hippo-memory 1.52.7 → 1.52.8

package/dist/dashboard.js

@@ -5,8 +5,10 @@
  * Usage: hippo dashboard [--port 3333]
  */
 import * as http from 'http';
+import * as os from 'os';
 import * as path from 'path';
 import * as fs from 'fs';
+import { extractPathTags } from './path-context.js';
 import { loadAllEntries, listCards, listMemoryConflicts, readEntry, writeEntry } from './store.js';
 import { calculateStrength, confidenceFacets } from './memory.js';
 import { loadConfig } from './config.js';
@@ -110,6 +112,8 @@ function buildDashboardData(hippoRoot) {
             defaultHalfLifeDays: config.defaultHalfLifeDays,
             defaultBudget: config.defaultBudget,
             embeddingsEnabled: config.embeddings.enabled,
+            // Every memory captured in the home folder carries these, so they name no project.
+            homePathTags: extractPathTags(os.homedir()),
         },
     };
 }

package/dist/extensions/openclaw-plugin/index.js

@@ -172,6 +172,7 @@ function runHippo(args, cwd) {
             encoding: 'utf8',
             timeout: 30_000,
             stdio: ['pipe', 'pipe', 'pipe'],
+            windowsHide: true,
         });
         // `encoding: 'utf8'` above selects the ExecFileSyncOptionsWithStringEncoding
         // overload, so `result` is always a `string` here — no runtime check needed.

package/dist/graph-recall.js

@@ -61,12 +61,9 @@ function loadByIdsChunked(root, tenantId, ids) {
     }
     return out;
 }
-/**
- * Traverse one store's graph from the seeds present in it and accumulate new graph hits
- * into `hitsByOrigin`. Mutates `seenMemoryIds` so a memory is surfaced at most once across
- * stores. Pure reads.
- */
-function produceHitsForRoot(root, baseResults, baseScoreByMemId, seenMemoryIds, hitsByOrigin, opts) {
+/** Traverse one store's graph from its seeds into `hitsByOrigin`. Pure reads; mutates `seenMemoryIds`
+ *  and `seenContent` so a memory, or a share/promote copy of it, surfaces at most once across stores. */
+function produceHitsForRoot(root, baseResults, baseScoreByMemId, seenMemoryIds, seenContent, hitsByOrigin, opts) {
     const { hops, maxNeighbors, tenantId, includeSuperseded, asOfDate, recallScope } = opts;
     // Seeds = graph entities (in THIS store) whose source memory is a base result.
     const seedEntities = loadEntitiesByMemoryId(root, tenantId, baseResults.map((r) => r.entry.id));
@@ -147,6 +144,8 @@ function produceHitsForRoot(root, baseResults, baseScoreByMemId, seenMemoryIds,
             continue; // not found / wrong tenant / already in base
         if (seenMemoryIds.has(mem.id))
             continue; // another reached entity already added it
+        if (seenContent.has(mem.content))
+            continue; // share/promote copy: same text, another id
         const via = reached.get(ent.id);
         // A node reached as the `to` endpoint of a `supersedes` edge IS the superseded
         // (older) version — the graph is the authoritative signal (the memory mirror's
@@ -175,6 +174,7 @@ function produceHitsForRoot(root, baseResults, baseScoreByMemId, seenMemoryIds,
         const origin = originMemByEntityId.get(ent.id) ?? baseResults[0].entry.id;
         const originScore = baseScoreByMemId.get(origin) ?? baseResults[baseResults.length - 1].score;
         seenMemoryIds.add(mem.id);
+        seenContent.add(mem.content);
         const hit = {
             entry: mem,
             score: originScore * (1 - HOP_DISCOUNT * via.hops),
@@ -209,11 +209,12 @@ export function graphExpandRecall(baseResults, opts) {
     const recallScope = opts.recallScope ?? {};
     const baseScoreByMemId = new Map(baseResults.map((r) => [r.entry.id, r.score]));
     const seenMemoryIds = new Set(baseResults.map((r) => r.entry.id));
+    const seenContent = new Set(baseResults.map((r) => r.entry.content));
     const hitsByOrigin = new Map();
     // Expand against each distinct store the seeds may live in (local + global).
     const roots = globalRoot && globalRoot !== hippoRoot ? [hippoRoot, globalRoot] : [hippoRoot];
     for (const root of roots) {
-        produceHitsForRoot(root, baseResults, baseScoreByMemId, seenMemoryIds, hitsByOrigin, {
+        produceHitsForRoot(root, baseResults, baseScoreByMemId, seenMemoryIds, seenContent, hitsByOrigin, {
             hops, maxNeighbors, tenantId, includeSuperseded, asOfDate, recallScope,
         });
     }

