hippo-memory 0.38.0 → 0.40.0

package/dist/cli.js

@@ -53,6 +53,8 @@ import { importChatGPT, importClaude, importCursor, importGenericFile, importMar
 import { cmdCapture } from './capture.js';
 import { auditMemories, appendAuditEvent, } from './audit.js';
 import { listApiKeys, revokeApiKey } from './auth.js';
+import { buildProvenanceCoverage } from './provenance-coverage.js';
+import { buildCorrectionLatency } from './correction-latency.js';
 import * as api from './api.js';
 import * as client from './client.js';
 import { detectServer, removePidfile } from './server-detect.js';
@@ -64,7 +66,7 @@ import { wmPush, wmRead, wmClear, wmFlush } from './working-memory.js';
 import { multihopSearch } from './multihop.js';
 import { computeSalience } from './salience.js';
 import { computeAmbientState, renderAmbientSummary } from './ambient.js';
-import { listDlq } from './connectors/slack/dlq.js';
+import { listDlq, replayDlqEntry } from './connectors/slack/dlq.js';
 import { backfillChannel } from './connectors/slack/backfill.js';
 import { slackHistoryFetcher } from './connectors/slack/web-client.js';
 // ---------------------------------------------------------------------------
@@ -3992,12 +3994,17 @@ function cmdAuthCreate(hippoRoot, flags) {
     const tenantFlag = typeof flags['tenant'] === 'string' ? flags['tenant'] : undefined;
     const labelFlag = typeof flags['label'] === 'string' ? flags['label'] : undefined;
     const asJson = Boolean(flags['json']);
+    // The CLI's --tenant flag is the only legitimate cross-tenant override
+    // (admin minting a key for another tenant from the local machine). It
+    // flows through ctx.tenantId, NOT through opts — authCreate's opts no
+    // longer accepts a tenantId field, so the HTTP layer cannot smuggle a
+    // body.tenantId across.
     const ctx = {
         hippoRoot: root,
-        tenantId: resolveTenantId({}),
+        tenantId: tenantFlag ?? resolveTenantId({}),
         actor: 'cli',
     };
-    const result = api.authCreate(ctx, { tenantId: tenantFlag, label: labelFlag });
+    const result = api.authCreate(ctx, { label: labelFlag });
     if (asJson) {
         console.log(JSON.stringify({
             keyId: result.keyId,
@@ -4464,6 +4471,28 @@ function cmdSlackDlqList(hippoRoot, _flags) {
         closeHippoDb(db);
     }
 }
+function cmdSlackDlqReplay(hippoRoot, args, flags) {
+    const idArg = args[2];
+    if (!idArg) {
+        console.error('Usage: hippo slack dlq replay <id> [--force]');
+        process.exit(1);
+    }
+    const id = Number(idArg);
+    if (!Number.isFinite(id) || !Number.isInteger(id) || id < 1) {
+        console.error(`replay: invalid id ${idArg}`);
+        process.exit(1);
+    }
+    const force = flags.force === true;
+    const result = replayDlqEntry({ hippoRoot }, id, {
+        force,
+        signingSecret: process.env.SLACK_SIGNING_SECRET,
+    });
+    if (!result.ok) {
+        console.error(`replay failed: status=${result.status} retry_count=${result.retryCount}${result.reason ? ` reason=${result.reason}` : ''}`);
+        process.exit(1);
+    }
+    console.log(`replay ok: status=${result.status} memory_id=${result.memoryId ?? '(none)'} retry_count=${result.retryCount}`);
+}
 function cmdSlack(hippoRoot, args, flags) {
     const sub = args[0];
     if (sub === 'backfill') {
@@ -4474,7 +4503,11 @@ function cmdSlack(hippoRoot, args, flags) {
         cmdSlackDlqList(hippoRoot, flags);
         return;
     }
-    console.error('Usage: hippo slack <backfill|dlq list> [...]');
+    if (sub === 'dlq' && args[1] === 'replay') {
+        cmdSlackDlqReplay(hippoRoot, args, flags);
+        return;
+    }
+    console.error('Usage: hippo slack <backfill|dlq list|dlq replay <id> [--force]> [...]');
     process.exit(1);
 }
 function printUsage() {
@@ -4590,6 +4623,11 @@ Commands:
     --threshold <n>        Overlap threshold 0-1 (default: 0.7)
   status                   Show memory health stats
   audit [--fix]            Check memory quality (--fix removes junk)
+  provenance               Provenance coverage gate for kind='raw' rows
+    --json                 Output as JSON
+    --strict               Exit non-zero when coverage < 100%
