hippo-memory 1.69.0 → 1.70.0

package/dist/cli/serve.js

@@ -1,13 +1,19 @@
 // Long-running verbs: `hippo dashboard`, `hippo mcp` and `hippo serve`.
-import { envPort } from '../env.js';
+import { installCrashHandlers } from '../util/crash-handlers.js';
+import { envPort, envRequireAuth, envTlsCert, envTlsKey } from '../util/env.js';
+import * as fs from 'fs';
 import * as path from 'path';
 import { printError } from './output.js';
+import { stringFlagOrExit, stringFlag } from './flag-values.js';
 import { requireInit } from './shared.js';
+import { errorMessage } from '../util/log.js';
 export async function handleDashboard({ hippoRoot, flags }) {
     requireInit(hippoRoot);
     const port = parseInt(String(flags['port'] ?? '3333'), 10);
-    const { serveDashboard } = await import('../dashboard.js');
+    const { serveDashboard } = await import('../dashboard/dashboard.js');
     serveDashboard(hippoRoot, port);
+    // A busy port or a later throw ends in one log line and exit 1, as it does for serve and mcp.
+    installCrashHandlers('dashboard');
     await new Promise(() => { }); // run until Ctrl+C
 }
 export async function handleMcp() {
@@ -20,6 +26,25 @@ export async function handleMcp() {
     // Server runs until stdin closes, so we never reach here
     await new Promise(() => { }); // hang forever
 }
+/** The certificate and key for HTTPS, from --tls-cert and --tls-key or HIPPO_TLS_CERT and HIPPO_TLS_KEY; undefined when neither is set. */
+function readTlsFiles(flags) {
+    // A flag with no value exits here; falling back to cleartext would hide the mistake.
+    const certPath = stringFlagOrExit(flags, 'tls-cert') ?? envTlsCert();
+    const keyPath = stringFlagOrExit(flags, 'tls-key') ?? envTlsKey();
+    if (certPath === undefined && keyPath === undefined)
+        return undefined;
+    if (certPath === undefined || keyPath === undefined) {
+        printError('hippo serve: TLS needs both a certificate and a key: --tls-cert and --tls-key, or HIPPO_TLS_CERT and HIPPO_TLS_KEY.');
+        process.exit(1);
+    }
+    try {
+        return { cert: fs.readFileSync(certPath), key: fs.readFileSync(keyPath) };
+    }
+    catch (err) {
+        printError(`hippo serve: cannot read the TLS files: ${errorMessage(err)}`);
+        process.exit(1);
+    }
+}
 export async function handleServe({ hippoRoot, flags }) {
     requireInit(hippoRoot);
     const portRaw = flags['port'] ?? envPort() ?? '6789';
@@ -28,10 +53,15 @@ export async function handleServe({ hippoRoot, flags }) {
         printError(`Invalid --port: ${String(portRaw)}`);
         process.exit(1);
     }
-    const host = typeof flags['host'] === 'string' ? flags['host'] : '127.0.0.1';
+    const host = stringFlag(flags, 'host') ?? '127.0.0.1';
+    const tls = readTlsFiles(flags);
     const { serve } = await import('../server.js');
-    const handle = await serve({ hippoRoot, port, host, handleSignals: true });
+    const handle = await serve({ hippoRoot, port, host, handleSignals: true, tls });
     console.log(`hippo serve listening on ${handle.url} (pid ${process.pid})`);
+    // Said at every start: the no-key local fallback is a default an operator should choose, not discover.
+    if (!envRequireAuth()) {
+        console.log('local requests need no API key and act as host admin; set HIPPO_REQUIRE_AUTH=1 to require a key on every request');
+    }
     console.log(`pidfile: ${path.join(hippoRoot, 'server.pid')}`);
     console.log('press Ctrl+C to stop');
     // The SIGINT/SIGTERM handlers stop the server and exit. Hang until then.

package/dist/cli/session-hooks.d.ts

@@ -1,4 +1,4 @@
-import { type CommandContext } from './shared.js';
+import { type CliFlags, type CommandContext } from './flag-values.js';
 /**
  * SessionEnd entry point. Claude Code / OpenCode fire this on /exit while
  * tearing down the TUI, which kills any child that is still running when
@@ -10,14 +10,14 @@ import { type CommandContext } from './shared.js';
  * immediately. The child writes to the log file and survives TUI teardown;
  * the next SessionStart reads the log via `hippo last-sleep`.
  */
-export declare function cmdSessionEnd(hippoRoot: string, flags: Record<string, string | boolean | string[]>): Promise<void>;
-export declare function cmdSessionEndWorker(hippoRoot: string, flags: Record<string, string | boolean | string[]>): Promise<void>;
+export declare function cmdSessionEnd(hippoRoot: string, flags: CliFlags): Promise<void>;
+export declare function cmdSessionEndWorker(hippoRoot: string, flags: CliFlags): Promise<void>;
 /** Quotes one cmd.exe argument; each `%` leaves the quotes as `^%`, so no %NAME% pair can expand. */
 export declare function quoteCmdArg(arg: string): string;
 /** cmd.exe arguments that run a .cmd or .bat shim with every forwarded argument delivered verbatim. */
 export declare function cmdShimArgs(shimPath: string, forwardArgs: readonly string[]): string[];
 export declare function cmdCodexRun(hippoRoot: string, args: string[]): void;
-export declare function cmdCodexSessionEndWorker(hippoRoot: string, flags: Record<string, string | boolean | string[]>): Promise<void>;
+export declare function cmdCodexSessionEndWorker(hippoRoot: string, flags: CliFlags): Promise<void>;
 export declare function handlePreCompact({ hippoRoot, flags }: CommandContext): Promise<void>;
 export declare function handlePostCompact({ hippoRoot, flags }: CommandContext): Promise<void>;
 export declare function handleCaptureError({ hippoRoot, flags }: CommandContext): Promise<void>;