hippo-memory 1.69.0 → 1.71.0

package/dist/{secret-detect.js → util/secret-detect.js}

@@ -1,22 +1,5 @@
-/**
- * Secret detection for memory content (memory scope isolation).
- *
- * Conservative, provider-bounded patterns only - a bare `sk-` in prose must
- * NOT flag. Detection gates two surfaces:
- *  - producer: shareMemory/autoShare never promote flagged rows to the
- *    global store;
- *  - consumer: ambient context (getContext) never injects a flagged row
- *    outside its owning project, and never anywhere when the row has no
- *    project origin. Explicit recall is unaffected - recalling a secret is
- *    a deliberate act.
- *
- * This is deliberately a thin slice of lifecycle compliance
- * (no PII detection). Write-time scrubbing covers only text no person
- * typed into hippo; see `vetSecrets`.
- *
- * Leaf module: keep free of imports from store/api/shared so all of them
- * can import it without cycles.
- */
+/** Secret detection for memory content: conservative provider-bounded patterns (a bare `sk-` in prose must not flag). Flagged rows are never shared to
+ * the global store or injected as ambient context outside their project; explicit recall is unaffected. Leaf module: no imports from store/api/shared. */
 /** Tags that flag a memory as secret, lower case; detectSecret folds a tag's case before the lookup. */
 export const SECRET_TAGS = new Set([
     'secret', 'api-key', 'apikey', 'credential', 'credentials',
@@ -26,10 +9,12 @@ const SECRET_PATTERNS = [
     { name: 'aws-access-key', re: /\bAKIA[0-9A-Z]{16}\b/ },
     { name: 'github-token', re: /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{36}\b/ },
     { name: 'github-fine-grained-pat', re: /\bgithub_pat_[A-Za-z0-9_]{22,}\b/ },
-    { name: 'slack-token', re: /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/ },
+    // A token may end in a hyphen, where `\b` holds only before a word character: a class
+    // that holds `-` runs to its end, and a fixed length may also close on a hyphen.
+    { name: 'slack-token', re: /\bxox[baprs]-[A-Za-z0-9-]{10,}/ },
     { name: 'stripe-key', re: /\b[sr]k_(?:live|test)_[A-Za-z0-9]{16,}\b/ },
-    { name: 'google-api-key', re: /\bAIza[0-9A-Za-z_-]{35}\b/ },
-    // hk_ is hippo's own API key (src/auth.ts); npm, Hugging Face, GitLab and Slack webhook shapes follow gitleaks' rules.
+    { name: 'google-api-key', re: /\bAIza[0-9A-Za-z_-]{35}(?:\b|(?<=-))/ },
+    // hk_ is hippo's own API key (src/store/auth.ts); npm, Hugging Face, GitLab and Slack webhook shapes follow gitleaks' rules.
     { name: 'hippo-api-key', re: /\bhk_[a-z2-7]{24}\.[a-z2-7]{32}\b/ },
     { name: 'npm-token', re: /\bnpm_[A-Za-z0-9]{36}\b/ },
     { name: 'huggingface-token', re: /\bhf_[A-Za-z]{34}\b/ },
@@ -37,15 +22,12 @@ const SECRET_PATTERNS = [
     { name: 'google-oauth-token', re: /\bya29\.[\w-]{20,}/ },
     { name: 'slack-webhook', re: /\bhooks\.slack\.com\/(?:services|workflows|triggers)\/[A-Za-z0-9+/]{43,56}/ },
     { name: 'private-key-block', re: /-----BEGIN [A-Z ]*PRIVATE KEY-----/ },
-    // sk-... (OpenAI/Anthropic style) and sk_<vendor>_... shapes. Both require
-    // a key-ish noun somewhere in the content (co-occurrence guard) so prose
-    // like "the sk- prefix identifies API keys" without an actual long token
-    // does not flag, but a stored key ("prod API key sk_live_...")
-    // does.
-    { name: 'sk-style-key', re: /\bsk-[A-Za-z0-9_-]{20,}\b/ },
+    // sk-... (OpenAI/Anthropic) and sk_<vendor>_... shapes; both need a key-ish noun in the content (co-occurrence guard), so prose
+    // like "the sk- prefix identifies API keys" does not flag but "prod API key sk_live_..." does.
+    { name: 'sk-style-key', re: /\bsk-[A-Za-z0-9_-]{20,}/ },
     { name: 'sk-underscore-key', re: /\bsk_[A-Za-z0-9]+_[A-Za-z0-9_]{6,}\b/ },
-    // The value needs 12+ token-safe chars and a digit, or `token = estimateTokens(...)` and doc templates like user:password@ would hide code lessons from ambient context.
-    // Secret names end in the keyword (dbPassword, PGPASSWORD) and token_url does not, so the match opens there and scans no prefix; pwd and pass need a _ as OLDPWD and bypass are not secrets.
+    // Value needs 12+ token-safe chars and a digit, or `token = estimateTokens(...)` and user:password@ templates would hide code lessons from ambient context.
+    // Secret names end in the keyword (dbPassword), so the match opens there, no prefix scan; pwd and pass need a _ (OLDPWD, bypass are not secrets).
     { name: 'secret-assignment', re: /(?:(?:api[_-]?key|access[_-]?key|private[_-]?key|secret|token|passw(?:or)?d|(?<=_)(?:pwd|pass))(?:[_-]?(?:key(?:[_-]?base)?|value|secret))?['"]?\s*(?::=?|=>?)\s*['"]?|(?<=--)password(?:=|\s+))(?=[A-Za-z0-9_\-+/]*\d)[A-Za-z0-9_\-+/=]{12,}/i },
     { name: 'url-password', re: /(?<=[A-Za-z0-9]:\/\/)[^\s/:@?#]*:(?=[^\s/@?#]*\d)[^\s/@?#]+(?=@)/ },
 ];
@@ -58,10 +40,7 @@ const STRICT_ONLY_PATTERNS = [
     /(?<![A-Za-z0-9_-])eyJ[A-Za-z0-9_-]{8,}\.eyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]*/g,
     /(?<=[A-Za-z0-9]:\/\/)[^\s/:@?#]*:[^\s/@?#]+(?=@)/g,
 ];
-/**
- * Scan a memory's tags + content for secret material.
- * Pure and deterministic; no filesystem or store access.
- */
+/** Scan a memory's tags + content for secret material; pure and deterministic, no filesystem or store access. */
 export function detectSecret(entry) {
     for (const tag of entry.tags) {
         if (SECRET_TAGS.has(tag.toLowerCase())) {
@@ -77,17 +56,13 @@ export function detectSecret(entry) {
     }
     return { flagged: false, reason: null };
 }
-/**
- * Replace secret-shaped substrings in free text with a redaction marker.
- * Reuses the same `SECRET_PATTERNS` / co-occurrence guard as `detectSecret`
- * (which only flags whole-entry content) so callers that must persist raw
- * text that never passes through the normal capture content gate (e.g. the
- * pre-compact snapshot fields) can scrub it in place instead.
- */
+/** Replace secret-shaped substrings in free text with a redaction marker, using the same `SECRET_PATTERNS` and co-occurrence guard as `detectSecret`;
+ * for callers persisting text that skips the capture content gate (e.g. pre-compact snapshot fields). */
 export function redactSecrets(text) {
     return redactText(text, false);
 }
-/** Only a run's first character starts a match, so a long run is scanned once; a domain's first label opens on a letter, so logo@2x.png and react@18.2.0 stay. */
+/** Only a run's first character starts a match, so a long run is scanned once; a
+ * domain's first label opens on a letter, so logo@2x.png and react@18.2.0 stay. */
 const EMAIL = /(?<![A-Za-z0-9._%+-])[A-Za-z0-9._%+-]{1,64}@[A-Za-z][A-Za-z0-9-]*(?:\.[A-Za-z0-9-]+)*\.[A-Za-z]{2,}\b/g;
 /** Memories never hold a raw email address (AGENTS.md); phone numbers are left alone, as their patterns misfire on ids. */
 export function maskEmails(text) {

