAgB,EAAE,GAAG;QACrB,gBAAgB,EAAE,CAAC;QACnB,eAAe,EAAE,CAAC;KACnB;IACD,OAAO,EAAE;QACP,OAAO,EAAE,IAAI;KACd;CACF,CAAC;AAEF,MAAM,UAAU,UAAU,CAAC,SAAiB;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACvD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,GAAG,cAAc,EAAE,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAyB,CAAC;QACpF,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC;QAC7B,MAAM,UAAU,GAAG,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,UAAU,CAAC;QACpF,OAAO;YACL,mBAAmB,EAAE,GAAG,CAAC,mBAAmB,IAAI,cAAc,CAAC,mBAAmB;YAClF,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,cAAc,CAAC,aAAa;YAChE,oBAAoB,EAAE,GAAG,CAAC,oBAAoB,IAAI,cAAc,CAAC,oBAAoB;YACrF,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,UAAU;YAC1D,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,IAAI,cAAc,CAAC,gBAAgB;YACzE,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,IAAI,cAAc,CAAC,gBAAgB;YACzE,SAAS,EAAE,EAAE,GAAG,cAAc,CAAC,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE;YACpE,UAAU,EAAE,EAAE,GAAG,cAAc,CAAC,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE;YACvE,MAAM,EAAE,EAAE,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE;YAC3D,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,IAAI,cAAc,CAAC,gBAAgB;YACzE,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC,OAA6C,CAAC;YAC9E,GAAG,EAAE,EAAE,GAAG,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE;YAClD,MAAM,EAAE,EAAE,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE;YAC3D,MAAM,EAAE,EAAE,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE;YAC3D,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,IAAI,cAAc,CAAC,gBAAgB;YACzE,mBAAmB,EAAE,GAAG,CAAC,mBAAmB,IAAI,cAAc,CAAC,mBAAmB;YAClF,YAAY,EAAE,EAAE,GAAG,cAAc,CAAC,YAAY,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE;YAC7E,UAAU,EAAE,EAAE,GAAG,cAAc,CAAC,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE;YACvE,QAAQ,EAAE,EAAE,GAAG,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE;YACjE,QAAQ,EAAE,EAAE,GAAG,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE;YACjE,OAAO,EAAE,EAAE,GAAG,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE;SAC/D,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,KAAK,CAAC,4BAA4B,UAAU,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACvG,CAAC;QACD,OAAO,EAAE,GAAG,cAAc,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,SAAiB,EAAE,MAAmB;IAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACvD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AACxE,CAAC"}

package/dist/src/connectors/slack/backfill.js

@@ -0,0 +1,76 @@
+import { openHippoDb, closeHippoDb } from '../../db.js';
+import { ingestMessage } from './ingest.js';
+function readCursor(root, tenantId, channelId) {
+    const db = openHippoDb(root);
+    try {
+        const row = db
+            .prepare(`SELECT latest_ts FROM slack_cursors WHERE tenant_id=? AND channel_id=?`)
+            .get(tenantId, channelId);
+        return row?.latest_ts ?? null;
+    }
+    finally {
+        closeHippoDb(db);
+    }
+}
+function writeCursor(root, tenantId, channelId, latestTs) {
+    const db = openHippoDb(root);
+    try {
+        db.prepare(`INSERT INTO slack_cursors (tenant_id, channel_id, latest_ts, updated_at) VALUES (?,?,?,?)
+       ON CONFLICT(tenant_id, channel_id) DO UPDATE SET latest_ts = excluded.latest_ts, updated_at = excluded.updated_at`).run(tenantId, channelId, latestTs, new Date().toISOString());
+    }
+    finally {
+        closeHippoDb(db);
+    }
+}
+/**
+ * Page through `conversations.history` via the injected fetcher and ingest each
+ * message. The cursor is persisted to `slack_cursors` after every page so a
+ * crash mid-backfill resumes near where it left off.
+ *
+ * Each ingested message uses a synthesized eventId of the form
+ * `backfill:${teamId}:${channelId}:${ts}`. Reruns dedupe via the
+ * `slack_event_log` PK so calling `backfillChannel` twice is safe.
+ */
+export async function backfillChannel(ctx, opts) {
+    // Resume bound from previous run; passed as `oldest` (numeric ts) on the
+    // first page only. `cursor` starts null — Slack mints the next-page token
+    // and we feed it back. Mixing the two would feed a numeric ts as an opaque
+    // cursor and break against the live API on rerun.
+    const resumeFrom = readCursor(ctx.hippoRoot, ctx.tenantId, opts.channel.id);
+    let cursor = null;
+    let ingested = 0;
+    let pages = 0;
+    let latestTs = resumeFrom;
+    while (true) {
+        const page = await opts.fetcher({
+            channelId: opts.channel.id,
+            cursor,
+            oldest: pages === 0 && resumeFrom ? resumeFrom : undefined,
+        });
+        pages++;
+        for (const msg of page.messages) {
+            const r = ingestMessage(ctx, {
+                teamId: opts.teamId,
+                channel: opts.channel,
+                message: msg,
+                eventId: `backfill:${opts.teamId}:${opts.channel.id}:${msg.ts}`,
+            });
+            if (r.status === 'ingested')
+                ingested++;
+            if (!latestTs || msg.ts > latestTs)
+                latestTs = msg.ts;
+            if (opts.maxMessages && ingested >= opts.maxMessages) {
+                if (latestTs)
+                    writeCursor(ctx.hippoRoot, ctx.tenantId, opts.channel.id, latestTs);
+                return { ingested, pages };
+            }
+        }
+        if (latestTs)
+            writeCursor(ctx.hippoRoot, ctx.tenantId, opts.channel.id, latestTs);
+        if (!page.next_cursor)
+            break;
+        cursor = page.next_cursor;
+    }
+    return { ingested, pages };
+}
+//# sourceMappingURL=backfill.js.map

