hippo-memory 1.11.5 → 1.12.0

package/dist/cli.js

@@ -1948,7 +1948,7 @@ async function cmdSleepCore(hippoRoot, flags) {
     const ctx = {
         hippoRoot,
         tenantId: resolveTenantId({}),
-        actor: 'cli',
+        actor: api.adminActor('cli'),
     };
     const result = await api.sleep(ctx, {
         dryRun: Boolean(flags['dry-run']),
@@ -2334,7 +2334,7 @@ function cmdOutcome(hippoRoot, flags) {
     const ctx = {
         hippoRoot,
         tenantId: resolveTenantId({}),
-        actor: 'cli',
+        actor: api.adminActor('cli'),
     };
     const specificId = flags['id'] ? String(flags['id']) : null;
     let updated;
@@ -2356,7 +2356,7 @@ function cmdForget(hippoRoot, id, flags) {
     const ctx = {
         hippoRoot,
         tenantId: resolveTenantId({}),
-        actor: 'cli',
+        actor: api.adminActor('cli'),
     };
     // A3: raw memories (Slack / GitHub connector ingestion) are append-only — a
     // BEFORE-DELETE trigger aborts any delete. archiveRaw is the sanctioned
@@ -2900,7 +2900,7 @@ async function cmdContext(hippoRoot, args, flags) {
     const ctx = {
         hippoRoot,
         tenantId: resolveTenantId({}),
-        actor: 'cli',
+        actor: api.adminActor('cli'),
     };
     const opts = {
         q: query,
@@ -3344,7 +3344,7 @@ function cmdPromote(hippoRoot, id) {
     const ctx = {
         hippoRoot,
         tenantId: resolveTenantId({}),
-        actor: 'cli',
+        actor: api.adminActor('cli'),
     };
     try {
         const result = api.promote(ctx, id);
@@ -3960,7 +3960,7 @@ function cmdAssemble(hippoRoot, sessionId, flags) {
     const ctx = {
         hippoRoot,
         tenantId: resolveTenantId({}),
-        actor: 'cli:assemble',
+        actor: api.adminActor('cli:assemble'),
     };
     const r = api.assemble(ctx, sessionId, {
         ...(Number.isFinite(budget) && budget > 0 ? { budget } : {}),
@@ -3986,7 +3986,7 @@ function cmdDrillDown(hippoRoot, summaryId, flags) {
     const ctx = {
         hippoRoot,
         tenantId: resolveTenantId({}),
-        actor: 'cli:drill',
+        actor: api.adminActor('cli:drill'),
     };
     const r = api.drillDown(ctx, summaryId, {
         ...(Number.isFinite(limit) && limit > 0 ? { limit } : {}),
@@ -4039,7 +4039,7 @@ function cmdAuthCreate(hippoRoot, flags) {
     const ctx = {
         hippoRoot: root,
         tenantId: tenantFlag ?? resolveTenantId({}),
-        actor: 'cli',
+        actor: api.adminActor('cli'),
     };
     const result = api.authCreate(ctx, { label: labelFlag });
     if (asJson) {
@@ -4193,7 +4193,7 @@ function cmdAuditList(hippoRoot, flags) {
         console.error(`--limit must be between 1 and 10000 (got ${limit}).`);
         process.exit(1);
     }
-    const ctx = { hippoRoot: root, tenantId, actor: 'cli' };
+    const ctx = { hippoRoot: root, tenantId, actor: { subject: 'cli', role: 'admin' } };
     const events = api.auditList(ctx, { op, since, limit });
     if (asJson) {
         console.log(JSON.stringify(events));
@@ -4486,7 +4486,7 @@ function cmdSlackBackfill(hippoRoot, flags) {
     const ctx = {
         hippoRoot,
         tenantId: resolveTenantId({}),
-        actor: 'cli:slack-backfill',
+        actor: api.adminActor('cli:slack-backfill'),
     };
     backfillChannel(ctx, {
         teamId: process.env.SLACK_TEAM_ID ?? 'T_UNKNOWN',