hippo-memory 1.68.0 → 1.70.0

package/dist/importers/vault.js

@@ -1,18 +1,20 @@
 import * as fs from 'fs';
 import * as path from 'path';
 import { createHash } from 'node:crypto';
-import { createMemory } from '../memory.js';
-import { initStore } from '../store/open.js';
-import { remember, archiveRaw, isPrivateScope } from '../api.js';
-import { assertClientScope } from '../recall-scope.js';
-import { openHippoDb, closeHippoDb } from '../db.js';
-import { RejectedValueError, checkRejectionGuard } from '../rejection.js';
-import { loadConfig } from '../config.js';
-import { vetSecrets } from '../secret-detect.js';
-import { log } from '../log.js';
-import { parseFrontmatter, frontmatterList, parseWikilinks, collectMarkdownFiles, realpathOrResolve } from './markdown-parse.js';
-import { isJsonString } from '../json.js';
-import { escapeLike } from '../escape.js';
+import { createMemory } from '../core/memory.js';
+import { loadVaultRawRows } from '../store/entry-reads.js';
+import { remember, archiveRaw, isPrivateScope } from '../api/index.js';
+import { assertClientScope } from '../store/recall-scope.js';
+import { RejectedValueError } from '../store/rejection.js';
+import { rejectionGuardRefuses } from '../store/rejected-values.js';
+import { withRequestStoresSync } from '../db/request-stores.js';
+import { loadConfig } from '../core/config.js';
+import { vetSecrets } from '../util/secret-detect.js';
+import { errorMessage, log } from '../util/log.js';
+import { splitMarkdownFrontmatter, frontmatterList, parseWikilinks, collectMarkdownFiles } from './markdown-parse.js';
+import { realpathOrResolve } from '../util/real-path.js';
+import { isJsonString } from '../util/json.js';
+import { escapeLike } from '../util/escape.js';
 /**
  * Import a markdown vault FOLDER as `kind='raw'` memories.
  *
@@ -23,10 +25,7 @@ import { escapeLike } from '../escape.js';
  */
 export function importVault(folderPath, options) {
     const hippoRoot = options.hippoRoot;
-    const tenantId = options.tenantId ?? 'default';
-    const { vaultName, scope } = vaultIdentityOrThrow(options);
-    const extraTags = options.extraTags ?? [];
-    const dryRun = options.dryRun ?? false;
+    const identity = vaultIdentityOrThrow(options);
     if (options.global) {
         // The raw-archive path is tenant-local; global mode would put raw vault rows
         // in the wrong store. Reject for SDK callers too (the CLI also rejects
@@ -48,6 +47,13 @@ export function importVault(folderPath, options) {
     if (resolvedFolder === resolvedStore || resolvedFolder.startsWith(resolvedStore + path.sep)) {
         return { total: 0, imported: 0, skipped: 0, rejected: 0, archived: 0, entries: [] };
     }
+    return syncVaultFolder(folderPath, options, identity);
+}
+function syncVaultFolder(folderPath, options, { vaultName, scope }) {
+    const hippoRoot = options.hippoRoot;
+    const tenantId = options.tenantId ?? 'default';
+    const extraTags = options.extraTags ?? [];
+    const dryRun = options.dryRun ?? false;
     const ctx = {
         hippoRoot,
         tenantId,
@@ -60,22 +66,18 @@ export function importVault(folderPath, options) {
     const tally = { total: 0, imported: 0, skipped: 0, rejected: 0, archived: 0, redacted: 0, entries: [] };
     const baseHalfLifeDays = loadConfig(hippoRoot).defaultHalfLifeDays;
     const seen = new Set();
-    // AT1 P2 fix: dry-run never called remember(), so it never probed
-    // tombstones — every note that reached the write step counted as
-    // `imported` even when a real run would refuse it. Probe (read-only) via
-    // the same guard remember()/writeEntry uses, without ever writing.
-    const dryRunDb = dryRun ? openHippoDb(hippoRoot) : null;
-    try {
-        const run = {
-            ctx, folderPath, vaultName, scope, extraTags, dryRun, dryRunDb, existing, seen, baseHalfLifeDays, tally,
-        };
+    const run = {
+        ctx, folderPath, vaultName, scope, extraTags, dryRun, existing, seen, baseHalfLifeDays, tally,
+    };
+    const importNotes = () => {
         for (const relpath of relpaths)
             importVaultNote(run, relpath);
-    }
-    finally {
-        if (dryRunDb)
-            closeHippoDb(dryRunDb);
-    }
+    };
+    // A dry run probes the rejection guard once per changed note; one scope lets every probe share a handle.
