hippo-memory 1.61.0 → 1.63.0

package/dist/cli/curate.js

@@ -20,11 +20,7 @@ export function cmdOutcome(hippoRoot, flags) {
         printError('Specify --good or --bad');
         process.exit(1);
     }
-    // Behavior fix (v1.11.3): cmdOutcome used to bypass api.outcome and do its
-    // own readEntry/writeEntry inline, which silently skipped the audit_log
-    // emission that the MCP outcome path already has via api.outcome. T6
-    // rewires through api.outcome so every successful CLI 'outcome' call now
-    // writes one audit_log row per affected id, matching MCP parity.
+    // Through api.outcome so every CLI outcome writes one audit_log row per id, as the MCP path does.
     const ctx = {
         hippoRoot,
         tenantId: resolveTenantId({}),
@@ -54,7 +50,7 @@ function cmdForget(hippoRoot, id, flags) {
         tenantId: resolveTenantId({}),
         actor: api.adminActor('cli'),
     };
-    // A3: raw memories (Slack / GitHub connector ingestion) are append-only — a
+    // Raw memories (Slack / GitHub connector ingestion) are append-only: a
     // BEFORE-DELETE trigger aborts any delete. archiveRaw is the sanctioned
     // removal path; it records ctx.actor as the archiver for provenance.
     if (flags['archive'] === true) {
@@ -175,11 +171,8 @@ export function cmdResolve(hippoRoot, args, flags) {
         return;
     }
     const forgetLoser = Boolean(flags['forget']);
-    // AT1: --reject-loser tombstones the loser's normalized digest so it
-    // cannot be re-asserted later, in addition to removing it (kind-aware).
-    // --reason defaults to a conflict-context string when omitted (resolve
-    // already has the conflict id + keepId; unlike `hippo reject`, a reason
-    // is not strictly required here).
+    // --reject-loser tombstones the loser's digest so it cannot be re-asserted, as well as removing it.
+    // --reason is optional here, unlike `hippo reject`: resolve already has the conflict id and keepId.
     const rejectLoser = Boolean(flags['reject-loser']);
     const reasonFlag = typeof flags['reason'] === 'string' ? flags['reason'] : undefined;
     const result = resolveConflict(hippoRoot, conflictId, keepId, forgetLoser, tenantId, {
@@ -198,16 +191,14 @@ export function cmdResolve(hippoRoot, args, flags) {
     console.log(`Resolved conflict ${conflictId}: kept ${keepId}, ${action} ${result.loserId}`);
 }
 // ---------------------------------------------------------------------------
-// AT1: reject / rejections / unreject
-// docs/plans/2026-08-15-at1-rejected-value-tombstone.md §4
+// reject / rejections / unreject
 // ---------------------------------------------------------------------------
 export function cmdReject(hippoRoot, args, flags) {
     // Store resolution mirrors `hippo remember`: --global writes to the
     // global store, otherwise the local store (requireInit'd via resolveAuthRoot).
     const root = resolveAuthRoot(hippoRoot, flags);
     const tenantId = resolveTenantId({});
-    // --reason is REQUIRED (plan §4, grill issue 4): the tombstone stores no
-    // content, so reason is its only human-readable identity.
+    // --reason is REQUIRED: the tombstone stores no content, so reason is its only human-readable identity.
     const reason = typeof flags['reason'] === 'string' ? flags['reason'].trim() : '';
     if (!reason) {
         printError('hippo reject requires --reason "<why>" (the tombstone stores no content; reason is its only identity).');
@@ -221,8 +212,7 @@ export function cmdReject(hippoRoot, args, flags) {
         process.exit(1);
     }
     if (memoryId && valueFlag !== undefined) {
-        // Ambiguous ask: silently preferring one form would ignore the other
-        // without feedback (code-review round-1 low).
