hippo-memory 1.63.2 → 1.64.1

package/dist/store/summaries.js

@@ -1,4 +1,4 @@
-import { closeHippoDb } from '../db.js';
+import { closeHippoDb, withWriteScope } from '../db.js';
 import { assertTenantId } from '../tenant.js';
 import { findRejectedValue, rejectionDigest } from '../rejection.js';
 import { log } from '../log.js';
@@ -173,7 +173,7 @@ export function loadChildrenOfSummary(hippoRoot, summaryId, tenantId) {
 }
 /**
  * Apply a rebuild result to a dirty summary. Atomic: one
- * prepared UPDATE statement plus syncFtsRow inside one SAVEPOINT.
+ * prepared UPDATE statement plus syncFtsRow inside one write scope.
  * WHERE includes `AND summary_dirty = 1` so concurrent sleep's race-loser
  * becomes a no-op (no rebuild_count bump, no audit row).
  *
@@ -187,22 +187,7 @@ export function applyRebuildResult(hippoRoot, summary, patch) {
     assertTenantId('applyRebuildResult', summary.tenantId);
     const db = openStore(hippoRoot);
     try {
-        db.exec('SAVEPOINT rebuild_summary');
-        try {
-            const outcome = applyRebuildInSavepoint(db, summary, patch);
-            db.exec('RELEASE SAVEPOINT rebuild_summary');
-            return outcome;
-        }
-        catch (e) {
-            try {
-                db.exec('ROLLBACK TO SAVEPOINT rebuild_summary');
-                db.exec('RELEASE SAVEPOINT rebuild_summary');
-            }
-            catch {
-                // Ignore rollback failures — throw below is what matters.
-            }
-            throw e;
-        }
+        return withWriteScope(db, 'rebuild_summary', () => applyRebuildInSavepoint(db, summary, patch));
     }
     finally {
         closeHippoDb(db);

package/dist/store/tenant-lookup.d.ts

@@ -1,12 +1,16 @@
 import type { DatabaseSyncLike } from '../db.js';
-/** The api_keys fields a tenant, revocation or rank check reads. */
+/** The api_keys fields a tenant, revocation, rank or self-service ownership check reads. */
 export interface ApiKeyOwner {
     tenantId: string;
     revokedAt: string | null;
     role: string;
+    ownerSubject: string | null;
 }
 /** The owner row of `keyId`, or undefined when no such key exists. */
 export declare function selectApiKeyOwner(db: DatabaseSyncLike, keyId: string): ApiKeyOwner | undefined;
-/** The tenant that owns memory `id`, or undefined when no such memory exists. */
-export declare function selectMemoryTenant(db: DatabaseSyncLike, id: string): string | undefined;
+/** Who may reach memory `id`: its tenant and scope, or undefined when no such memory exists. */
+export declare function selectMemoryReach(db: DatabaseSyncLike, id: string): {
+    tenantId: string;
+    scope: string | null;
+} | undefined;
 //# sourceMappingURL=tenant-lookup.d.ts.map

package/dist/store/tenant-lookup.js

@@ -1,16 +1,16 @@
-// Owner lookups by id: the tenant checks in src/api and the CLI's key-tenant lookup share these queries.
+// Owner lookups by id: the tenant and scope checks in src/api and the CLI's key-tenant lookup share these queries.
 /** The owner row of `keyId`, or undefined when no such key exists. */
 export function selectApiKeyOwner(db, keyId) {
-    // SAFETY: row's shape matches the three columns named in the SELECT.
+    // SAFETY: row's shape matches the four columns named in the SELECT.
     const row = db
-        .prepare(`SELECT tenant_id, revoked_at, role FROM api_keys WHERE key_id = ?`)
+        .prepare(`SELECT tenant_id, revoked_at, role, owner_subject FROM api_keys WHERE key_id = ?`)
         .get(keyId);
-    return row && { tenantId: row.tenant_id, revokedAt: row.revoked_at, role: row.role };
+    return row && { tenantId: row.tenant_id, revokedAt: row.revoked_at, role: row.role, ownerSubject: row.owner_subject };
 }
-/** The tenant that owns memory `id`, or undefined when no such memory exists. */
-export function selectMemoryTenant(db, id) {
-    // SAFETY: row's shape matches the single tenant_id column named in the SELECT.
-    const row = db.prepare(`SELECT tenant_id FROM memories WHERE id = ?`).get(id);
-    return row?.tenant_id;
+/** Who may reach memory `id`: its tenant and scope, or undefined when no such memory exists. */
+export function selectMemoryReach(db, id) {
+    // SAFETY: row's shape matches the tenant_id and scope columns named in the SELECT.
+    const row = db.prepare(`SELECT tenant_id, scope FROM memories WHERE id = ?`).get(id);
+    return row && { tenantId: row.tenant_id, scope: row.scope };
 }
 //# sourceMappingURL=tenant-lookup.js.map

