hippo-memory 1.52.6 → 1.52.8

package/dist/importers.js

@@ -12,6 +12,7 @@ import { getGlobalRoot, initGlobal } from './shared.js';
 import { remember, archiveRaw, isPrivateScope } from './api.js';
 import { openHippoDb, closeHippoDb } from './db.js';
 import { RejectedValueError, checkRejectionGuard } from './rejection.js';
+import { loadConfig } from './config.js';
 // ---------------------------------------------------------------------------
 // Shared core: dedup + write
 // ---------------------------------------------------------------------------
@@ -27,6 +28,7 @@ export function importEntries(chunks, source, tags, options) {
     }
     const existing = loadAllEntries(targetRoot, options.global ? undefined : options.tenantId);
     const allTags = [...new Set([...tags, ...(options.extraTags ?? [])])];
+    const baseHalfLifeDays = loadConfig(targetRoot).defaultHalfLifeDays;
     let total = 0;
     let imported = 0;
     let skipped = 0;
@@ -80,6 +82,7 @@ export function importEntries(chunks, source, tags, options) {
                 source,
                 confidence: 'observed',
                 tenantId: options.global ? undefined : options.tenantId,
+                baseHalfLifeDays,
             });
             if (options.dryRun) {
                 if (dryRunDb) {
@@ -314,9 +317,16 @@ function parseCursorFile(content) {
         return parts.map((p) => p.trim()).filter(Boolean);
     });
 }
-export function importCursor(filePath, options) {
-    const raw = fs.readFileSync(filePath, 'utf8');
-    const chunks = parseCursorFile(raw);
+const CURSOR_RULE_FILE = /\.mdc?$/i;
+/** Import `.cursorrules`, one rule file, or a `.cursor/rules` tree of `.mdc` and `.md` rules. */
+export function importCursor(sourcePath, options) {
+    const files = fs.statSync(sourcePath).isDirectory()
+        ? collectMarkdownFiles(sourcePath, options.hippoRoot, CURSOR_RULE_FILE).map((rel) => path.join(sourcePath, rel))
+        : [sourcePath];
+    const chunks = files.flatMap((file) => {
+        const raw = fs.readFileSync(file, 'utf8');
+        return parseCursorFile(CURSOR_RULE_FILE.test(file) ? parseFrontmatter(raw).body : raw);
+    });
     return importEntries(chunks, 'import:cursor', ['imported', 'cursor'], options);
 }
 // ---------------------------------------------------------------------------
@@ -521,8 +531,8 @@ function parseWikilinks(body) {
     }
     return out;
 }
-/** Recursively collect `*.md` files under `root`, returning paths relative to
- *  `root` with forward-slash separators (stable artifactRef keys across OSes).
+/** Recursively collect files whose name matches `match` (`*.md` by default) under `root`,
+ *  as paths relative to `root` with forward-slash separators (stable artifactRef keys across OSes).
  *  Symlinks are not followed. Skips dot-directories (the default `.hippo` store,
  *  `.git`, `.obsidian`, `.trash`) AND the canonicalized Hippo store path during
  *  the walk, so re-importing a vault that CONTAINS the store never ingests its own
@@ -531,7 +541,7 @@ function parseWikilinks(body) {
  *  every run). The root-IS-the-store case is handled one level up in
  *  importVault (a no-op early return), NOT here: returning [] for it would feed
  *  the deletion-sync an empty scan that mass-archives every live row (codex R8). */
-function collectMarkdownFiles(root, hippoRoot) {
+function collectMarkdownFiles(root, hippoRoot, match = /\.md$/i) {
     const out = [];
     // Canonicalize (realpath) so a non-dot HIPPO_HOME store nested in the vault is
     // skipped even when hippoRoot is an aliased path (junction / Windows case
@@ -553,7 +563,7 @@ function collectMarkdownFiles(root, hippoRoot) {
                     continue;
                 walk(abs);
             }
-            else if (ent.isFile() && ent.name.toLowerCase().endsWith('.md')) {
+            else if (ent.isFile() && match.test(ent.name)) {
                 out.push(path.relative(root, abs).split(path.sep).join('/'));
             }
         }
@@ -693,6 +703,7 @@ export function importVault(folderPath, options) {
     let rejected = 0;
     let archived = 0;
     const entries = [];
+    const baseHalfLifeDays = loadConfig(hippoRoot).defaultHalfLifeDays;
     // AT1 P2 fix: dry-run never called remember(), so it never probed
     // tombstones — every note that reached the write step counted as
     // `imported` even when a real run would refuse it. Probe (read-only) via
@@ -799,6 +810,7 @@ export function importVault(folderPath, options) {
                 owner: 'agent:vault-import',
                 artifact_ref: artifactRef,
                 tenantId,
+                baseHalfLifeDays,
             });
             // dryRun preview: count what WOULD import, but make no writes (codex P2).
             if (!dryRun) {