package/dist/src/connectors/slack/backfill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backfill.js","sourceRoot":"","sources":["../../../../src/connectors/slack/backfill.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAgC5C,SAAS,UAAU,CAAC,IAAY,EAAE,QAAgB,EAAE,SAAiB;IACnE,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE;aACX,OAAO,CAAC,wEAAwE,CAAC;aACjF,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAuC,CAAC;QAClE,OAAO,GAAG,EAAE,SAAS,IAAI,IAAI,CAAC;IAChC,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,IAAY,EACZ,QAAgB,EAChB,SAAiB,EACjB,QAAgB;IAEhB,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC;QACH,EAAE,CAAC,OAAO,CACR;yHACmH,CACpH,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACjE,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAY,EACZ,IAAkB;IAElB,yEAAyE;IACzE,0EAA0E;IAC1E,2EAA2E;IAC3E,kDAAkD;IAClD,MAAM,UAAU,GAAkB,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC3F,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,GAAkB,UAAU,CAAC;IACzC,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YAC9B,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;YAC1B,MAAM;YACN,MAAM,EAAE,KAAK,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;SAC3D,CAAC,CAAC;QACH,KAAK,EAAE,CAAC;QACR,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,CAAC,GAAG,aAAa,CAAC,GAAG,EAAE;gBAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,YAAY,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,EAAE;aAChE,CAAC,CAAC;YACH,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU;gBAAE,QAAQ,EAAE,CAAC;YACxC,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC,EAAE,GAAG,QAAQ;gBAAE,QAAQ,GAAG,GAAG,CAAC,EAAE,CAAC;YACtD,IAAI,IAAI,CAAC,WAAW,IAAI,QAAQ,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrD,IAAI,QAAQ;oBAAE,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;gBAClF,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;YAC7B,CAAC;QACH,CAAC;QACD,IAAI,QAAQ;YAAE,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAClF,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,MAAM;QAC7B,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC;IAC5B,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC"}

package/dist/src/connectors/slack/deletion.js

@@ -0,0 +1,46 @@
+import { archiveRaw } from '../../api.js';
+import { openHippoDb, closeHippoDb } from '../../db.js';
+import { markEventSeen, hasSeenEvent } from './idempotency.js';
+export function handleMessageDeleted(ctx, input) {
+    const db = openHippoDb(ctx.hippoRoot);
+    let memoryId = null;
+    try {
+        if (hasSeenEvent(db, input.eventId)) {
+            return { status: 'duplicate', memoryId: null };
+        }
+        const ref = `slack://${input.teamId}/${input.channelId}/${input.deletedTs}`;
+        // Tenant scope is load-bearing: without `tenant_id = ?` a deletion event
+        // from tenant A could archive tenant B's raw row sharing the same
+        // artifact_ref. The `kind = 'raw'` filter prevents accidentally targeting
+        // distilled rows.
+        const row = db
+            .prepare(`SELECT id FROM memories WHERE artifact_ref = ? AND tenant_id = ? AND kind = 'raw'`)
+            .get(ref, ctx.tenantId);
+        memoryId = row?.id ?? null;
+    }
+    finally {
+        closeHippoDb(db);
+    }
+    if (!memoryId) {
+        const db2 = openHippoDb(ctx.hippoRoot);
+        try {
+            markEventSeen(db2, input.eventId, null);
+        }
+        finally {
+            closeHippoDb(db2);
+        }
+        return { status: 'not_found', memoryId: null };
+    }
+    // api.archiveRaw now handles legacy mirror cleanup centrally so every caller
+    // (CLI, REST route, MCP tool, this connector) gets the GDPR-correct archive.
+    archiveRaw(ctx, memoryId, `source_deleted:slack:${input.teamId}:${input.channelId}:${input.deletedTs}`);
+    const db3 = openHippoDb(ctx.hippoRoot);
+    try {
+        markEventSeen(db3, input.eventId, memoryId);
+    }
+    finally {
+        closeHippoDb(db3);
+    }
+    return { status: 'archived', memoryId };
+}
+//# sourceMappingURL=deletion.js.map

