hippo-memory 1.68.0 → 1.70.0

package/dist/cli/audit.js

@@ -1,15 +1,16 @@
 // `hippo audit`: list and prune the audit log.
 import { loadAllEntries } from '../store/entry-reads.js';
 import { deleteEntry, memoriesBackingObjects } from '../store/delete-and-batch.js';
-import { openHippoDb, closeHippoDb } from '../db.js';
-import { auditMemories, AUDIT_OPS } from '../audit.js';
-import * as api from '../api.js';
-import { resolveTenantId } from '../tenant.js';
-import { pruneAuditLog, parseOlderThanFlag } from '../audit-prune.js';
+import { auditMemories, AUDIT_OPS } from '../store/audit.js';
+import * as api from '../api/index.js';
+import { resolveTenantId } from '../store/tenant.js';
+import { pruneAuditLog, parseOlderThanFlag } from './audit-prune.js';
 import { printError } from './output.js';
+import { boolFlag, flagIsTrue, stringFlag } from './flag-values.js';
 import { requireInit, resolveAuthRoot } from './shared.js';
-import { repairAutomaticMemories } from '../quality-repair.js';
-import { getGlobalRoot } from '../shared.js';
+import { repairAutomaticMemories } from './quality-repair.js';
+import { getGlobalRoot } from '../sharing/shared.js';
+import { errorMessage } from '../util/log.js';
 // ---------------------------------------------------------------------------
 // Audit log subcommands (`hippo audit list`)
 // ---------------------------------------------------------------------------
@@ -19,23 +20,17 @@ function formatAuditRow(ev) {
     const meta = JSON.stringify(ev.metadata ?? {});
     return `${ev.ts}  ${ev.actor}  ${ev.op}  ${target}  ${meta}`;
 }
-function cmdAuditList(hippoRoot, flags) {
-    const root = resolveAuthRoot(hippoRoot, flags);
-    const asJson = Boolean(flags['json']);
-    const tenantId = resolveTenantId({});
-    const opFlag = typeof flags['op'] === 'string' ? flags['op'] : undefined;
+function readAuditOp(flags) {
+    const opFlag = stringFlag(flags, 'op');
     if (opFlag && !VALID_AUDIT_OPS.has(opFlag)) {
         // Built from the Set so the message cannot drift from the valid ops.
         const expected = Array.from(VALID_AUDIT_OPS).join(' | ');
         printError(`Unknown --op value: ${opFlag}. Expected one of: ${expected}.`);
         process.exit(1);
     }
-    const op = opFlag;
-    const since = typeof flags['since'] === 'string' ? flags['since'] : undefined;
-    if (since !== undefined && !Number.isFinite(new Date(since).getTime())) {
-        printError(`Invalid --since: ${since} (expected an ISO timestamp like 2026-04-22 or 2026-04-22T12:00:00Z).`);
-        process.exit(1);
-    }
+    return opFlag;
+}
+function readAuditLimit(flags) {
     const limitRaw = flags['limit'];
     let limit = 100;
     if (limitRaw !== undefined && typeof limitRaw !== 'boolean') {
@@ -50,8 +45,21 @@ function cmdAuditList(hippoRoot, flags) {
         printError(`--limit must be between 1 and 10000 (got ${limit}).`);
         process.exit(1);
     }
+    return limit;
+}
+async function cmdAuditList(hippoRoot, flags) {
+    const root = resolveAuthRoot(hippoRoot, flags);
+    const asJson = boolFlag(flags, 'json');
+    const tenantId = resolveTenantId({});
+    const op = readAuditOp(flags);
+    const since = stringFlag(flags, 'since');
+    if (since !== undefined && !Number.isFinite(new Date(since).getTime())) {
+        printError(`Invalid --since: ${since} (expected an ISO timestamp like 2026-04-22 or 2026-04-22T12:00:00Z).`);
+        process.exit(1);
+    }
+    const limit = readAuditLimit(flags);
     const ctx = { hippoRoot: root, tenantId, actor: { subject: 'cli', role: 'admin' } };
-    const events = api.auditList(ctx, { op, since, limit });
+    const events = await api.auditList(ctx, { op, since, limit });
     if (asJson) {
         console.log(JSON.stringify(events));
         return;
@@ -66,7 +74,7 @@ function cmdAuditList(hippoRoot, flags) {
     }
 }
 function cmdAuditPrune(hippoRoot, flags) {
-    const olderThanRaw = typeof flags['older-than'] === 'string' ? flags['older-than'] : '';