+    if (dryRun)
+        withRequestStoresSync(importNotes);
+    else
+        importNotes();
     // Deletion-sync: any artifactRef present in the Map but NOT seen this run is a
     // note that vanished from the source folder → archive its raw row. Per-file
     // archiveRaw (own handle); no outer SAVEPOINT (no cross-file idempotency row
@@ -126,45 +128,28 @@ function vaultIdentityOrThrow(options) {
     return { vaultName, scope };
 }
 function loadVaultRows(hippoRoot, tenantId, vaultName) {
-    // Load ONCE: every existing raw row for this vault, tenant-scoped. The same
-    // Map serves both per-file idempotency AND the deletion diff (no second
-    // query). LIKE-escape the vault name so a `%`/`_` in it can't over-match.
-    initStore(hippoRoot);
-    // artifactRef -> ALL its live raw rows. >1 only after a concurrent double-insert
-    // (the importer is not re-entrant; see the JSDoc). The buckets matter: a later
-    // changed/deletion pass must archive EVERY matching row, not just the last one
-    // scanned, or older raw vault content lingers live + searchable (codex P2).
+    // One load serves both per-file idempotency and the deletion diff; the vault name is
+    // LIKE-escaped so a `%` or `_` in it cannot over-match.
+    const rows = loadVaultRawRows(hippoRoot, `vault:${escapeLike(vaultName)}:%`, tenantId);
+    // Every live row per artifactRef (more than one only after a concurrent double-insert), because a
+    // later changed or deletion pass must archive them all or older raw vault content stays searchable.
     const existing = new Map();
-    const db = openHippoDb(hippoRoot);
-    try {
-        const likeParam = `vault:${escapeLike(vaultName)}:%`;
-        // SAFETY: query selects exactly the columns of VaultRow, in the same
-        // names, from the memories table this module owns.
-        const rows = db
-            .prepare(`SELECT id, artifact_ref, tags_json, scope FROM memories
-           WHERE artifact_ref LIKE ? ESCAPE '\\' AND tenant_id = ? AND kind = 'raw'`)
-            .all(likeParam, tenantId);
-        // SQLite LIKE is case-insensitive for ASCII, so the query over-fetches
-        // (vault 'A' also matches 'vault:a:%'). Filter to the EXACT-case prefix in
-        // JS so deletion-sync never archives a different-cased vault's rows (codex P2).
-        const exactPrefix = `vault:${vaultName}:`;
-        for (const row of rows) {
-            if (row.artifact_ref && row.artifact_ref.startsWith(exactPrefix)) {
-                const bucket = existing.get(row.artifact_ref);
-                if (bucket)
-                    bucket.push(row);
-                else
-                    existing.set(row.artifact_ref, [row]);
-            }
+    // LIKE folds ASCII case (vault 'A' also matches 'vault:a:%'), so the exact-case prefix is checked
+    // here; without it deletion-sync would archive a different-cased vault's rows.
+    const exactPrefix = `vault:${vaultName}:`;
+    for (const row of rows) {
+        if (row.artifact_ref && row.artifact_ref.startsWith(exactPrefix)) {
+            const bucket = existing.get(row.artifact_ref);
+            if (bucket)
+                bucket.push(row);
+            else
+                existing.set(row.artifact_ref, [row]);
         }
     }
-    finally {
-        closeHippoDb(db);
-    }
     return existing;
 }
 function importVaultNote(run, relpath) {
-    const { ctx, tally } = run;
+    const { tally } = run;
     tally.total++;
     const artifactRef = `vault:${run.vaultName}:${relpath}`;
     run.seen.add(artifactRef);
@@ -180,7 +165,7 @@ function importVaultNote(run, relpath) {
     // insert). The idempotency decision happens below, AFTER the full tag set is
     // built, so it can compare the complete envelope rather than a subset.