package/dist/incidents.d.ts

@@ -63,7 +63,7 @@ export interface ListIncidentsOpts {
  * inside writeEntry's SAVEPOINT 'write_entry'.
  *
  * The memory mirror: tags ['incident', ...extraTags], source 'incident',
- * confidence 'verified', half_life INCIDENT_HALF_LIFE_DAYS, content =
+ * confidence 'verified', the half-life objectHalfLifeDays picks, content =
  * "<text>\n\nContext: <context>" when context is given.
  *
  * linked_memory_ids are validated BEFORE insert: each must exist in the SAME

package/dist/incidents.js

@@ -27,8 +27,9 @@
  */
 import { openHippoDb, closeHippoDb } from './db.js';
 import { writeEntry, assertTenantId } from './store.js';
-import { createMemory, Layer, INCIDENT_HALF_LIFE_DAYS } from './memory.js';
+import { createMemory, Layer } from './memory.js';
 import { appendAuditEvent } from './audit.js';
+import { objectHalfLifeDays } from './half-life-migration.js';
 export const VALID_INCIDENT_STATES = new Set([
     'open',
     'resolved',
@@ -77,7 +78,7 @@ const INCIDENT_COLS = `
  * inside writeEntry's SAVEPOINT 'write_entry'.
  *
  * The memory mirror: tags ['incident', ...extraTags], source 'incident',
- * confidence 'verified', half_life INCIDENT_HALF_LIFE_DAYS, content =
+ * confidence 'verified', the half-life objectHalfLifeDays picks, content =
  * "<text>\n\nContext: <context>" when context is given.
  *
  * linked_memory_ids are validated BEFORE insert: each must exist in the SAME
@@ -98,9 +99,9 @@ export function saveIncident(hippoRoot, tenantId, opts, actor = 'cli') {
         layer: Layer.Semantic,
         confidence: 'verified',
         source: 'incident',
+        baseHalfLifeDays: objectHalfLifeDays(hippoRoot),
         tenantId,
     });
-    mem.half_life_days = INCIDENT_HALF_LIFE_DAYS;
     const linkInput = opts.linkedMemoryIds ?? [];
     // Populated inside afterWrite so the linked-id validation, the INSERT, and the
     // memory write all share one SAVEPOINT.

package/dist/index.d.ts

@@ -1,7 +1,10 @@
 /**
  * Hippo public API  - re-exports for programmatic use.
  */
-export { MemoryEntry, Layer, EmotionalValence, ConfidenceLevel, DecayOptions, calculateStrength, resolveConfidence, confidenceFacets, type ConfidenceFacets, createMemory, applyOutcome, generateId, computeSchemaFit } from './memory.js';
+import { type CreateMemoryOptions, type MemoryEntry } from './memory.js';
+export { MemoryEntry, Layer, EmotionalValence, ConfidenceLevel, DecayOptions, calculateStrength, resolveConfidence, confidenceFacets, type ConfidenceFacets, applyOutcome, generateId, computeSchemaFit } from './memory.js';
+/** Published signature, so `baseHalfLifeDays` stays optional here; hippo's own writers use the strict one in memory.ts. */
+export declare function createMemory(content: string, options?: Partial<CreateMemoryOptions>): MemoryEntry;
 export { search, hybridSearch, physicsSearch, markRetrieved, estimateTokens, textOverlap, tokenize, explainMatch, detectTemporalDirection, temporalBoost, computeTemporalRange, SearchResult, MatchExplanation } from './search.js';
 export { multihopSearch } from './multihop.js';
 export { graphExpandRecall, MAX_HOPS, DEFAULT_MAX_NEIGHBORS, type GraphExpandOpts } from './graph-recall.js';