+    const olderThanRaw = stringFlag(flags, 'older-than') ?? '';
     if (!olderThanRaw) {
         printError('Usage: hippo audit prune --older-than <Nd> [--dry-run] [--tenant <t>]');
         process.exit(1);
@@ -76,22 +84,13 @@ function cmdAuditPrune(hippoRoot, flags) {
         olderThanDays = parseOlderThanFlag(olderThanRaw);
     }
     catch (e) {
-        printError(e.message);
+        printError(errorMessage(e));
         process.exit(1);
     }
-    const tenantId = typeof flags['tenant'] === 'string'
-        ? flags['tenant'].trim() || resolveTenantId({})
-        : resolveTenantId({});
-    const dryRun = flags['dry-run'] === true;
-    const asJson = Boolean(flags['json']);
-    const db = openHippoDb(hippoRoot);
-    let result;
-    try {
-        result = pruneAuditLog(db, { olderThanDays, tenantId, dryRun, actor: 'cli' });
-    }
-    finally {
-        closeHippoDb(db);
-    }
+    const tenantId = stringFlag(flags, 'tenant')?.trim() || resolveTenantId({});
+    const dryRun = flagIsTrue(flags, 'dry-run');
+    const asJson = boolFlag(flags, 'json');
+    const result = pruneAuditLog(hippoRoot, { olderThanDays, tenantId, dryRun, actor: 'cli' });
     if (asJson) {
         console.log(JSON.stringify(result));
         return;
@@ -102,10 +101,10 @@ function cmdAuditPrune(hippoRoot, flags) {
         console.log('(dry-run; re-run without --dry-run to actually delete)');
     }
 }
-function cmdAuditLog(hippoRoot, args, flags) {
+async function cmdAuditLog(hippoRoot, args, flags) {
     const sub = args[0];
     if (sub === 'list') {
-        cmdAuditList(hippoRoot, flags);
+        await cmdAuditList(hippoRoot, flags);
         return;
     }
     if (sub === 'prune') {
@@ -115,41 +114,59 @@ function cmdAuditLog(hippoRoot, args, flags) {
     printError(`Unknown audit subcommand: ${sub}. Expected: list | prune.`);
     process.exit(1);
 }
-export function handleAudit({ hippoRoot, args, flags }) {
+function auditRepair(hippoRoot, flags) {
+    const apply = flagIsTrue(flags, 'apply') && flags['dry-run'] !== true;
+    const result = repairAutomaticMemories(flags['global'] ? getGlobalRoot() : hippoRoot, { tenantId: resolveTenantId({}), apply });
+    if (flags['json']) {
+        console.log(JSON.stringify(result));
+        return;
+    }
+    console.log(`Quality repair ${apply ? 'apply' : 'preview'}: ${result.issues.length} issue(s) across ${result.total} memories.`);
+    for (const issue of result.issues)
+        console.log(`  [${issue.disposition}] ${issue.id}: ${issue.reason}${issue.protection ? ` (${issue.protection})` : ''}`);
+    for (const blocker of result.blockers)
+        console.log(`  Blocked: ${blocker}. Repair never upgrades a store; any other hippo command does, then run repair again.`);
+    const restore = `hippo dormant restore <id>${flags['global'] ? ' --global' : ''}`;
+    if (result.backup)
+        console.log(`Backup: ${result.backup}\nMoved ${result.appliedIds.length} memories to dormant storage. Recovery: ${restore}.`);
+    else if (apply && result.supported)
+        console.log('Nothing moved: no unprotected memory has a certain defect.');
+    for (const warning of result.warnings)
+        console.log(`Warning: ${warning}`);
+    if (!apply)
+        console.log('Preview only. Add --apply to move set-aside memories to dormant storage. Pin a review memory to keep it.');
+}
+function fixAuditErrors(hippoRoot, result, flags) {
+    const errors = result.issues.filter(i => i.severity === 'error');
+    if (errors.length > 0 && flagIsTrue(flags, 'dry-run')) {
+        console.log(`\nWould remove ${errors.length} error-severity memories (dry run, nothing deleted).`);
+        console.log(`${result.issues.length - errors.length} warnings would remain (review manually).`);
+    }
+    else if (errors.length > 0) {
+        const removedCount = errors.filter((issue) => deleteEntry(hippoRoot, issue.memoryId, { reason: `audit --fix: ${issue.reason}`, automatic: true })).length;