+        // Ambiguous ask: silently preferring one form would ignore the other without feedback.
         printError('hippo reject takes EITHER a memory id OR --value, not both.');
         process.exit(1);
     }
@@ -372,7 +362,7 @@ export function cmdDormant(hippoRoot, args, flags) {
     }
     console.log('Bring one back: hippo dormant restore <id>   Delete for good: hippo dormant forget <id>');
 }
-/** `hippo quarantine [list] [--all] [--json] [--global]`, `quarantine approve <id>`, `quarantine reject <id>` (CD5 poisoning defence). */
+/** `hippo quarantine [list] [--all] [--json] [--global]`, `quarantine approve <id>`, `quarantine reject <id>` (poisoning defence). */
 export function cmdQuarantine(hippoRoot, args, flags) {
     const root = resolveAuthRoot(hippoRoot, flags);
     const ctx = {
@@ -465,44 +455,45 @@ export async function handleForget({ hippoRoot, args, flags }) {
         return;
     cmdForget(hippoRoot, id, flags);
 }
-export function handleInvalidate({ hippoRoot, args, flags }) {
-    requireInit(hippoRoot);
-    if (flags['churn'] === true) {
-        if (args[0] || flags['id'] !== undefined) {
-            printError('Usage: hippo invalidate --churn [--dry-run]');
-            printError('--churn takes no pattern or --id.');
-            process.exit(1);
+function invalidateChurn(hippoRoot, args, flags) {
+    if (args[0] || flags['id'] !== undefined) {
+        printError('Usage: hippo invalidate --churn [--dry-run]');
+        printError('--churn takes no pattern or --id.');
+        process.exit(1);
+    }
+    if (!isGitRepo(process.cwd())) {
+        printError('hippo invalidate --churn must run inside a git repository.');
+        process.exit(1);
+    }
+    const churnDryRun = flags['dry-run'] === true;
+    let churnFailed = false;
+    for (const { root, result } of runChurnStaleForRepo(hippoRoot, churnDryRun)) {
+        if (result.error) {
+            printError(`Churn-staleness check failed for ${root}: ${result.error}`);
+            churnFailed = true;
+            continue;
         }
-        if (!isGitRepo(process.cwd())) {
-            printError('hippo invalidate --churn must run inside a git repository.');
-            process.exit(1);
+        if (result.preview.length === 0) {
+            console.log(`No churn-stale candidates in ${root}.`);
         }
-        const churnDryRun = flags['dry-run'] === true;
-        let churnFailed = false;
-        for (const { root, result } of runChurnStaleForRepo(hippoRoot, churnDryRun)) {
-            if (result.error) {
-                printError(`Churn-staleness check failed for ${root}: ${result.error}`);
-                churnFailed = true;
-                continue;
-            }
-            if (result.preview.length === 0) {
-                console.log(`No churn-stale candidates in ${root}.`);
-            }
-            else if (churnDryRun) {
-                console.log(`DRY RUN - ${result.marked} memories in ${root} WOULD be tagged churn-stale (${result.alreadyMarked} already tagged):`);
-            }
-            else {
-                console.log(`Tagged ${result.marked} memories churn-stale in ${root} (${result.alreadyMarked} already tagged):`);
-            }
-            result.preview.forEach(p => console.log(`   ${p.id}  ${p.evidence}  ${p.already ? '(already) ' : ''}${p.headline}`));
-            if (result.skippedPinned.length > 0) {
-                console.log(`Skipped ${result.skippedPinned.length} pinned: ${result.skippedPinned.join(', ')}`);
-            }
+        else if (churnDryRun) {
+            console.log(`DRY RUN - ${result.marked} memories in ${root} WOULD be tagged churn-stale (${result.alreadyMarked} already tagged):`);
+        }
+        else {
+            console.log(`Tagged ${result.marked} memories churn-stale in ${root} (${result.alreadyMarked} already tagged):`);
+        }
+        result.preview.forEach(p => console.log(`   ${p.id}  ${p.evidence}  ${p.already ? '(already) ' : ''}${p.headline}`));
+        if (result.skippedPinned.length > 0) {
+            console.log(`Skipped ${result.skippedPinned.length} pinned: ${result.skippedPinned.join(', ')}`);
         }
-        if (churnFailed)
-            process.exit(1);
-        return;
     }
+    if (churnFailed)
+        process.exit(1);
+}
+export function handleInvalidate({ hippoRoot, args, flags }) {
+    requireInit(hippoRoot);
+    if (flags['churn'] === true)
+        return invalidateChurn(hippoRoot, args, flags);
     const target = args[0];
     if (flags['id'] === true) {
         // Value-less --id must never silently fall through to pattern mode
@@ -511,12 +502,6 @@ export function handleInvalidate({ hippoRoot, args, flags }) {
         process.exit(1);
     }
     const onlyId = typeof flags['id'] === 'string' ? flags['id'] : undefined;
-    if (typeof flags['dry-run'] === 'string') {
-        // Dead: the earlier global BOOLEAN_FLAGS guard now exits first on any --dry-run=<v>.