     const priors = run.existing.get(artifactRef) ?? [];
-    const { fm, body } = parseFrontmatter(rawFileContent);
+    const { fm, body } = splitMarkdownFrontmatter(rawFileContent);
     // Empty / frontmatter-only note: nothing storable (createMemory enforces a
     // min content length). The note's CONTENT was deleted at source, so this is a
     // content-deletion: archive any prior row(s) - the old body must not stay live
@@ -200,6 +185,10 @@ function importVaultNote(run, relpath) {
         tally.skipped++;
         return;
     }
+    writeChangedNote(run, artifactRef, priors, body, tags);
+}
+function writeChangedNote(run, artifactRef, priors, body, tags) {
+    const { ctx, tally } = run;
     // Changed file → archive EVERY old raw row for this ref (normally one; >1
     // only after a concurrent double-insert), then append the new one. NEVER
     // supersede (would yield kind='distilled'). archiveRaw commits + closes its
@@ -232,10 +221,9 @@ function readVaultNote(run, relpath) {
     try {
         return fs.readFileSync(path.join(run.folderPath, relpath), 'utf8');
     }
-    catch {
-        // File vanished between enumeration and read (TOCTOU), or a transient
-        // IO/permission error. Skip this one file rather than aborting the whole
-        // import (incl. the deletion-sync pass); an idempotent re-run picks it up.
+    catch (err) {
+        // One unreadable note (gone since the listing, or a transient IO error) must not abort the import; a re-run picks it up.
+        log.debug(`vault note skipped: ${relpath}: ${errorMessage(err)}`);
         run.tally.skipped++;
         return null;
     }
@@ -286,30 +274,21 @@ function vaultEnvelopeUnchanged(priors, tags, scope) {
 }
 /** Returns false when the rejection guard refuses the note; any other error propagates. */
 function storeVaultNote(run, echo, content, tags, artifactRef) {
+    // A dry run writes nothing; it asks the guard remember() uses, so its `rejected` count matches what a real run would refuse.
+    if (run.dryRun)
+        return !rejectionGuardRefuses(run.ctx.hippoRoot, run.ctx.tenantId, echo.id, echo.content);
     try {
-        // dryRun preview: count what WOULD import, but make no writes (codex P2).
-        if (!run.dryRun) {
-            // AT1 (plan §3 containment): a rejected note must not abort the rest
-            // of the vault scan (deletion-sync pass included). The priors above
-            // are already archived by this point — same self-heal story as any
-            // other crash between archiveRaw and remember() (comment above): a
-            // re-run with the file still rejected hits the same refusal again,
-            // loud each time via the rejected count.
-            const result = remember(run.ctx, {
-                content,
-                kind: 'raw',
-                artifactRef,
-                owner: 'agent:vault-import',
-                scope: run.scope ?? undefined,
-                tags,
-            });
-            echo.id = result.id;
-        }
-        else if (run.dryRunDb) {
-            // AT1 P2 fix: probe the tombstone without writing so the preview's
-            // `rejected` count matches what a real run would refuse.
-            checkRejectionGuard(run.dryRunDb, run.ctx.tenantId, echo.id, echo.content);
-        }
+        // A rejected note must not stop the scan or the deletion sync. Its priors are archived by now, so a rerun meets
+        // the same refusal and counts it again.
+        const result = remember(run.ctx, {
+            content,
+            kind: 'raw',
+            artifactRef,
+            owner: 'agent:vault-import',
+            scope: run.scope ?? undefined,
+            tags,
+        });
+        echo.id = result.id;
         return true;
     }
     catch (err) {
@@ -329,7 +308,7 @@ function parseJsonArrayLoose(value) {
         return Array.isArray(parsed) ? parsed.filter(isJsonString) : [];
     }
     catch (err) {
-        log.debug(`import: unreadable tags_json read as no tags: ${err instanceof Error ? err.message : String(err)}`);
+        log.debug(`import: unreadable tags_json read as no tags: ${errorMessage(err)}`);
         return [];
     }
 }

package/dist/index.d.ts

@@ -1,8 +1,8 @@
 /**
  * Hippo public API  - re-exports for programmatic use.