package/dist/handoff.d.ts

@@ -12,6 +12,8 @@ export interface HandoffEvidence {
     gitRef?: string | null;
     dirtyTree?: boolean | null;
     testStatus?: 'pass' | 'fail' | 'unknown' | null;
+    /** 'transcript' when hippo read the handoff off the session's transcript at session end; a later exit may replace it. */
+    derivedFrom?: 'transcript';
 }
 /** Narrows an unvalidated value (e.g. CLI input or event content) to a HandoffOutcome. */
 export declare function isHandoffOutcome(v: string | boolean | string[] | null | undefined): v is HandoffOutcome;

package/dist/hooks.d.ts

@@ -10,8 +10,8 @@
  *        sequence, writing both outputs to the log file. The parent returns in
  *        <100ms so the TUI teardown can't kill the child before it finishes.
  *      - SessionStart: `hippo last-sleep --path <path>` - prints the log
- *        written by the previous session's detached worker and then clears it,
- *        so the user actually sees what was consolidated.
+ *        written by the previous session's detached worker to stderr, which
+ *        keeps it out of the model's context, and then clears it.
  *    Earlier Claude Code forms are detected and migrated automatically:
  *      - < 0.20.2: `Stop` hook firing `hippo sleep` on every assistant turn.
  *      - < 0.21.0: bare `hippo sleep` in SessionEnd, no `--log-file`.
@@ -60,7 +60,7 @@ export interface CodexWrapperMetadata {
     installedAt: string;
 }
 export interface EnsureCodexWrapperResult {
-    status: 'installed' | 'already-installed' | 'not-found';
+    status: 'installed' | 'already-installed' | 'not-found' | 'source-checkout';
     metadataPath?: string;
     realCodexPath?: string;
     commandPath?: string;
@@ -172,7 +172,7 @@ export declare function isCodexWrapperInstalled(): boolean;
  * doing it from postinstall or routine commands is a consent violation and
  * reads as binary hijacking to security scanners (issue #133).
  */
-export declare function repairCodexWrapperIfInstalled(): EnsureCodexWrapperResult;
+export declare function repairCodexWrapperIfInstalled(hippoCliPath?: string): EnsureCodexWrapperResult;
 export declare function resolveCodexSessionTranscript(options: CodexSessionTranscriptOptions): string | null;
 export declare function resolveJsonHookPaths(target: JsonHookTarget): JsonHookPaths;
 export declare function installJsonHooks(target: JsonHookTarget): InstallResult;

package/dist/hooks.js

@@ -10,8 +10,8 @@
  *        sequence, writing both outputs to the log file. The parent returns in
  *        <100ms so the TUI teardown can't kill the child before it finishes.
  *      - SessionStart: `hippo last-sleep --path <path>` - prints the log
- *        written by the previous session's detached worker and then clears it,
- *        so the user actually sees what was consolidated.
+ *        written by the previous session's detached worker to stderr, which
+ *        keeps it out of the model's context, and then clears it.
  *    Earlier Claude Code forms are detected and migrated automatically:
  *      - < 0.20.2: `Stop` hook firing `hippo sleep` on every assistant turn.
  *      - < 0.21.0: bare `hippo sleep` in SessionEnd, no `--log-file`.
@@ -412,10 +412,16 @@ export function isCodexWrapperInstalled() {
  * doing it from postinstall or routine commands is a consent violation and
  * reads as binary hijacking to security scanners (issue #133).
  */
-export function repairCodexWrapperIfInstalled() {
+export function repairCodexWrapperIfInstalled(hippoCliPath = resolveHippoCliPath()) {
     if (readCodexWrapperMetadata() === null) {
         return { status: 'not-found' };
     }
+    // A checkout's own `npm install` or CLI would point the user's launcher at a folder that may be deleted.
+    // SHORTCUT: any node_modules copy (npx cache, a project dependency) still repairs; record the opted-in CLI path in the metadata to close that.
+    const packageDir = path.dirname(path.dirname(hippoCliPath));
+    if (path.basename(path.dirname(packageDir)).toLowerCase() !== 'node_modules') {
+        return { status: 'source-checkout' };
+    }
     return ensureCodexWrapperInstalled();
 }
 function collectFiles(dir) {