package/dist/src/connectors/slack/deletion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deletion.js","sourceRoot":"","sources":["../../../../src/connectors/slack/deletion.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAgB,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAgB/D,MAAM,UAAU,oBAAoB,CAAC,GAAY,EAAE,KAAoB;IACrE,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,IAAI,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACjD,CAAC;QACD,MAAM,GAAG,GAAG,WAAW,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QAC5E,yEAAyE;QACzE,kEAAkE;QAClE,0EAA0E;QAC1E,kBAAkB;QAClB,MAAM,GAAG,GAAG,EAAE;aACX,OAAO,CAAC,mFAAmF,CAAC;aAC5F,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAgC,CAAC;QACzD,QAAQ,GAAG,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC;IAC7B,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC;YAAC,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAAC,CAAC;gBACxC,CAAC;YAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAC9B,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjD,CAAC;IACD,6EAA6E;IAC7E,6EAA6E;IAC7E,UAAU,CAAC,GAAG,EAAE,QAAQ,EAAE,wBAAwB,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IACxG,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,CAAC;QAAC,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAAC,CAAC;YAC5C,CAAC;QAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAC9B,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AAC1C,CAAC"}

package/dist/src/connectors/slack/dlq.js

@@ -0,0 +1,23 @@
+export function writeToDlq(db, opts) {
+    const result = db
+        .prepare(`INSERT INTO slack_dlq (tenant_id, raw_payload, error, received_at) VALUES (?, ?, ?, ?)`)
+        .run(opts.tenantId, opts.rawPayload, opts.error, new Date().toISOString());
+    return Number(result.lastInsertRowid);
+}
+export function listDlq(db, opts) {
+    const rows = db
+        .prepare(`SELECT id, tenant_id, raw_payload, error, received_at, retried_at FROM slack_dlq WHERE tenant_id = ? ORDER BY received_at ASC LIMIT ?`)
+        .all(opts.tenantId, opts.limit ?? 100);
+    return rows.map((r) => ({
+        id: Number(r.id),
+        tenantId: String(r.tenant_id),
+        rawPayload: String(r.raw_payload),
+        error: String(r.error),
+        receivedAt: String(r.received_at),
+        retriedAt: r.retried_at == null ? null : String(r.retried_at),
+    }));
+}
+export function markDlqRetried(db, id) {
+    db.prepare(`UPDATE slack_dlq SET retried_at = ? WHERE id = ?`).run(new Date().toISOString(), id);
+}
+//# sourceMappingURL=dlq.js.map

package/dist/src/connectors/slack/dlq.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dlq.js","sourceRoot":"","sources":["../../../../src/connectors/slack/dlq.ts"],"names":[],"mappings":"AAiBA,MAAM,UAAU,UAAU,CAAC,EAAoB,EAAE,IAAkB;IACjE,MAAM,MAAM,GAAG,EAAE;SACd,OAAO,CAAC,wFAAwF,CAAC;SACjG,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7E,OAAO,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,EAAoB,EAAE,IAA0C;IACtF,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CAAC,uIAAuI,CAAC;SAChJ,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,IAAI,GAAG,CAAmC,CAAC;IAC3E,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtB,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7B,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;QACjC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;QACtB,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;QACjC,SAAS,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;KAC9D,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAoB,EAAE,EAAU;IAC7D,EAAE,CAAC,OAAO,CAAC,kDAAkD,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;AACnG,CAAC"}

package/dist/src/connectors/slack/idempotency.js

@@ -0,0 +1,13 @@
+export function hasSeenEvent(db, eventId) {
+    const row = db.prepare(`SELECT 1 FROM slack_event_log WHERE event_id = ?`).get(eventId);
+    return !!row;
+}
+export function markEventSeen(db, eventId, memoryId) {
+    db.prepare(`INSERT OR IGNORE INTO slack_event_log (event_id, ingested_at, memory_id) VALUES (?, ?, ?)`)
+        .run(eventId, new Date().toISOString(), memoryId);
+}
+export function lookupMemoryByEvent(db, eventId) {
+    const row = db.prepare(`SELECT memory_id FROM slack_event_log WHERE event_id = ?`).get(eventId);
+    return row?.memory_id ?? null;
+}
+//# sourceMappingURL=idempotency.js.map