package/dist/index.js

@@ -1,7 +1,12 @@
 /**
  * Hippo public API  - re-exports for programmatic use.
  */
-export { Layer, calculateStrength, resolveConfidence, confidenceFacets, createMemory, applyOutcome, generateId, computeSchemaFit } from './memory.js';
+import { createMemory as createStoreMemory, DEFAULT_HALF_LIFE_DAYS } from './memory.js';
+export { Layer, calculateStrength, resolveConfidence, confidenceFacets, applyOutcome, generateId, computeSchemaFit } from './memory.js';
+/** Published signature, so `baseHalfLifeDays` stays optional here; hippo's own writers use the strict one in memory.ts. */
+export function createMemory(content, options = {}) {
+    return createStoreMemory(content, { ...options, baseHalfLifeDays: options.baseHalfLifeDays ?? DEFAULT_HALF_LIFE_DAYS });
+}
 export { search, hybridSearch, physicsSearch, markRetrieved, estimateTokens, textOverlap, tokenize, explainMatch, detectTemporalDirection, temporalBoost, computeTemporalRange } from './search.js';
 export { multihopSearch } from './multihop.js';
 export { graphExpandRecall, MAX_HOPS, DEFAULT_MAX_NEIGHBORS } from './graph-recall.js';

package/dist/mcp/server.js

@@ -989,9 +989,9 @@ async function executeTool(name, args, ctx) {
             // Auto-detect query from git
             let query = '';
             try {
-                const branch = execSync('git rev-parse --abbrev-ref HEAD 2>/dev/null', { encoding: 'utf-8' }).trim();
-                const diff = execSync('git diff --cached --stat 2>/dev/null', { encoding: 'utf-8' }).trim();
-                const log = execSync('git log -1 --pretty=format:"%s" 2>/dev/null', { encoding: 'utf-8' }).trim();
+                const branch = execSync('git rev-parse --abbrev-ref HEAD 2>/dev/null', { encoding: 'utf-8', windowsHide: true }).trim();
+                const diff = execSync('git diff --cached --stat 2>/dev/null', { encoding: 'utf-8', windowsHide: true }).trim();
+                const log = execSync('git log -1 --pretty=format:"%s" 2>/dev/null', { encoding: 'utf-8', windowsHide: true }).trim();
                 query = [branch, log, diff].filter(Boolean).join(' ');
             }
             catch { /* not a git repo */ }

package/dist/memory.d.ts

@@ -113,13 +113,6 @@ export interface MemoryEntry {
      */
     bm25_score?: number;
 }
-export declare const DECISION_HALF_LIFE_DAYS = 90;
-export declare const INCIDENT_HALF_LIFE_DAYS = 90;
-export declare const PROCESS_HALF_LIFE_DAYS = 90;
-export declare const POLICY_HALF_LIFE_DAYS = 90;
-export declare const SKILL_HALF_LIFE_DAYS = 90;
-export declare const PROJECT_BRIEF_HALF_LIFE_DAYS = 90;
-export declare const CUSTOMER_NOTE_HALF_LIFE_DAYS = 90;
 /** FE2: tag on a memory whose named file/symbol/script changed after it was stored. */
 export declare const CHURN_STALE_TAG = "churn-stale";
 /**
@@ -222,10 +215,7 @@ export declare function resolveConfidence(entry: MemoryEntry, now?: Date): Confi
 export declare const DEFAULT_HALF_LIFE_DAYS = 365;
 export declare const AUTO_DELETABLE_SQL = "pinned = 0 AND kind != 'raw'";
 export declare function canAutoDelete(entry: Pick<MemoryEntry, 'pinned' | 'kind'>): boolean;
-/**
- * Create a new memory entry with defaults.
- */
-export declare function createMemory(content: string, options?: {
+export interface CreateMemoryOptions {
     layer?: Layer;
     tags?: string[];
     emotional_valence?: EmotionalValence;
@@ -233,7 +223,8 @@ export declare function createMemory(content: string, options?: {
     schema_fit?: number;
     source?: string;
     confidence?: ConfidenceLevel;
-    baseHalfLifeDays?: number;
+    /** The store's `loadConfig(hippoRoot).defaultHalfLifeDays`; required so no writer falls back to the compiled default by leaving it out. */
+    baseHalfLifeDays: number;
     trace_outcome?: TraceOutcome;
     source_session_id?: string | null;
     valid_from?: string;
@@ -245,7 +236,9 @@ export declare function createMemory(content: string, options?: {
     owner?: string | null;
     artifact_ref?: string | null;
     tenantId?: string;
-}): MemoryEntry;
+}
+/** Create a new memory entry with defaults. Untyped JavaScript callers that omit the options get the compiled default half-life. */
+export declare function createMemory(content: string, options: CreateMemoryOptions): MemoryEntry;
 /**
  * Compute how well new content fits existing knowledge patterns.
  * Returns 0..1 where:

package/dist/memory.js

@@ -11,13 +11,6 @@ export var Layer;
     Layer["Semantic"] = "semantic";
     Layer["Trace"] = "trace";
 })(Layer || (Layer = {}));
-export const DECISION_HALF_LIFE_DAYS = 90;
-export const INCIDENT_HALF_LIFE_DAYS = 90;
-export const PROCESS_HALF_LIFE_DAYS = 90;
-export const POLICY_HALF_LIFE_DAYS = 90;
-export const SKILL_HALF_LIFE_DAYS = 90;
-export const PROJECT_BRIEF_HALF_LIFE_DAYS = 90;
-export const CUSTOMER_NOTE_HALF_LIFE_DAYS = 90;
 /** FE2: tag on a memory whose named file/symbol/script changed after it was stored. */
 export const CHURN_STALE_TAG = 'churn-stale';
 // Emotional multipliers from PLAN.md.
@@ -326,9 +319,6 @@ export const AUTO_DELETABLE_SQL = "pinned = 0 AND kind != 'raw'";
 export function canAutoDelete(entry) {
     return !entry.pinned && entry.kind !== 'raw';
 }
-/**
- * Create a new memory entry with defaults.
- */
 export function createMemory(content, options = {}) {
     const trimmed = content.trim();
     if (trimmed.length < 3) {

package/dist/policies.js

@@ -39,8 +39,9 @@
 import { openHippoDb, closeHippoDb } from './db.js';
 import { writeEntry, assertTenantId } from './store.js';
 import { markGraphDirty, removeGraphEntitiesForObject } from './graph.js';
-import { createMemory, Layer, POLICY_HALF_LIFE_DAYS } from './memory.js';
+import { createMemory, Layer } from './memory.js';
 import { appendAuditEvent } from './audit.js';
+import { objectHalfLifeDays } from './half-life-migration.js';
 export const VALID_POLICY_STATES = new Set([
     'active',
     'superseded',
@@ -144,9 +145,9 @@ export function savePolicy(hippoRoot, tenantId, opts, actor = 'cli') {
         layer: Layer.Semantic,
         confidence: 'verified',
         source: 'policy',
+        baseHalfLifeDays: objectHalfLifeDays(hippoRoot),
         tenantId,
     });
-    mem.half_life_days = POLICY_HALF_LIFE_DAYS;
     let savedRow;
     writeEntry(hippoRoot, mem, {
         actor,

package/dist/predictions.js

@@ -28,6 +28,7 @@ import { openHippoDb, closeHippoDb } from './db.js';
 import { writeEntry, assertTenantId } from './store.js';
 import { createMemory, Layer } from './memory.js';
 import { appendAuditEvent } from './audit.js';
+import { loadConfig } from './config.js';
 import { detectForwardClaim } from './forward-claim-detector.js';
 export const VALID_CLOSURE_STATES = new Set([
     'open',
@@ -81,6 +82,7 @@ export function savePrediction(hippoRoot, tenantId, opts, actor = 'cli') {
         source: 'prediction',
         // SAFETY: 'distilled' is a valid MemoryKind literal (see memory.ts).
         kind: 'distilled',
+        baseHalfLifeDays: loadConfig(hippoRoot).defaultHalfLifeDays,
         tenantId,
     });
     // Captured for the return value; populated inside afterWrite hook so the