package/dist/mcp/server.js

@@ -989,9 +989,9 @@ async function executeTool(name, args, ctx) {
             // Auto-detect query from git
             let query = '';
             try {
-                const branch = execSync('git rev-parse --abbrev-ref HEAD 2>/dev/null', { encoding: 'utf-8' }).trim();
-                const diff = execSync('git diff --cached --stat 2>/dev/null', { encoding: 'utf-8' }).trim();
-                const log = execSync('git log -1 --pretty=format:"%s" 2>/dev/null', { encoding: 'utf-8' }).trim();
+                const branch = execSync('git rev-parse --abbrev-ref HEAD 2>/dev/null', { encoding: 'utf-8', windowsHide: true }).trim();
+                const diff = execSync('git diff --cached --stat 2>/dev/null', { encoding: 'utf-8', windowsHide: true }).trim();
+                const log = execSync('git log -1 --pretty=format:"%s" 2>/dev/null', { encoding: 'utf-8', windowsHide: true }).trim();
                 query = [branch, log, diff].filter(Boolean).join(' ');
             }
             catch { /* not a git repo */ }

package/dist/secret-detect.js

@@ -39,7 +39,7 @@ const SECRET_PATTERNS = [
     // sk-... (OpenAI/Anthropic style) and sk_<vendor>_... shapes. Both require
     // a key-ish noun somewhere in the content (co-occurrence guard) so prose
     // like "the sk- prefix identifies API keys" without an actual long token
-    // does not flag, but a stored key ("2chain prod API key sk_keith_...")
+    // does not flag, but a stored key ("prod API key sk_live_...")
     // does.
     { name: 'sk-style-key', re: /\bsk-[A-Za-z0-9_-]{20,}\b/ },
     { name: 'sk-underscore-key', re: /\bsk_[A-Za-z0-9]+_[A-Za-z0-9_]{6,}\b/ },
@@ -51,7 +51,7 @@ const SECRET_PATTERNS = [
     // rollout worked well" were verified false positives that would silently
     // hide real code-lesson memories from ambient context (post-merge
     // adversarial review, 2026-07-02).
-    { name: 'secret-assignment', re: /\b(?:api[_-]?key|secret|token|password)\s*[:=]\s*['"]?(?=[A-Za-z0-9_\-+/=]*\d)[A-Za-z0-9_\-+/=]{12,}/i },
+    { name: 'secret-assignment', re: /\b(?:api[_-]?key|secret|token|password)\s*[:=]\s*['"]?(?=[A-Za-z0-9_\-+/]*\d)[A-Za-z0-9_\-+/=]{12,}/i },
 ];
 const KEYISH_CONTEXT_RE = /key|token|secret|credential|bearer|auth|password/i;
 const CO_OCCURRENCE_GUARDED = new Set(['sk-style-key', 'sk-underscore-key']);
@@ -59,7 +59,7 @@ const CO_OCCURRENCE_GUARDED = new Set(['sk-style-key', 'sk-underscore-key']);
 const STRICT_ONLY_PATTERNS = [
     /\bbearer\s+[A-Za-z0-9._~+/-]{16,}=*/gi,
     /\bauthorization["']?\s*[:=]\s*["']?basic\s+[A-Za-z0-9+/]{8,}={0,2}/gi,
-    /\beyJ[A-Za-z0-9_-]{8,}\.eyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]*/g,
+    /(?<![A-Za-z0-9_-])eyJ[A-Za-z0-9_-]{8,}\.eyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]*/g,
 ];
 /**
  * Scan a memory's tags + content for secret material.