  */
-import { type CreateMemoryOptions, type MemoryEntry } from './memory.js';
-export { MemoryEntry, Layer, EmotionalValence, ConfidenceLevel, DecayOptions, calculateStrength, resolveConfidence, confidenceFacets, type ConfidenceFacets, applyOutcome, generateId, computeSchemaFit } from './memory.js';
+import { type CreateMemoryOptions, type MemoryEntry } from './core/memory.js';
+export { MemoryEntry, Layer, EmotionalValence, ConfidenceLevel, DecayOptions, calculateStrength, resolveConfidence, confidenceFacets, type ConfidenceFacets, applyOutcome, generateId, computeSchemaFit } from './core/memory.js';
 /** Published signature, so `baseHalfLifeDays` stays optional here; hippo's own writers use the strict one in memory.ts. */
 export declare function createMemory(content: string, options?: Partial<CreateMemoryOptions>): MemoryEntry;
 export { search } from './search/bm25-search.js';
@@ -10,12 +10,12 @@ export { hybridSearch } from './search/hybrid.js';
 export { physicsSearch } from './search/physics-search.js';
 export { explainMatch, MatchExplanation } from './search/explain.js';
 export { detectTemporalDirection, temporalBoost, computeTemporalRange } from './search/temporal.js';
-export { SearchResult } from './search/types.js';
-export { estimateTokens } from './token-ledger.js';
-export { tokenize, textOverlap } from './tokenize.js';
-export { markRetrieved } from './memory.js';
-export { multihopSearch } from './multihop.js';
-export { graphExpandRecall, MAX_HOPS, DEFAULT_MAX_NEIGHBORS, type GraphExpandOpts } from './graph-recall.js';
+export { SearchResult } from './core/search-types.js';
+export { estimateTokens } from './util/token-text.js';
+export { tokenize, textOverlap } from './util/tokenize.js';
+export { markRetrieved } from './core/memory.js';
+export { multihopSearch } from './search/multihop.js';
+export { graphExpandRecall, MAX_HOPS, DEFAULT_MAX_NEIGHBORS, type GraphExpandOpts } from './graph/recall.js';
 export { initStore } from './store/open.js';
 export { writeEntry } from './store/entry-writes.js';
 export { loadAllEntries, readEntry } from './store/entry-reads.js';
@@ -25,25 +25,25 @@ export { loadIndex, rebuildIndex, loadSessionDecayContext, SessionDecayContext }
 export { saveActiveTaskSnapshot, loadActiveTaskSnapshot, loadFreshActiveTaskSnapshot, SNAPSHOT_AMBIENT_MAX_AGE_MS, closeTaskSnapshotsForSession, clearActiveTaskSnapshot, appendSessionEvent, listSessionEvents, type ContinuityKey, } from './store/sessions.js';
 export { listMemoryConflicts, replaceDetectedConflicts, resolveConflict } from './store/conflicts.js';
 export { saveSessionHandoff, loadLatestHandoff, loadHandoffById, stampHandoffOutcome, writeSessionEndHandoff, } from './store/handoffs.js';
-export { createCard, loadCard, listCards, loadCardDeps, loadCardRuns, loadCardComments, claimCard, heartbeatCard, blockCard, reviewCard, completeCard, reclaimExpiredCards, addCardComment, loadLatestHandoffForCard, } from './store-cards.js';
-export { SessionHandoff, HandoffOutcome, HandoffEvidence, isHandoffOutcome } from './handoff.js';
-export { Card, CardStatus, CardRun, CardComment, CardTransitions, isCardStatus, CARD_TRANSITIONS, CARD_LEASE_MS } from './card.js';
+export { createCard, loadCard, listCards, loadCardDeps, loadCardRuns, loadCardComments, claimCard, heartbeatCard, blockCard, reviewCard, completeCard, reclaimExpiredCards, addCardComment, loadLatestHandoffForCard, } from './store/cards.js';
+export { SessionHandoff, HandoffOutcome, HandoffEvidence, isHandoffOutcome } from './core/handoff.js';
+export { Card, CardStatus, CardRun, CardComment, CardTransitions, isCardStatus, CARD_TRANSITIONS, CARD_LEASE_MS } from './core/card.js';
 export { consolidate } from './consolidate/sleep.js';
 export { ConsolidationResult } from './consolidate/run.js';
 export { sleep, type SleepOpts, type SleepResult } from './api/sleep.js';
-export { strengthBucket } from './dedupe.js';
-export { isEmbeddingAvailable, getEmbedding } from './local-embedding.js';
-export { cosineSimilarity, loadEmbeddingIndex, saveEmbeddingIndex, embedMemory, embedAll, } from './embeddings.js';
-export { captureError, extractLessons, partitionLessons, deduplicateLesson, runWatched, fetchGitLog, } from './autolearn.js';
-export { getGlobalRoot, initGlobal, promoteToGlobal, searchBoth, searchBothHybrid, syncGlobalToLocal, HybridSearchOptions, transferScore, shareMemory, listPeers, autoShare, } from './shared.js';