package/dist/processes.js

@@ -32,8 +32,9 @@
  */
 import { openHippoDb, closeHippoDb } from './db.js';
 import { writeEntry, assertTenantId } from './store.js';
-import { createMemory, Layer, PROCESS_HALF_LIFE_DAYS } from './memory.js';
+import { createMemory, Layer } from './memory.js';
 import { appendAuditEvent } from './audit.js';
+import { objectHalfLifeDays } from './half-life-migration.js';
 export const VALID_PROCESS_STATES = new Set([
     'active',
     'superseded',
@@ -155,9 +156,9 @@ export function saveProcess(hippoRoot, tenantId, opts, actor = 'cli') {
         layer: Layer.Semantic,
         confidence: 'verified',
         source: 'process',
+        baseHalfLifeDays: objectHalfLifeDays(hippoRoot),
         tenantId,
     });
-    mem.half_life_days = PROCESS_HALF_LIFE_DAYS;
     let savedRow;
     writeEntry(hippoRoot, mem, {
         actor,

package/dist/project-briefs.js

@@ -24,8 +24,9 @@
 import { openHippoDb, closeHippoDb } from './db.js';
 import { writeEntry, assertTenantId, RECALL_DEFAULT_DENY_SCOPES } from './store.js';
 import { markGraphDirty, removeGraphEntitiesForObject } from './graph.js';
-import { createMemory, Layer, PROJECT_BRIEF_HALF_LIFE_DAYS } from './memory.js';
+import { createMemory, Layer } from './memory.js';
 import { appendAuditEvent } from './audit.js';
+import { objectHalfLifeDays } from './half-life-migration.js';
 export const VALID_BRIEF_STATES = new Set([
     'active',
     'superseded',
@@ -125,9 +126,9 @@ export function saveProjectBrief(hippoRoot, tenantId, opts, actor = 'cli') {
         layer: Layer.Semantic,
         confidence: 'verified',
         source: 'project_brief',
+        baseHalfLifeDays: objectHalfLifeDays(hippoRoot),
         tenantId,
     });
-    mem.half_life_days = PROJECT_BRIEF_HALF_LIFE_DAYS;
     let savedRow;
     writeEntry(hippoRoot, mem, {
         actor,

package/dist/secret-detect.js

@@ -39,7 +39,7 @@ const SECRET_PATTERNS = [
     // sk-... (OpenAI/Anthropic style) and sk_<vendor>_... shapes. Both require
     // a key-ish noun somewhere in the content (co-occurrence guard) so prose
     // like "the sk- prefix identifies API keys" without an actual long token
-    // does not flag, but a stored key ("2chain prod API key sk_keith_...")
+    // does not flag, but a stored key ("prod API key sk_live_...")
     // does.
     { name: 'sk-style-key', re: /\bsk-[A-Za-z0-9_-]{20,}\b/ },
     { name: 'sk-underscore-key', re: /\bsk_[A-Za-z0-9]+_[A-Za-z0-9_]{6,}\b/ },
@@ -51,7 +51,7 @@ const SECRET_PATTERNS = [
     // rollout worked well" were verified false positives that would silently
     // hide real code-lesson memories from ambient context (post-merge
     // adversarial review, 2026-07-02).
-    { name: 'secret-assignment', re: /\b(?:api[_-]?key|secret|token|password)\s*[:=]\s*['"]?(?=[A-Za-z0-9_\-+/=]*\d)[A-Za-z0-9_\-+/=]{12,}/i },
+    { name: 'secret-assignment', re: /\b(?:api[_-]?key|secret|token|password)\s*[:=]\s*['"]?(?=[A-Za-z0-9_\-+/]*\d)[A-Za-z0-9_\-+/=]{12,}/i },
 ];
 const KEYISH_CONTEXT_RE = /key|token|secret|credential|bearer|auth|password/i;
 const CO_OCCURRENCE_GUARDED = new Set(['sk-style-key', 'sk-underscore-key']);
@@ -59,7 +59,7 @@ const CO_OCCURRENCE_GUARDED = new Set(['sk-style-key', 'sk-underscore-key']);
 const STRICT_ONLY_PATTERNS = [
     /\bbearer\s+[A-Za-z0-9._~+/-]{16,}=*/gi,
     /\bauthorization["']?\s*[:=]\s*["']?basic\s+[A-Za-z0-9+/]{8,}={0,2}/gi,
-    /\beyJ[A-Za-z0-9_-]{8,}\.eyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]*/g,
+    /(?<![A-Za-z0-9_-])eyJ[A-Za-z0-9_-]{8,}\.eyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]*/g,
 ];
 /**
  * Scan a memory's tags + content for secret material.