package/dist/shared.d.ts

@@ -157,7 +157,7 @@ export declare function autoShare(localRoot: string, options?: {
 }): MemoryEntry[];
 /**
  * Copy all global memories into the local store.
- * Skips entries that already exist locally (by ID or by near-identical content).
+ * Skips entries that already exist locally, by ID or by text (promote and share copy under a new ID).
  * Returns the count of newly copied entries.
  */
 export declare function syncGlobalToLocal(localRoot: string, globalRoot: string, opts?: {

package/dist/shared.js

@@ -457,7 +457,7 @@ export function autoShare(localRoot, options = {}) {
 }
 /**
  * Copy all global memories into the local store.
- * Skips entries that already exist locally (by ID or by near-identical content).
+ * Skips entries that already exist locally, by ID or by text (promote and share copy under a new ID).
  * Returns the count of newly copied entries.
  */
 export function syncGlobalToLocal(localRoot, globalRoot, opts = {}) {
@@ -468,6 +468,8 @@ export function syncGlobalToLocal(localRoot, globalRoot, opts = {}) {
     // the local-root context provides one.
     const globalEntries = loadAllEntries(globalRoot);
     const localIndex = loadIndex(localRoot);
+    const textKey = (e) => `${e.tenantId}\n${e.content}`;
+    const localText = new Set(loadAllEntries(localRoot).map(textKey));
     // v39 (codex P1-4): syncing down must not re-import what ambient context
     // excludes - other-project rows are skipped by default and secret rows
     // are never copied. origin_project is preserved on the copy (writeEntry
@@ -484,6 +486,8 @@ export function syncGlobalToLocal(localRoot, globalRoot, opts = {}) {
         // Skip if already present by ID
         if (localIndex.entries[entry.id])
             continue;
+        if (localText.has(textKey(entry)))
+            continue;
         if (detectSecret(entry).flagged)
             continue;
         if (!opts.includeCrossProject &&
@@ -499,6 +503,7 @@ export function syncGlobalToLocal(localRoot, globalRoot, opts = {}) {
             }
             throw err;
         }
+        localText.add(textKey(entry));
         count++;
     }
     if (rejected > 0) {

package/dist/store.d.ts

@@ -652,12 +652,10 @@ export declare function loadLatestHandoff(hippoRoot: string, tenantId: string, s
 export declare function loadHandoffById(hippoRoot: string, tenantId: string, id: number): SessionHandoff | null;
 /** Stamp the outcome on a session's newest handoff, only if it has none yet. Returns rows changed. */
 export declare function stampHandoffOutcome(hippoRoot: string, tenantId: string, sessionId: string, outcome: HandoffOutcome): number;
-/**
- * Auto-write a handoff at session-end from the session's active snapshot (DF1 T3).
+/** Auto-write a handoff at session-end (DF1 T3) from the session's active snapshot, else from `derived`, its transcript state.
  * @param evidence best-effort git state; outcome comes from the newest session_complete event.
- * @returns null unless the snapshot belongs to sessionId and no newer handoff already covers it.
- */
-export declare function writeSessionEndHandoff(hippoRoot: string, tenantId: string, sessionId: string, evidence: HandoffEvidence | null): SessionHandoff | null;
+ * @returns null when neither source is the session's, a newer handoff covers the snapshot, or the session's latest handoff was not read off its transcript. */
+export declare function writeSessionEndHandoff(hippoRoot: string, tenantId: string, sessionId: string, evidence: HandoffEvidence | null, derived?: Pick<TaskSnapshot, 'task' | 'summary' | 'next_step'> | null): SessionHandoff | null;
 export declare function transitionCard(db: DatabaseSyncLike, tenantId: string, cardId: string, from: CardStatus[], to: CardStatus, extra?: {
     setSql?: string;
     whereSql?: string;