-        // Kept as defence in depth on a destructive command.
-        printError('--dry-run takes no value');
-        process.exit(1);
-    }
     const dryRun = flags['dry-run'] === true;
     if ((target && onlyId) || (!target && !onlyId)) {
         printError('Usage: hippo invalidate "<old pattern>" [--dry-run] [--reason "<why>"]');

package/dist/cli/dag.js

@@ -26,9 +26,7 @@ export function cmdDag(hippoRoot, flags) {
         console.log(`  Unlinked facts: ${unlinked}`);
         return;
     }
-    // Tree view: v0.30 / E5 renders L3 entity profiles as roots (with L2
-    // children indented), then orphan L2 summaries (no L3 parent) at top
-    // level. Pre-E5 behavior was L2-only roots; rendering now covers L3.
+    // Tree view: L3 entity profiles as roots with L2 children indented, then orphan L2 summaries at top level.
     const profiles = entries.filter((e) => e.dag_level === 3);
     const l2List = entries.filter((e) => e.dag_level === 2);
     const orphanL2 = l2List.filter((e) => !e.dag_parent_id);
@@ -62,7 +60,7 @@ export function cmdDag(hippoRoot, flags) {
             }
         }
     }
-    // Orphan L2 summaries (no L3 parent) at top level — pre-E5 default shape.
+    // Orphan L2 summaries (no L3 parent) at top level.
     for (const summary of orphanL2) {
         const summaryTags = summary.tags.filter((t) => t !== 'dag-summary').join(', ');
         console.log(`\n📌 ${summary.content.slice(0, 80)}`);
@@ -113,8 +111,7 @@ function cmdDrillDown(hippoRoot, summaryId, flags) {
     const limit = typeof flags['limit'] === 'string' ? Number(flags['limit']) : undefined;
     // Absent stays undefined so the api default applies; the 0 fallback is unreachable.
     const budget = flags['budget'] === undefined ? undefined : parseBudgetFlag(flags['budget'], 0);
-    // v0.30 / E5: --depth N walks N levels down (default 1, hard cap 10).
-    // L4 fold: reject out-of-range explicitly (no silent clamp).
+    // --depth N walks N levels down (default 1, hard cap 10); out-of-range is rejected, never silently clamped.
     const rawDepth = typeof flags['depth'] === 'string' ? Number(flags['depth']) : undefined;
     let depth;
     if (rawDepth !== undefined) {
@@ -136,9 +133,8 @@ function cmdDrillDown(hippoRoot, summaryId, flags) {
         cost: drillCost,
     });
     if ('failure' in r) {
-        // v1.6.4: only `not_drillable` is caller-actionable. `not_found`
-        // intentionally collapses cross-tenant + scope-blocked + missing
-        // (codex round 3 P1: distinguishing scope_blocked leaked existence).
+        // Only `not_drillable` is caller-actionable. `not_found` collapses cross-tenant, scope-blocked
+        // and missing on purpose: telling scope_blocked apart would leak that the row exists.
         if (r.failure === 'not_drillable') {
             printError(`Id ${summaryId} is a leaf row, not a level-2+ summary; nothing to drill into.`);
         }