-export { wmPush, wmRead, wmClear, wmFlush, WorkingMemoryItem, WM_MAX_ENTRIES, } from './working-memory.js';
+export { strengthBucket } from './consolidate/dedupe.js';
+export { isEmbeddingAvailable, getEmbedding } from './store/embeddings/local.js';
+export { cosineSimilarity, loadEmbeddingIndex, saveEmbeddingIndex, embedMemory, embedAll, } from './store/embeddings/index.js';
+export { captureError, extractLessons, partitionLessons, deduplicateLesson, runWatched, fetchGitLog, } from './learn/autolearn.js';
+export { getGlobalRoot, initGlobal, promoteToGlobal, searchBoth, searchBothHybrid, syncGlobalToLocal, HybridSearchOptions, transferScore, shareMemory, listPeers, autoShare, } from './sharing/shared.js';
+export { wmPush, wmRead, wmClear, wmFlush, WorkingMemoryItem, WM_MAX_ENTRIES, } from './store/working-memory.js';
 export { importChatGPT, importClaude, importCursor, importGenericFile, } from './importers/sources.js';
 export { importMarkdown } from './importers/markdown.js';
 export { importVault } from './importers/vault.js';
 export { importEntries, ImportResult, ImportOptions } from './importers/core.js';
-export { runFeatureEval, formatResult, resultToBaseline, detectRegressions, buildSyntheticCorpus, } from './eval-suite.js';
-export { computeSalience, SalienceDecision, SalienceResult, SalienceOptions, } from './salience.js';
-export { computeAmbientState, renderAmbientSummary, formatAmbientVector, AmbientState, } from './ambient.js';
-export { appendAuditEvent, queryAuditEvents, listAuditEventsAfter, AUDIT_OPS, type AuditEvent, type AuditOp, type QueryAuditOpts, type ListAuditAfterOpts, } from './audit.js';
-export { openHippoDb, openHippoDbReadOnly, closeHippoDb, type DatabaseSyncLike } from './db.js';
+export { runFeatureEval, formatResult, resultToBaseline, detectRegressions, buildSyntheticCorpus, } from './eval/eval-suite.js';
+export { computeSalience, SalienceDecision, SalienceResult, SalienceOptions, } from './core/salience.js';
+export { computeAmbientState, renderAmbientSummary, formatAmbientVector, AmbientState, } from './core/ambient.js';
+export { appendAuditEvent, queryAuditEvents, listAuditEventsAfter, AUDIT_OPS, type AuditEvent, type AuditOp, type QueryAuditOpts, type ListAuditAfterOpts, } from './store/audit.js';
+export { openHippoDb, openHippoDbReadOnly, closeHippoDb, type DatabaseSyncLike } from './db/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -1,8 +1,8 @@
 /**
  * Hippo public API  - re-exports for programmatic use.
  */
-import { createMemory as createStoreMemory, DEFAULT_HALF_LIFE_DAYS } from './memory.js';
-export { Layer, calculateStrength, resolveConfidence, confidenceFacets, applyOutcome, generateId, computeSchemaFit } from './memory.js';
+import { createMemory as createStoreMemory, DEFAULT_HALF_LIFE_DAYS } from './core/memory.js';
+export { Layer, calculateStrength, resolveConfidence, confidenceFacets, applyOutcome, generateId, computeSchemaFit } from './core/memory.js';
 /** Published signature, so `baseHalfLifeDays` stays optional here; hippo's own writers use the strict one in memory.ts. */
 export function createMemory(content, options = {}) {
     return createStoreMemory(content, { ...options, baseHalfLifeDays: options.baseHalfLifeDays ?? DEFAULT_HALF_LIFE_DAYS });
@@ -12,11 +12,11 @@ export { hybridSearch } from './search/hybrid.js';
 export { physicsSearch } from './search/physics-search.js';
 export { explainMatch } from './search/explain.js';
 export { detectTemporalDirection, temporalBoost, computeTemporalRange } from './search/temporal.js';
-export { estimateTokens } from './token-ledger.js';
-export { tokenize, textOverlap } from './tokenize.js';
-export { markRetrieved } from './memory.js';
-export { multihopSearch } from './multihop.js';
-export { graphExpandRecall, MAX_HOPS, DEFAULT_MAX_NEIGHBORS } from './graph-recall.js';
+export { estimateTokens } from './util/token-text.js';
+export { tokenize, textOverlap } from './util/tokenize.js';
+export { markRetrieved } from './core/memory.js';
+export { multihopSearch } from './search/multihop.js';
+export { graphExpandRecall, MAX_HOPS, DEFAULT_MAX_NEIGHBORS } from './graph/recall.js';
 export { initStore } from './store/open.js';
 export { writeEntry } from './store/entry-writes.js';
 export { loadAllEntries, readEntry } from './store/entry-reads.js';
@@ -26,35 +26,35 @@ export { loadIndex, rebuildIndex, loadSessionDecayContext } from './store/index-