+  correction-latency       Wall-clock lag from receipt to supersession (p50/p95/max)
+    --json                 Output as JSON
   outcome                  Apply feedback to last recall
     --good                 Memories were helpful
     --bad                  Memories were irrelevant
@@ -4977,6 +5015,62 @@ async function main() {
             }
             break;
         }
+        case 'correction-latency': {
+            requireInit(hippoRoot);
+            const entries = loadAllEntries(hippoRoot);
+            const report = buildCorrectionLatency(entries);
+            if (flags['json']) {
+                console.log(JSON.stringify(report, null, 2));
+            }
+            else if (report.count === 0) {
+                console.log('No supersessions found. Correction latency is undefined.');
+            }
+            else {
+                const fmt = (ms) => {
+                    if (ms === null)
+                        return 'n/a';
+                    if (ms < 1000)
+                        return `${ms}ms`;
+                    if (ms < 60_000)
+                        return `${(ms / 1000).toFixed(1)}s`;
+                    if (ms < 3_600_000)
+                        return `${(ms / 60_000).toFixed(1)}m`;
+                    return `${(ms / 3_600_000).toFixed(1)}h`;
+                };
+                console.log(`Corrections: ${report.count} total (${report.extractionCount} extraction-driven, ${report.manualCount} manual)`);
+                console.log(`Latency p50: ${fmt(report.p50Ms)}, p95: ${fmt(report.p95Ms)}, max: ${fmt(report.maxMs)}`);
+                if (report.extractionCount === 0 && report.manualCount > 0) {
+                    console.log(`\nAll ${report.manualCount} corrections were manual supersedes: no measurable observation lag.`);
+                    console.log(`To measure latency, route corrections through extraction (set new.extracted_from to the raw receipt).`);
+                }
+            }
+            break;
+        }
+        case 'provenance': {
+            requireInit(hippoRoot);
+            const entries = loadAllEntries(hippoRoot);
+            const coverage = buildProvenanceCoverage(entries);
+            if (flags['json']) {
+                console.log(JSON.stringify(coverage, null, 2));
+            }
+            else if (coverage.rawTotal === 0) {
+                console.log('No kind=raw memories present. Coverage gate trivially satisfied.');
+            }
+            else {
+                const pct = (coverage.coverage * 100).toFixed(1);
+                console.log(`Provenance coverage: ${coverage.rawWithEnvelope}/${coverage.rawTotal} raw rows envelope-complete (${pct}%)`);
+                if (coverage.gaps.length > 0) {
+                    console.log(`\nGaps:`);
+                    for (const g of coverage.gaps) {
+                        console.log(`  ${g.id}: missing ${g.missing.join(', ')}`);
+                    }
+                }
+            }
+            if (flags['strict'] && coverage.coverage < 1) {
+                process.exit(1);
+            }
+            break;
+        }
         case 'status':
             cmdStatus(hippoRoot);
             break;
@@ -5106,13 +5200,14 @@ async function main() {
             else if (shareId) {
                 requireInit(hippoRoot);
                 const force = Boolean(flags['force']);
-                const result = shareMemory(hippoRoot, shareId, { force });
+                const tenantId = resolveTenantId({});
+                const result = shareMemory(hippoRoot, shareId, { force, tenantId });
                 if (result) {
                     console.log(`Shared [${result.id}] to global store.`);
                     console.log(`  Source: ${result.source}`);
                 }
                 else {
-                    const entry = readEntry(hippoRoot, shareId);
+                    const entry = readEntry(hippoRoot, shareId, tenantId);
                     if (entry) {
                         const score = transferScore(entry);
                         console.log(`Transfer score too low (${fmt(score)}). This memory looks project-specific.`);