package/dist/store-port.d.ts

@@ -0,0 +1,13 @@
+import { type ApiKeyRecord } from './auth.js';
+/** What `serve()` reads and writes through. Each method is atomic and no transaction spans an await, since SQLite's lock wait blocks the event loop; a lock timeout throws `StoreBusyError`. */
+export interface HippoStore {
+    /** 'sqlite' is hippo.db under the served root. Under any other kind, an unported route answers 501 and a hippo.db open inside a request throws. */
+    readonly kind: string;
+    /** The api_keys row for `keyId` with its scope grants, revoked or not; null when no row matches. */
+    findApiKey(keyId: string): Promise<ApiKeyRecord | null>;
+    /** Releases the store's connections; `serve()` closes only a store it made itself. */
+    close(): Promise<void>;
+}
+/** The built-in store: today's synchronous hippo.db functions behind the port, one handle per call, so close has nothing to release. */
+export declare function sqliteStore(hippoRoot: string): HippoStore;
+//# sourceMappingURL=store-port.d.ts.map

package/dist/store-port.js

@@ -0,0 +1,20 @@
+// The async seam the server reaches its store through, so an add-on can serve from a database other than hippo.db.
+import { readApiKeyRecord } from './auth.js';
+import { closeHippoDb, openHippoDb } from './db.js';
+/** The built-in store: today's synchronous hippo.db functions behind the port, one handle per call, so close has nothing to release. */
+export function sqliteStore(hippoRoot) {
+    return {
+        kind: 'sqlite',
+        async findApiKey(keyId) {
+            const db = openHippoDb(hippoRoot);
+            try {
+                return readApiKeyRecord(db, keyId);
+            }
+            finally {
+                closeHippoDb(db);
+            }
+        },
+        async close() { },
+    };
+}
+//# sourceMappingURL=store-port.js.map

package/dist/version.d.ts

@@ -16,7 +16,11 @@
  * an ESM `import` can resolve cleanly, and a hardcoded constant survives
  * any packager that drops .json files.
  */
-export declare const PACKAGE_VERSION = "1.63.2";
+export declare const PACKAGE_VERSION = "1.64.1";
+/** The floor a store takes on its first expiring key: the first release with schema v53, set by hand in that release; scripts/check-expiring-keys-floor.mjs gates it. */
+export declare const EXPIRING_KEYS_MIN_BINARY = "1.64.0";
+/** The floor a store takes on its first session bind or owner snapshot: first release with v54; set by hand in that release. */
+export declare const TASK_OWNER_MIN_BINARY = "1.64.0";
 /** Compares plain x.y.z versions, positive if a > b; tags throw so the rollback guard never misfires silently. */
 export declare function compareSemver(a: string, b: string): number;
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -16,7 +16,11 @@
  * an ESM `import` can resolve cleanly, and a hardcoded constant survives
  * any packager that drops .json files.
  */
-export const PACKAGE_VERSION = '1.63.2';
+export const PACKAGE_VERSION = '1.64.1';
+/** The floor a store takes on its first expiring key: the first release with schema v53, set by hand in that release; scripts/check-expiring-keys-floor.mjs gates it. */
+export const EXPIRING_KEYS_MIN_BINARY = '1.64.0';
+/** The floor a store takes on its first session bind or owner snapshot: first release with v54; set by hand in that release. */
+export const TASK_OWNER_MIN_BINARY = '1.64.0';
 /** Compares plain x.y.z versions, positive if a > b; tags throw so the rollback guard never misfires silently. */
 export function compareSemver(a, b) {
     const parse = (v) => {

package/dist/working-memory.js

@@ -42,7 +42,7 @@ export function wmPush(hippoRoot, opts) {
     try {
         const now = new Date().toISOString();
         const importance = opts.importance ?? 0;
-        db.exec('BEGIN');
+        db.exec('BEGIN IMMEDIATE');
         try {
             const result = db.prepare(`
         INSERT INTO working_memory(scope, session_id, task_id, importance, content, metadata_json, created_at, updated_at)

package/dist/write-budget.d.ts

@@ -0,0 +1,15 @@
+/** A chunk closes at the first unit boundary after this long: a server request gives up after a 250 ms wait. */
+export declare const TARGET_HOLD_MS = 100;
+/** SQLite's longest busy-handler sleep under a hook's 1 s wait, so a waiting hook always wakes inside the gap. */
+export declare const GAP_MS = 100;
+export declare function clock(): number;
+/** Waits until GAP_MS have passed since the last commit; always yields once, so timers and requests run between chunks. */
+export declare function pauseForWaiters(lastCommitAt: number): Promise<void>;
+/** The hold, clock and pause a chunked write runs on; a test passes its own to force chunk boundaries without real waits. */
+export interface WriteBudget {
+    readonly holdMs: number;
+    readonly clock: () => number;
+    readonly pause: (lastCommitAt: number) => Promise<void>;
+}
+export declare const WRITE_BUDGET: WriteBudget;
+//# sourceMappingURL=write-budget.d.ts.map