package/dist/shared.d.ts

@@ -157,7 +157,7 @@ export declare function autoShare(localRoot: string, options?: {
 }): MemoryEntry[];
 /**
  * Copy all global memories into the local store.
- * Skips entries that already exist locally (by ID or by near-identical content).
+ * Skips entries that already exist locally, by ID or by text (promote and share copy under a new ID).
  * Returns the count of newly copied entries.
  */
 export declare function syncGlobalToLocal(localRoot: string, globalRoot: string, opts?: {

package/dist/shared.js

@@ -457,7 +457,7 @@ export function autoShare(localRoot, options = {}) {
 }
 /**
  * Copy all global memories into the local store.
- * Skips entries that already exist locally (by ID or by near-identical content).
+ * Skips entries that already exist locally, by ID or by text (promote and share copy under a new ID).
  * Returns the count of newly copied entries.
  */
 export function syncGlobalToLocal(localRoot, globalRoot, opts = {}) {
@@ -468,6 +468,8 @@ export function syncGlobalToLocal(localRoot, globalRoot, opts = {}) {
     // the local-root context provides one.
     const globalEntries = loadAllEntries(globalRoot);
     const localIndex = loadIndex(localRoot);
+    const textKey = (e) => `${e.tenantId}\n${e.content}`;
+    const localText = new Set(loadAllEntries(localRoot).map(textKey));
     // v39 (codex P1-4): syncing down must not re-import what ambient context
     // excludes - other-project rows are skipped by default and secret rows
     // are never copied. origin_project is preserved on the copy (writeEntry
@@ -484,6 +486,8 @@ export function syncGlobalToLocal(localRoot, globalRoot, opts = {}) {
         // Skip if already present by ID
         if (localIndex.entries[entry.id])
             continue;
+        if (localText.has(textKey(entry)))
+            continue;
         if (detectSecret(entry).flagged)
             continue;
         if (!opts.includeCrossProject &&
@@ -499,6 +503,7 @@ export function syncGlobalToLocal(localRoot, globalRoot, opts = {}) {
             }
             throw err;
         }
+        localText.add(textKey(entry));
         count++;
     }
     if (rejected > 0) {

package/dist/skills.js

@@ -23,8 +23,9 @@
  */
 import { openHippoDb, closeHippoDb } from './db.js';
 import { writeEntry, assertTenantId } from './store.js';
-import { createMemory, Layer, SKILL_HALF_LIFE_DAYS } from './memory.js';
+import { createMemory, Layer } from './memory.js';
 import { appendAuditEvent } from './audit.js';
+import { objectHalfLifeDays } from './half-life-migration.js';
 export const VALID_SKILL_STATES = new Set([
     'active',
     'superseded',
@@ -130,9 +131,9 @@ export function saveSkill(hippoRoot, tenantId, opts, actor = 'cli') {
         layer: Layer.Semantic,
         confidence: 'verified',
         source: 'skill',
+        baseHalfLifeDays: objectHalfLifeDays(hippoRoot),
         tenantId,
     });
-    mem.half_life_days = SKILL_HALF_LIFE_DAYS;
     let savedRow;
     writeEntry(hippoRoot, mem, {
         actor,