 export { saveActiveTaskSnapshot, loadActiveTaskSnapshot, loadFreshActiveTaskSnapshot, SNAPSHOT_AMBIENT_MAX_AGE_MS, closeTaskSnapshotsForSession, clearActiveTaskSnapshot, appendSessionEvent, listSessionEvents, } from './store/sessions.js';
 export { listMemoryConflicts, replaceDetectedConflicts, resolveConflict } from './store/conflicts.js';
 export { saveSessionHandoff, loadLatestHandoff, loadHandoffById, stampHandoffOutcome, writeSessionEndHandoff, } from './store/handoffs.js';
-export { createCard, loadCard, listCards, loadCardDeps, loadCardRuns, loadCardComments, claimCard, heartbeatCard, blockCard, reviewCard, completeCard, reclaimExpiredCards, addCardComment, loadLatestHandoffForCard, } from './store-cards.js';
+export { createCard, loadCard, listCards, loadCardDeps, loadCardRuns, loadCardComments, claimCard, heartbeatCard, blockCard, reviewCard, completeCard, reclaimExpiredCards, addCardComment, loadLatestHandoffForCard, } from './store/cards.js';
 // Feature 5: Session handoff
-export { isHandoffOutcome } from './handoff.js';
+export { isHandoffOutcome } from './core/handoff.js';
 // W2a: work-queue cards
-export { isCardStatus, CARD_TRANSITIONS, CARD_LEASE_MS } from './card.js';
+export { isCardStatus, CARD_TRANSITIONS, CARD_LEASE_MS } from './core/card.js';
 export { consolidate } from './consolidate/sleep.js';
 export { sleep } from './api/sleep.js';
 // Announced public in CHANGELOG 1.26.3 but never re-exported; the rest of dedupe.js stays internal.
-export { strengthBucket } from './dedupe.js';
+export { strengthBucket } from './consolidate/dedupe.js';
 // Feature 1: Embedding search
-export { isEmbeddingAvailable, getEmbedding } from './local-embedding.js';
-export { cosineSimilarity, loadEmbeddingIndex, saveEmbeddingIndex, embedMemory, embedAll, } from './embeddings.js';
+export { isEmbeddingAvailable, getEmbedding } from './store/embeddings/local.js';
+export { cosineSimilarity, loadEmbeddingIndex, saveEmbeddingIndex, embedMemory, embedAll, } from './store/embeddings/index.js';
 // Feature 2: Auto-learn from errors
-export { captureError, extractLessons, partitionLessons, deduplicateLesson, runWatched, fetchGitLog, } from './autolearn.js';
+export { captureError, extractLessons, partitionLessons, deduplicateLesson, runWatched, fetchGitLog, } from './learn/autolearn.js';
 // Feature 3: Cross-agent shared memory
-export { getGlobalRoot, initGlobal, promoteToGlobal, searchBoth, searchBothHybrid, syncGlobalToLocal, transferScore, shareMemory, listPeers, autoShare, } from './shared.js';
+export { getGlobalRoot, initGlobal, promoteToGlobal, searchBoth, searchBothHybrid, syncGlobalToLocal, transferScore, shareMemory, listPeers, autoShare, } from './sharing/shared.js';
 // Feature 5: Working memory
-export { wmPush, wmRead, wmClear, wmFlush, WM_MAX_ENTRIES, } from './working-memory.js';
+export { wmPush, wmRead, wmClear, wmFlush, WM_MAX_ENTRIES, } from './store/working-memory.js';
 // Feature 4: Memory importers
 export { importChatGPT, importClaude, importCursor, importGenericFile, } from './importers/sources.js';
 export { importMarkdown } from './importers/markdown.js';
 export { importVault } from './importers/vault.js';
 export { importEntries } from './importers/core.js';
 // Feature eval suite
-export { runFeatureEval, formatResult, resultToBaseline, detectRegressions, buildSyntheticCorpus, } from './eval-suite.js';
+export { runFeatureEval, formatResult, resultToBaseline, detectRegressions, buildSyntheticCorpus, } from './eval/eval-suite.js';
 // Pineal gland: salience gate
-export { computeSalience, } from './salience.js';
+export { computeSalience, } from './core/salience.js';
 // Pineal gland: ambient state vector
-export { computeAmbientState, renderAmbientSummary, formatAmbientVector, } from './ambient.js';
-export { appendAuditEvent, queryAuditEvents, listAuditEventsAfter, AUDIT_OPS, } from './audit.js';
-export { openHippoDb, openHippoDbReadOnly, closeHippoDb } from './db.js';
+export { computeAmbientState, renderAmbientSummary, formatAmbientVector, } from './core/ambient.js';
+export { appendAuditEvent, queryAuditEvents, listAuditEventsAfter, AUDIT_OPS, } from './store/audit.js';
+export { openHippoDb, openHippoDbReadOnly, closeHippoDb } from './db/index.js';
 //# sourceMappingURL=index.js.map

package/dist/{autolearn.d.ts → learn/autolearn.d.ts}

@@ -2,7 +2,7 @@
  * Auto-learn from errors and git history.