+        console.log(`\nRemoved ${removedCount} error-severity memories.`);
+        console.log(`${result.issues.length - errors.length} warnings remain (review manually).`);
+    }
+    else {
+        console.log(`\nNo error-severity issues. Warnings require manual review.`);
+    }
+}
+export async function handleAudit({ hippoRoot, args, flags }) {
     if (args[0] === 'repair') {
-        const apply = flags['apply'] === true && flags['dry-run'] !== true;
-        const result = repairAutomaticMemories(flags['global'] ? getGlobalRoot() : hippoRoot, { tenantId: resolveTenantId({}), apply });
-        if (flags['json']) {
-            console.log(JSON.stringify(result));
-            return;
-        }
-        console.log(`Quality repair ${apply ? 'apply' : 'preview'}: ${result.issues.length} issue(s) across ${result.total} memories.`);
-        for (const issue of result.issues)
-            console.log(`  [${issue.disposition}] ${issue.id}: ${issue.reason}${issue.protection ? ` (${issue.protection})` : ''}`);
-        for (const blocker of result.blockers)
-            console.log(`  Blocked: ${blocker}. Repair never upgrades a store; any other hippo command does, then run repair again.`);
-        const restore = `hippo dormant restore <id>${flags['global'] ? ' --global' : ''}`;
-        if (result.backup)
-            console.log(`Backup: ${result.backup}\nMoved ${result.appliedIds.length} memories to dormant storage. Recovery: ${restore}.`);
-        else if (apply && result.supported)
-            console.log('Nothing moved: no unprotected memory has a certain defect.');
-        for (const warning of result.warnings)
-            console.log(`Warning: ${warning}`);
-        if (!apply)
-            console.log('Preview only. Add --apply to move set-aside memories to dormant storage. Pin a review memory to keep it.');
+        auditRepair(hippoRoot, flags);
         return;
     }
     // `audit list` and `audit prune` -> audit-log subcommands.
     // Other forms (no sub, --fix) keep the existing memory-quality auditor
     // for backwards compatibility.
     if (args[0] === 'list' || args[0] === 'prune') {
-        cmdAuditLog(hippoRoot, args, flags);
+        await cmdAuditLog(hippoRoot, args, flags);
         return;
     }
     requireInit(hippoRoot);
     const entries = loadAllEntries(hippoRoot, resolveTenantId({}));
     const result = auditMemories(entries, memoriesBackingObjects(hippoRoot));
-    const shouldFix = Boolean(flags['fix']);
+    const shouldFix = boolFlag(flags, 'fix');
     if (result.issues.length === 0) {
         console.log(`All ${result.total} memories passed quality checks.`);
     }
@@ -161,19 +178,7 @@ export function handleAudit({ hippoRoot, args, flags }) {
             console.log(`         "${issue.content.slice(0, 80)}${issue.content.length > 80 ? '...' : ''}"`);
         }
         if (shouldFix) {
-            const errors = result.issues.filter(i => i.severity === 'error');
-            if (errors.length > 0 && flags['dry-run'] === true) {
-                console.log(`\nWould remove ${errors.length} error-severity memories (dry run, nothing deleted).`);
-                console.log(`${result.issues.length - errors.length} warnings would remain (review manually).`);
-            }
-            else if (errors.length > 0) {
-                const removedCount = errors.filter((issue) => deleteEntry(hippoRoot, issue.memoryId, { reason: `audit --fix: ${issue.reason}`, automatic: true })).length;
-                console.log(`\nRemoved ${removedCount} error-severity memories.`);
-                console.log(`${result.issues.length - errors.length} warnings remain (review manually).`);
-            }
-            else {
-                console.log(`\nNo error-severity issues. Warnings require manual review.`);
-            }
+            fixAuditErrors(hippoRoot, result, flags);
         }
         else {
             console.log(`\nRun with --fix to auto-remove error-severity issues.`);