package/dist/src/connectors/slack/idempotency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotency.js","sourceRoot":"","sources":["../../../../src/connectors/slack/idempotency.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,YAAY,CAAC,EAAoB,EAAE,OAAe;IAChE,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,kDAAkD,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACxF,OAAO,CAAC,CAAC,GAAG,CAAC;AACf,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAoB,EAAE,OAAe,EAAE,QAAuB;IAC1F,EAAE,CAAC,OAAO,CAAC,2FAA2F,CAAC;SACpG,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,QAAQ,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,EAAoB,EAAE,OAAe;IACvE,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,0DAA0D,CAAC,CAAC,GAAG,CAAC,OAAO,CAEjF,CAAC;IACd,OAAO,GAAG,EAAE,SAAS,IAAI,IAAI,CAAC;AAChC,CAAC"}

package/dist/src/connectors/slack/ingest.js

@@ -0,0 +1,48 @@
+import { remember } from '../../api.js';
+import { openHippoDb, closeHippoDb } from '../../db.js';
+import { hasSeenEvent, markEventSeen, lookupMemoryByEvent } from './idempotency.js';
+import { messageToRememberOpts } from './transform.js';
+/**
+ * Ingest a Slack message into hippo as a kind='raw' memory.
+ *
+ * - Idempotency-checked via slack_event_log (Slack retries within 1 minute).
+ * - The memory write and the slack_event_log mark commit atomically through
+ *   `api.remember`'s `afterWrite` hook — a crash between the two cannot
+ *   produce a duplicate on the next retry.
+ * - Empty-body messages return 'skipped' but still mark seen so a replay
+ *   returns 'duplicate' rather than re-running the transform.
+ */
+export function ingestMessage(ctx, input) {
+    // Idempotency check: if already seen, return the cached memory_id without
+    // re-running the transform or hitting api.remember.
+    const db = openHippoDb(ctx.hippoRoot);
+    try {
+        if (hasSeenEvent(db, input.eventId)) {
+            return { status: 'duplicate', memoryId: lookupMemoryByEvent(db, input.eventId) };
+        }
+    }
+    finally {
+        closeHippoDb(db);
+    }
+    const opts = messageToRememberOpts(input);
+    if (!opts) {
+        const db2 = openHippoDb(ctx.hippoRoot);
+        try {
+            markEventSeen(db2, input.eventId, null);
+        }
+        finally {
+            closeHippoDb(db2);
+        }
+        return { status: 'skipped', memoryId: null };
+    }
+    // Atomic write: the afterWrite callback runs inside writeEntry's SAVEPOINT,
+    // so the memory row and the slack_event_log row commit (or roll back)
+    // together. Slack's 1-minute retry window can no longer produce a duplicate
+    // via the crash-between-handles race.
+    const result = remember({ ...ctx, actor: ctx.actor || 'connector:slack' }, {
+        ...opts,
+        afterWrite: (db, memoryId) => markEventSeen(db, input.eventId, memoryId),
+    });
+    return { status: 'ingested', memoryId: result.id };
+}
+//# sourceMappingURL=ingest.js.map

package/dist/src/connectors/slack/ingest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingest.js","sourceRoot":"","sources":["../../../../src/connectors/slack/ingest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAgB,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAmBvD;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAAC,GAAY,EAAE,KAAkB;IAC5D,0EAA0E;IAC1E,oDAAoD;IACpD,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,IAAI,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACnF,CAAC;IACH,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;IAED,MAAM,IAAI,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC1C,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC/C,CAAC;IAED,4EAA4E;IAC5E,sEAAsE;IACtE,4EAA4E;IAC5E,sCAAsC;IACtC,MAAM,MAAM,GAAG,QAAQ,CACrB,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,iBAAiB,EAAE,EACjD;QACE,GAAG,IAAI;QACP,UAAU,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC;KACzE,CACF,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;AACrD,CAAC"}