package/dist/write-budget.js

@@ -0,0 +1,15 @@
+// How long a long-running write may hold the store's write lock per transaction, and how long it lets other writers in after.
+import { setTimeout as delay } from 'node:timers/promises';
+/** A chunk closes at the first unit boundary after this long: a server request gives up after a 250 ms wait. */
+export const TARGET_HOLD_MS = 100;
+/** SQLite's longest busy-handler sleep under a hook's 1 s wait, so a waiting hook always wakes inside the gap. */
+export const GAP_MS = 100;
+export function clock() {
+    return performance.now();
+}
+/** Waits until GAP_MS have passed since the last commit; always yields once, so timers and requests run between chunks. */
+export async function pauseForWaiters(lastCommitAt) {
+    await delay(Math.max(0, GAP_MS - (clock() - lastCommitAt)));
+}
+export const WRITE_BUDGET = { holdMs: TARGET_HOLD_MS, clock, pause: pauseForWaiters };
+//# sourceMappingURL=write-budget.js.map

package/extensions/openclaw-plugin/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "hippo-memory",
   "name": "Hippo Memory",
   "description": "Make your agent's memory work like a brain. Hippo is long-term memory for coding agents.",
-  "version": "1.63.2",
+  "version": "1.64.1",
 
   "configSchema": {
     "type": "object",

package/extensions/openclaw-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hippo-memory",
-  "version": "1.63.2",
+  "version": "1.64.1",
   "type": "module",
   "description": "Make your agent's memory work like a brain. Hippo is long-term memory for coding agents.",
   "main": "index.ts",

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "hippo-memory",
   "name": "Hippo Memory",
   "description": "Make your agent's memory work like a brain. Hippo is long-term memory for coding agents.",
-  "version": "1.63.2",
+  "version": "1.64.1",
   "configSchema": {
     "type": "object",
     "additionalProperties": false,

package/package.json

@@ -1,13 +1,16 @@
 {
   "name": "hippo-memory",
-  "version": "1.63.2",
+  "version": "1.64.1",
   "description": "Make your agent's memory work like a brain. Hippo is long-term memory for coding agents.",
   "mcpName": "io.github.kitfunso/hippo-memory",
   "type": "module",
   "main": "./dist/index.js",
   "exports": {
     ".": "./dist/index.js",
-    "./server": "./dist/server.js"
+    "./server": "./dist/server.js",
+    "./project-identity": "./dist/entry/project-identity.js",
+    "./json-hooks": "./dist/entry/json-hooks.js",
+    "./session-text": "./dist/entry/session-text.js"
   },
   "openclaw": {
     "extensions": [
@@ -37,6 +40,7 @@
     "test:watch": "vitest",
     "test:coverage": "vitest run --coverage",
     "test:delivery-ledger": "vitest run tests/delivery-ledger",
+    "test:eval": "vitest run --config vitest.eval.config.ts",
     "lint": "oxlint",
     "sbom": "node scripts/sbom.mjs",
     "audit:security": "npm audit --audit-level=high && npm --prefix ui audit --audit-level=high",
@@ -45,8 +49,8 @@
     "smoke:openclaw-install": "node scripts/smoke-openclaw-install.mjs",
     "build:ui": "cd ui && npm install && npm run build",
     "build:all": "npm run build && npm run build:ui",
-    "version": "node scripts/sync-version.mjs && node scripts/check-manifest-versions.mjs",
-    "prepublishOnly": "node scripts/check-manifest-versions.mjs && node scripts/changelog-fragments.mjs check && node scripts/check-em-dashes-in-release-notes.mjs && node scripts/check-graph-writes.mjs && npm run build:all && node scripts/check-openclaw-dist.mjs && npm run smoke:openclaw-install && node scripts/check-tests-pass.mjs"
+    "version": "node scripts/sync-version.mjs && node scripts/check-manifest-versions.mjs && node scripts/check-expiring-keys-floor.mjs",
+    "prepublishOnly": "node scripts/check-manifest-versions.mjs && node scripts/check-expiring-keys-floor.mjs && node scripts/changelog-fragments.mjs check && node scripts/check-em-dashes-in-release-notes.mjs && node scripts/check-graph-writes.mjs && npm run build:all && node scripts/check-openclaw-dist.mjs && npm run smoke:openclaw-install && node scripts/check-tests-pass.mjs"
   },
   "keywords": [
     "memory",