  * Agents learn from failures without explicit hippo remember calls.
  */
-import { MemoryEntry } from './memory.js';
+import { MemoryEntry } from '../core/memory.js';
 /** A memory of a failed command, "Command '<cmd>' failed: <truncated stderr>"; no store is in reach, so `hippo watch` re-derives its half-life from the store's config. */
 export declare function captureError(exitCode: number, stderr: string, command: string, tenantId?: string): MemoryEntry;
 /**
@@ -37,7 +37,7 @@ export declare function partitionLessons(lessons: string[]): {
  */
 export declare function deduplicateLesson(hippoRootOrEntries: string | MemoryEntry[], lesson: string, threshold?: number, tenantId?: string): boolean;
 /**
- * Run a command, streaming stdout/stderr to the terminal in real time.
+ * Run a command in a shell, streaming stderr live; never pass text the caller did not write.
  * Returns: { exitCode, stderr }.
  */
 export declare function runWatched(command: string): Promise<{

package/dist/{autolearn.js → learn/autolearn.js}

@@ -3,18 +3,20 @@
  * Agents learn from failures without explicit hippo remember calls.
  */
 import { execSync, execFileSync, spawn } from 'child_process';
-import { createMemory, Layer, DEFAULT_HALF_LIFE_DAYS } from './memory.js';
-import { loadAllEntries } from './store/entry-reads.js';
-import { textOverlap } from './tokenize.js';
-import { assessAutomaticMemory } from './memory-quality.js';
-import { redactSecretsStrict } from './secret-detect.js';
-import { log } from './log.js';
+import { createMemory, Layer, DEFAULT_HALF_LIFE_DAYS } from '../core/memory.js';
+import { loadAllEntries } from '../store/entry-reads.js';
+import { textOverlap } from '../util/tokenize.js';
+import { assessAutomaticMemory } from '../core/memory-quality.js';
+import { redactSecretsStrict } from '../util/secret-detect.js';
+import { errorMessage, log } from '../util/log.js';
+const AUTOLEARN_TEXT_CHARS = 500;
+const AUTOLEARN_TAG_CHARS = 30;
 /** A memory of a failed command, "Command '<cmd>' failed: <truncated stderr>"; no store is in reach, so `hippo watch` re-derives its half-life from the store's config. */
 export function captureError(exitCode, stderr, command, tenantId) {
     // Truncate to first 500 chars to avoid storing megabytes of build logs
     const clean = redactSecretsStrict(stderr);
     const wasTruncated = clean.length > 500;
-    const truncated = clean.slice(0, 500).trim();
+    const truncated = clean.slice(0, AUTOLEARN_TEXT_CHARS).trim();
     const suffix = wasTruncated ? ' [truncated]' : '';
     // Strip leading env var assignments (KEY=val or key=val) before the actual command name
     const safeCmd = redactSecretsStrict(command.replace(/^([A-Za-z_][A-Za-z0-9_]*=\S+\s+)+/, '').trim()) || '(redacted)';
@@ -23,7 +25,7 @@ export function captureError(exitCode, stderr, command, tenantId) {
     const cmdBase = safeCmd.split(/\s+/)[0].replace(/[^a-zA-Z0-9-]/g, '');
     const tags = ['error', 'autolearn'];
     if (cmdBase)
-        tags.push(cmdBase.toLowerCase().slice(0, 30));
+        tags.push(cmdBase.toLowerCase().slice(0, AUTOLEARN_TAG_CHARS));
     return createMemory(content, {
         layer: Layer.Episodic,
         tags,
@@ -117,7 +119,7 @@ export function deduplicateLesson(hippoRootOrEntries, lesson, threshold = 0.7, t
     return false;
 }
 /**
- * Run a command, streaming stdout/stderr to the terminal in real time.