package/dist/src/connectors/slack/ratelimit.js

@@ -0,0 +1,18 @@
+export async function fetchWithRetry(opts) {
+    const f = opts.fetchImpl ?? fetch;
+    const sleep = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+    const max = opts.maxRetries ?? 3;
+    let attempt = 0;
+    while (true) {
+        const r = await f(opts.url, opts.init);
+        if (r.status !== 429)
+            return r;
+        if (attempt >= max)
+            throw new Error(`rate-limited after ${attempt + 1} attempts: ${opts.url}`);
+        const ra = r.headers.get('retry-after');
+        const delaySec = ra ? Number(ra) : Math.pow(2, attempt);
+        await sleep(Math.max(0, delaySec) * 1000);
+        attempt++;
+    }
+}
+//# sourceMappingURL=ratelimit.js.map

package/dist/src/connectors/slack/ratelimit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ratelimit.js","sourceRoot":"","sources":["../../../../src/connectors/slack/ratelimit.ts"],"names":[],"mappings":"AAQA,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAe;IAClD,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1F,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;IACjC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,CAAC,CAAC;QAC/B,IAAI,OAAO,IAAI,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,OAAO,GAAG,CAAC,cAAc,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC/F,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACxD,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;QAC1C,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/src/connectors/slack/scope.js

@@ -0,0 +1,13 @@
+/**
+ * Map a Slack channel into a hippo scope string.
+ *
+ * Default to private when privacy is undetermined. The cost of leaking a
+ * public channel into private scope (recall returns nothing) is far smaller
+ * than the cost of leaking a private channel into public scope (data exposed
+ * to a tenant that should not see it).
+ */
+export function scopeFromChannel(ch) {
+    const isPublic = ch.is_private === false && !ch.is_im && !ch.is_mpim;
+    return isPublic ? `slack:public:${ch.id}` : `slack:private:${ch.id}`;
+}
+//# sourceMappingURL=scope.js.map

package/dist/src/connectors/slack/scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.js","sourceRoot":"","sources":["../../../../src/connectors/slack/scope.ts"],"names":[],"mappings":"AAOA;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAe;IAC9C,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,KAAK,KAAK,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;IACrE,OAAO,QAAQ,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC,EAAE,EAAE,CAAC;AACvE,CAAC"}

package/dist/src/connectors/slack/signature.js

@@ -0,0 +1,20 @@
+import { createHmac, timingSafeEqual } from 'crypto';
+export function verifySlackSignature(opts) {
+    const { rawBody, timestamp, signature, signingSecret } = opts;
+    const now = opts.now ?? Math.floor(Date.now() / 1000);
+    const skew = opts.skewSeconds ?? 5 * 60;
+    const ts = Number(timestamp);
+    if (!Number.isFinite(ts))
+        return false;
+    if (Math.abs(now - ts) > skew)
+        return false;
+    if (!signature.startsWith('v0='))
+        return false;
+    const expected = `v0=${createHmac('sha256', signingSecret).update(`v0:${timestamp}:${rawBody}`).digest('hex')}`;
+    const a = Buffer.from(signature, 'utf8');
+    const b = Buffer.from(expected, 'utf8');
+    if (a.length !== b.length)
+        return false;
+    return timingSafeEqual(a, b);
+}
+//# sourceMappingURL=signature.js.map

package/dist/src/connectors/slack/signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.js","sourceRoot":"","sources":["../../../../src/connectors/slack/signature.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAarD,MAAM,UAAU,oBAAoB,CAAC,IAAgB;IACnD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC;IACxC,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,IAAI;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,MAAM,SAAS,IAAI,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAChH,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/B,CAAC"}

package/dist/src/connectors/slack/tenant-routing.js

@@ -0,0 +1,17 @@
+/**
+ * Look up the tenant_id for a Slack team_id. Returns null when no row exists,
+ * which signals "use the deployment's HIPPO_TENANT fallback". Multi-workspace
+ * deployments populate slack_workspaces; single-workspace deployments leave
+ * the table empty and rely on the env fallback.
+ *
+ * Review patch #6: dedicated routing seam — never inline this lookup at the
+ * route handler so a future schema change (e.g. installation tokens) lands
+ * in one place.
+ */
+export function resolveTenantForTeam(db, teamId) {
+    const row = db
+        .prepare(`SELECT tenant_id FROM slack_workspaces WHERE team_id = ?`)
+        .get(teamId);
+    return row?.tenant_id ?? null;
+}
+//# sourceMappingURL=tenant-routing.js.map

package/dist/src/connectors/slack/tenant-routing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-routing.js","sourceRoot":"","sources":["../../../../src/connectors/slack/tenant-routing.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAAC,EAAoB,EAAE,MAAc;IACvE,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CAAC,0DAA0D,CAAC;SACnE,GAAG,CAAC,MAAM,CAAuC,CAAC;IACrD,OAAO,GAAG,EAAE,SAAS,IAAI,IAAI,CAAC;AAChC,CAAC"}