package/dist/cli/auth.d.ts

@@ -1,2 +1,3 @@
-export declare function cmdAuth(hippoRoot: string, args: string[], flags: Record<string, string | boolean | string[]>): void;
+import { type CliFlags } from './flag-values.js';
+export declare function cmdAuth(hippoRoot: string, args: string[], flags: CliFlags): void;
 //# sourceMappingURL=auth.d.ts.map

package/dist/cli/auth.js

@@ -1,20 +1,21 @@
 // `hippo auth`: create, list, revoke and scope API keys.
-import { openHippoDb, closeHippoDb } from '../db.js';
-import { listApiKeys } from '../auth.js';
-import * as api from '../api.js';
-import { resolveTenantId } from '../tenant.js';
+import { listApiKeys } from '../store/auth.js';
+import * as api from '../api/index.js';
+import { resolveTenantId } from '../store/tenant.js';
 import { printError } from './output.js';
+import { boolFlag, stringFlag } from './flag-values.js';
 import { resolveAuthRoot } from './shared.js';
+import { errorMessage } from '../util/log.js';
 // ---------------------------------------------------------------------------
 // Auth subcommands
 // ---------------------------------------------------------------------------
 function cmdAuthCreate(hippoRoot, flags) {
     const root = resolveAuthRoot(hippoRoot, flags);
-    const tenantFlag = typeof flags['tenant'] === 'string' ? flags['tenant'] : undefined;
-    const labelFlag = typeof flags['label'] === 'string' ? flags['label'] : undefined;
-    const asJson = Boolean(flags['json']);
+    const tenantFlag = stringFlag(flags, 'tenant');
+    const labelFlag = stringFlag(flags, 'label');
+    const asJson = boolFlag(flags, 'json');
     // Accepts 'admin' | 'member' only; anything else exits 1 so a typo doesn't silently default to admin.
-    const roleFlag = typeof flags['role'] === 'string' ? flags['role'] : undefined;
+    const roleFlag = stringFlag(flags, 'role');
     let role = 'admin';
     if (roleFlag !== undefined) {
         if (roleFlag !== 'admin' && roleFlag !== 'member') {
@@ -23,6 +24,10 @@ function cmdAuthCreate(hippoRoot, flags) {
         }
         role = roleFlag;
     }
+    else {
+        // The default is the widest key hippo mints, so the operator is told at the moment of choosing. Stderr keeps --json output clean.
+        printError('hippo auth create: no --role given, so this is an admin key, and it never expires. Pass --role member for a narrower key; revoke either with `hippo auth revoke <key_id>`.');
+    }
     // The CLI's --tenant flag is the only legitimate cross-tenant override
     // (admin minting a key for another tenant from the local machine). It
     // flows through ctx.tenantId, NOT through opts — authCreate's opts no
@@ -60,16 +65,9 @@ function formatKeyRow(item) {
 }
 function cmdAuthList(hippoRoot, flags) {
     const root = resolveAuthRoot(hippoRoot, flags);
-    const includeRevoked = Boolean(flags['all']);
-    const asJson = Boolean(flags['json']);
-    const db = openHippoDb(root);
-    let items;
-    try {
-        items = listApiKeys(db, { active: !includeRevoked });
-    }
-    finally {
-        closeHippoDb(db);
-    }
+    const includeRevoked = boolFlag(flags, 'all');
+    const asJson = boolFlag(flags, 'json');
+    const items = listApiKeys(root, { active: !includeRevoked });
     if (asJson) {
         console.log(JSON.stringify(items));
         return;
@@ -100,7 +98,7 @@ function cmdAuthRevoke(hippoRoot, keyId, flags) {
         revokedAt = api.authRevoke(ctx, keyId).revokedAt;
     }
     catch (err) {
-        printError(`Error: ${err instanceof Error ? err.message : String(err)}`);
+        printError(`Error: ${errorMessage(err)}`);
         process.exit(1);
     }
     if (flags['json']) {
@@ -119,7 +117,7 @@ function cmdAuthScopeGrant(hippoRoot, keyId, scope, grant, flags) {
             api.authUngrant(ctx, keyId, scope);
     }
     catch (err) {
-        printError(`Error: ${err instanceof Error ? err.message : String(err)}`);
+        printError(`Error: ${errorMessage(err)}`);
         process.exit(1);
     }
     if (flags['json']) {

package/dist/cli/briefs.d.ts

@@ -1,4 +1,5 @@
-export declare function cmdProjectBrief(hippoRoot: string, args: string[], flags: Record<string, string | boolean | string[]>): void;
-export declare function cmdGraph(hippoRoot: string, args: string[], flags: Record<string, string | boolean | string[]>): void;
-export declare function cmdCustomerNote(hippoRoot: string, args: string[], flags: Record<string, string | boolean | string[]>): void;
+import { type CliFlags } from './flag-values.js';
+export declare function cmdProjectBrief(hippoRoot: string, args: string[], flags: CliFlags): void;
+export declare function cmdGraph(hippoRoot: string, args: string[], flags: CliFlags): void;
+export declare function cmdCustomerNote(hippoRoot: string, args: string[], flags: CliFlags): void;
 //# sourceMappingURL=briefs.d.ts.map