package/dist/store.d.ts

@@ -113,6 +113,8 @@ export declare function initStore(hippoRoot: string): void;
 export declare function openStore(hippoRoot: string): DatabaseSyncLike;
 /** `meta` key holding the default half-life base a store's memories are on (src/half-life-migration.ts). */
 export declare const HALF_LIFE_BASE_META_KEY = "default_half_life_base";
+/** `meta` key set once no memory of a decision, incident or other object sits on the old flat 90 days. */
+export declare const TYPED_HALF_LIFE_META_KEY = "typed_half_life_on_default";
 /**
  * Serialize a MemoryEntry to markdown with YAML frontmatter.
  */
@@ -650,12 +652,10 @@ export declare function loadLatestHandoff(hippoRoot: string, tenantId: string, s
 export declare function loadHandoffById(hippoRoot: string, tenantId: string, id: number): SessionHandoff | null;
 /** Stamp the outcome on a session's newest handoff, only if it has none yet. Returns rows changed. */
 export declare function stampHandoffOutcome(hippoRoot: string, tenantId: string, sessionId: string, outcome: HandoffOutcome): number;
-/**
- * Auto-write a handoff at session-end from the session's active snapshot (DF1 T3).
+/** Auto-write a handoff at session-end (DF1 T3) from the session's active snapshot, else from `derived`, its transcript state.
  * @param evidence best-effort git state; outcome comes from the newest session_complete event.
- * @returns null unless the snapshot belongs to sessionId and no newer handoff already covers it.
- */
-export declare function writeSessionEndHandoff(hippoRoot: string, tenantId: string, sessionId: string, evidence: HandoffEvidence | null): SessionHandoff | null;
+ * @returns null when neither source is the session's, a newer handoff covers the snapshot, or the session's latest handoff was not read off its transcript. */
+export declare function writeSessionEndHandoff(hippoRoot: string, tenantId: string, sessionId: string, evidence: HandoffEvidence | null, derived?: Pick<TaskSnapshot, 'task' | 'summary' | 'next_step'> | null): SessionHandoff | null;
 export declare function transitionCard(db: DatabaseSyncLike, tenantId: string, cardId: string, from: CardStatus[], to: CardStatus, extra?: {
     setSql?: string;
     whereSql?: string;