package/dist/store.js

@@ -16,6 +16,7 @@ import { isRecallBoostAblated } from './ablation.js';
 import { rarestPromptTerms, RAREST_TERM_COUNT } from './prompt-recall.js';
 import { appendAuditEvent } from './audit.js';
 import { resolveTenantId } from './tenant.js';
+import { redactSecretsStrict } from './secret-detect.js';
 import { deriveOriginProject, originFromSource, findHippoStoreDir, realpathOrResolve } from './project-identity.js';
 import { checkRejectionGuard, RejectedValueError, rejectionDigest, normalizeValueForRejection, insertRejectedValue, findRejectedValue, } from './rejection.js';
 // AT1 (plan §5): resolveConflict's kind-aware loser removal needs
@@ -2146,7 +2147,7 @@ export function saveActiveTaskSnapshot(hippoRoot, tenantId, snapshot) {
         const result = db.prepare(`
       INSERT INTO task_snapshots(task, summary, next_step, status, source, session_id, scope, tenant_id, created_at, updated_at)
       VALUES (?, ?, ?, 'active', ?, ?, ?, ?, ?, ?)
-    `).run(snapshot.task, snapshot.summary, snapshot.next_step, snapshot.source ?? 'cli', snapshot.session_id ?? null, snapshot.scope ?? null, tenantId, now, now);
+    `).run(redactSecretsStrict(snapshot.task), redactSecretsStrict(snapshot.summary), redactSecretsStrict(snapshot.next_step), snapshot.source ?? 'cli', snapshot.session_id ?? null, snapshot.scope ?? null, tenantId, now, now);
         db.exec('COMMIT');
         const id = Number(result.lastInsertRowid ?? 0);
         // SAFETY: row's shape matches the ten columns named in the SELECT above.
@@ -2904,20 +2905,28 @@ export function stampHandoffOutcome(hippoRoot, tenantId, sessionId, outcome) {
         closeHippoDb(db);
     }
 }
-/**
- * Auto-write a handoff at session-end from the session's active snapshot (DF1 T3).
+/** Auto-write a handoff at session-end (DF1 T3) from the session's active snapshot, else from `derived`, its transcript state.
  * @param evidence best-effort git state; outcome comes from the newest session_complete event.
- * @returns null unless the snapshot belongs to sessionId and no newer handoff already covers it.
- */
-export function writeSessionEndHandoff(hippoRoot, tenantId, sessionId, evidence) {
+ * @returns null when neither source is the session's, a newer handoff covers the snapshot, or the session's latest handoff was not read off its transcript. */
+export function writeSessionEndHandoff(hippoRoot, tenantId, sessionId, evidence, derived = null) {
     assertTenantId('writeSessionEndHandoff', tenantId);
-    const snapshot = loadActiveTaskSnapshot(hippoRoot, tenantId);
-    if (!snapshot || snapshot.session_id !== sessionId)
-        return null;
+    const active = loadActiveTaskSnapshot(hippoRoot, tenantId);
     const existing = loadLatestHandoff(hippoRoot, tenantId, sessionId);
-    // Strict '>': a same-millisecond tie must not swallow the session's only write (test 6e).
-    if (existing && existing.updatedAt > snapshot.updated_at)
-        return null;
+    let snapshot;
+    let handoffEvidence = evidence;
+    if (active && active.session_id === sessionId) {
+        // Strict '>': a same-millisecond tie must not swallow the session's only write (test 6e).
+        if (existing && existing.updatedAt > active.updated_at)
+            return null;
+        snapshot = active;
+    }
+    else {
+        // Only an earlier transcript read gives way; `hippo handoff create` and unmarked older handoffs keep winning.
+        if (!derived || (existing && existing.evidence?.derivedFrom !== 'transcript'))
+            return null;
+        snapshot = { ...derived, scope: null };
+        handoffEvidence = { ...evidence, derivedFrom: 'transcript' };
+    }
     const db = openHippoDb(hippoRoot);
     let outcome = null;
     try {
@@ -2947,7 +2956,7 @@ export function writeSessionEndHandoff(hippoRoot, tenantId, sessionId, evidence)
         nextAction: snapshot.next_step,
         artifacts: carryForward ? existing.artifacts : [],
         scope: snapshot.scope,
-        evidence,
+        evidence: handoffEvidence,
         outcome,
         constraints: carryForward ? existing.constraints : undefined,
         targetRuntime: carryForward ? existing.targetRuntime : undefined,

package/dist/version.d.ts

@@ -16,7 +16,7 @@
  * an ESM `import` can resolve cleanly, and a hardcoded constant survives
  * any packager that drops .json files.
  */
-export declare const PACKAGE_VERSION = "1.52.7";
+export declare const PACKAGE_VERSION = "1.52.8";
 /** Compares plain x.y.z versions, positive if a > b; tags throw so the rollback guard never misfires silently. */
 export declare function compareSemver(a: string, b: string): number;
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -16,7 +16,7 @@
  * an ESM `import` can resolve cleanly, and a hardcoded constant survives
  * any packager that drops .json files.
  */
-export const PACKAGE_VERSION = '1.52.7';
+export const PACKAGE_VERSION = '1.52.8';
 /** Compares plain x.y.z versions, positive if a > b; tags throw so the rollback guard never misfires silently. */
 export function compareSemver(a, b) {
     const parse = (v) => {