+ * Run a command in a shell, streaming stderr live; never pass text the caller did not write.
  * Returns: { exitCode, stderr }.
  */
 export function runWatched(command) {
@@ -156,7 +158,7 @@ export function isGitRepo(cwd) {
         return raw.trim() === 'true';
     }
     catch (err) {
-        log.debug(`autolearn: not a git repo: ${err instanceof Error ? err.message : String(err)}`);
+        log.debug(`autolearn: not a git repo: ${errorMessage(err)}`);
         return false;
     }
 }
@@ -172,7 +174,7 @@ export function fetchGitLog(cwd, days) {
         return raw;
     }
     catch (err) {
-        log.debug(`autolearn: git log unavailable: ${err instanceof Error ? err.message : String(err)}`);
+        log.debug(`autolearn: git log unavailable: ${errorMessage(err)}`);
         return '';
     }
 }

package/dist/{churn-git.d.ts → learn/churn-git.d.ts}

@@ -1,4 +1,4 @@
-/** Git subprocess helpers for churn-staleness (src/invalidation.ts). */
+/** Git subprocess helpers for churn-staleness (src/learn/invalidation.ts). */
 /** A real git failure (not git grep's expected exit-1-no-match). Callers abort the whole run on this. */
 export declare class GitReadError extends Error {
 }

package/dist/{churn-git.js → learn/churn-git.js}

@@ -1,8 +1,10 @@
-/** Git subprocess helpers for churn-staleness (src/invalidation.ts). */
+/** Git subprocess helpers for churn-staleness (src/learn/invalidation.ts). */
 import { execFileSync } from 'child_process';
 import * as fs from 'fs';
 import * as os from 'os';
 import * as path from 'path';
+import { DAY_MS } from '../util/time.js';
+import { errorMessage } from '../util/log.js';
 // A `git log --name-status` dump can run to tens of MB; default 1MB pipe would truncate it.
 const GIT_MAX_BUFFER = 64 * 1024 * 1024;
 // Longer than the 10 s of one-line git reads because a full log dump on a large repo is slow, yet bounded so a wedged git cannot stall sleep.
@@ -15,7 +17,7 @@ function runGit(args, repoRoot) {
         return execFileSync('git', args, { cwd: repoRoot, encoding: 'utf8', maxBuffer: GIT_MAX_BUFFER, timeout: GIT_TIMEOUT_MS, windowsHide: true });
     }
     catch (err) {
-        throw new GitReadError(`git ${args.join(' ')} failed: ${err instanceof Error ? err.message : String(err)}`);
+        throw new GitReadError(`git ${args.join(' ')} failed: ${errorMessage(err)}`, { cause: err });
     }
 }
 // git grep exits 1 for "no match" -- a normal empty result, not a failure.
@@ -28,7 +30,7 @@ function runGitGrepOrEmpty(args, repoRoot) {
         const status = err.status;
         if (status === 1)
             return '';
-        throw new GitReadError(`git ${args.join(' ')} failed: ${err instanceof Error ? err.message : String(err)}`);
+        throw new GitReadError(`git ${args.join(' ')} failed: ${errorMessage(err)}`, { cause: err });
     }
 }
 // ls-tree, not ls-files: the index can hold staged adds/deletes that HEAD does not.
@@ -38,7 +40,7 @@ export function gitLsFilesAtHead(repoRoot) {
 }
 // 1-day buffer guards against git's --since boundary excluding a commit dated exactly at the anchor.
 export function fetchChurnWindowLog(repoRoot, sinceIso) {
-    const buffered = new Date(new Date(sinceIso).getTime() - 24 * 60 * 60 * 1000).toISOString();
+    const buffered = new Date(new Date(sinceIso).getTime() - DAY_MS).toISOString();
     const raw = runGit(
     // --first-parent -m: a merge's changes land as one diff against its mainline parent.
     ['log', '--no-renames', '--first-parent', '-m', `--since=${buffered}`, '--pretty=format:%x01%H%x02%cI', '--name-status'], repoRoot);

package/dist/{extract.d.ts → learn/extract.d.ts}

@@ -1,4 +1,4 @@
-import { MemoryEntry, EmotionalValence } from './memory.js';
+import { MemoryEntry, EmotionalValence } from '../core/memory.js';
 export interface ExtractedFact {
     content: string;
     tags: string[];