package/dist/store.js

@@ -16,6 +16,7 @@ import { isRecallBoostAblated } from './ablation.js';
 import { rarestPromptTerms, RAREST_TERM_COUNT } from './prompt-recall.js';
 import { appendAuditEvent } from './audit.js';
 import { resolveTenantId } from './tenant.js';
+import { redactSecretsStrict } from './secret-detect.js';
 import { deriveOriginProject, originFromSource, findHippoStoreDir, realpathOrResolve } from './project-identity.js';
 import { checkRejectionGuard, RejectedValueError, rejectionDigest, normalizeValueForRejection, insertRejectedValue, findRejectedValue, } from './rejection.js';
 // AT1 (plan §5): resolveConflict's kind-aware loser removal needs
@@ -140,6 +141,8 @@ export function openStore(hippoRoot) {
 }
 /** `meta` key holding the default half-life base a store's memories are on (src/half-life-migration.ts). */
 export const HALF_LIFE_BASE_META_KEY = 'default_half_life_base';
+/** `meta` key set once no memory of a decision, incident or other object sits on the old flat 90 days. */
+export const TYPED_HALF_LIFE_META_KEY = 'typed_half_life_on_default';
 /**
  * A store with no memories starts on the current default half-life base, so
  * `hippo sleep` never migrates it. A store that already holds memories and
@@ -152,6 +155,7 @@ function recordHalfLifeBaseForNewStore(db) {
     if (db.prepare(`SELECT 1 AS x FROM memories LIMIT 1`).get() !== undefined)
         return;
     setMeta(db, HALF_LIFE_BASE_META_KEY, String(DEFAULT_HALF_LIFE_DAYS));
+    setMeta(db, TYPED_HALF_LIFE_META_KEY, '1');
 }
 function ensureMirrorDirectories(hippoRoot) {
     const dirs = [
@@ -2143,7 +2147,7 @@ export function saveActiveTaskSnapshot(hippoRoot, tenantId, snapshot) {
         const result = db.prepare(`
       INSERT INTO task_snapshots(task, summary, next_step, status, source, session_id, scope, tenant_id, created_at, updated_at)
       VALUES (?, ?, ?, 'active', ?, ?, ?, ?, ?, ?)
-    `).run(snapshot.task, snapshot.summary, snapshot.next_step, snapshot.source ?? 'cli', snapshot.session_id ?? null, snapshot.scope ?? null, tenantId, now, now);
+    `).run(redactSecretsStrict(snapshot.task), redactSecretsStrict(snapshot.summary), redactSecretsStrict(snapshot.next_step), snapshot.source ?? 'cli', snapshot.session_id ?? null, snapshot.scope ?? null, tenantId, now, now);
         db.exec('COMMIT');
         const id = Number(result.lastInsertRowid ?? 0);
         // SAFETY: row's shape matches the ten columns named in the SELECT above.
@@ -2901,20 +2905,28 @@ export function stampHandoffOutcome(hippoRoot, tenantId, sessionId, outcome) {
         closeHippoDb(db);
     }
 }
-/**
- * Auto-write a handoff at session-end from the session's active snapshot (DF1 T3).
+/** Auto-write a handoff at session-end (DF1 T3) from the session's active snapshot, else from `derived`, its transcript state.
  * @param evidence best-effort git state; outcome comes from the newest session_complete event.
- * @returns null unless the snapshot belongs to sessionId and no newer handoff already covers it.
- */
-export function writeSessionEndHandoff(hippoRoot, tenantId, sessionId, evidence) {
+ * @returns null when neither source is the session's, a newer handoff covers the snapshot, or the session's latest handoff was not read off its transcript. */
+export function writeSessionEndHandoff(hippoRoot, tenantId, sessionId, evidence, derived = null) {
     assertTenantId('writeSessionEndHandoff', tenantId);
-    const snapshot = loadActiveTaskSnapshot(hippoRoot, tenantId);
-    if (!snapshot || snapshot.session_id !== sessionId)
-        return null;
+    const active = loadActiveTaskSnapshot(hippoRoot, tenantId);
     const existing = loadLatestHandoff(hippoRoot, tenantId, sessionId);
-    // Strict '>': a same-millisecond tie must not swallow the session's only write (test 6e).
-    if (existing && existing.updatedAt > snapshot.updated_at)
-        return null;
+    let snapshot;
+    let handoffEvidence = evidence;
+    if (active && active.session_id === sessionId) {
+        // Strict '>': a same-millisecond tie must not swallow the session's only write (test 6e).
+        if (existing && existing.updatedAt > active.updated_at)
+            return null;
+        snapshot = active;
+    }
+    else {
+        // Only an earlier transcript read gives way; `hippo handoff create` and unmarked older handoffs keep winning.
+        if (!derived || (existing && existing.evidence?.derivedFrom !== 'transcript'))
+            return null;
+        snapshot = { ...derived, scope: null };
+        handoffEvidence = { ...evidence, derivedFrom: 'transcript' };
+    }
     const db = openHippoDb(hippoRoot);
     let outcome = null;
     try {
@@ -2944,7 +2956,7 @@ export function writeSessionEndHandoff(hippoRoot, tenantId, sessionId, evidence)
         nextAction: snapshot.next_step,
         artifacts: carryForward ? existing.artifacts : [],
         scope: snapshot.scope,
-        evidence,
+        evidence: handoffEvidence,
         outcome,
         constraints: carryForward ? existing.constraints : undefined,
         targetRuntime: carryForward ? existing.targetRuntime : undefined,

package/dist/version.d.ts

@@ -16,7 +16,7 @@
  * an ESM `import` can resolve cleanly, and a hardcoded constant survives
  * any packager that drops .json files.
  */
-export declare const PACKAGE_VERSION = "1.52.6";
+export declare const PACKAGE_VERSION = "1.52.8";
 /** Compares plain x.y.z versions, positive if a > b; tags throw so the rollback guard never misfires silently. */
 export declare function compareSemver(a: string, b: string): number;
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -16,7 +16,7 @@
  * an ESM `import` can resolve cleanly, and a hardcoded constant survives
  * any packager that drops .json files.
  */
-export const PACKAGE_VERSION = '1.52.6';
+export const PACKAGE_VERSION = '1.52.8';
 /** Compares plain x.y.z versions, positive if a > b; tags throw so the rollback guard never misfires silently. */
 export function compareSemver(a, b) {
     const parse = (v) => {