package/dist/util/stored-json.d.ts

@@ -0,0 +1,9 @@
+/** Where the value lives. The value itself is never logged: it is caller-written text. */
+export interface StoredJsonSite {
+    table: string;
+    id: string | number;
+    column: string;
+}
+/** Warns the first time this row's column is found damaged (the logger caps how many), then at debug, so a row read on every recall cannot flood stderr. */
+export declare function warnDamagedColumn(site: StoredJsonSite, problem: 'not valid JSON' | 'wrong shape'): void;
+//# sourceMappingURL=stored-json.d.ts.map

package/dist/util/stored-json.js

@@ -0,0 +1,8 @@
+// One log line for a stored JSON column that will not read, so a reader that degrades to an empty value still leaves a trace.
+import { log } from './log.js';
+/** Warns the first time this row's column is found damaged (the logger caps how many), then at debug, so a row read on every recall cannot flood stderr. */
+export function warnDamagedColumn(site, problem) {
+    const { table, id, column } = site;
+    log.warnThenDebug(`damaged-column:${table}:${id}:${column}`, `store: ${table}.${column} is ${problem}; read as empty`, { table, id, column });
+}
+//# sourceMappingURL=stored-json.js.map

package/dist/util/time.d.ts

@@ -0,0 +1,2 @@
+export declare const DAY_MS = 86400000;
+//# sourceMappingURL=time.d.ts.map

package/dist/util/time.js

@@ -0,0 +1,3 @@
+// Durations in the base layer, so no layer imports a higher one for a constant.
+export const DAY_MS = 86_400_000;
+//# sourceMappingURL=time.js.map

package/dist/util/token-text.d.ts

@@ -0,0 +1,15 @@
+/** Hex characters kept from a SHA-256 when it fingerprints a block, key or turn. */
+export declare const FINGERPRINT_HEX_CHARS = 16;
+/** Hex characters kept from a hash or UUID to build a short id. */
+export declare const ID_SUFFIX_CHARS = 12;
+/** Characters of a rejected-value or tombstone digest shown to a person. */
+export declare const DIGEST_DISPLAY_CHARS = 12;
+/** Length of the YYYY-MM-DD head of an ISO timestamp. */
+export declare const DATE_PREFIX_CHARS = 10;
+/** Characters of memory content shown as a one-line preview. */
+export declare const CONTENT_PREVIEW_CHARS = 80;
+/** Rough token estimate: characters / 4, the single estimate behind every token budget and ledger count. */
+export declare function estimateTokens(text: string): number;
+/** Stable 16-hex-char hash of a rendered block, for change detection. */
+export declare function blockHash(text: string): string;
+//# sourceMappingURL=token-text.d.ts.map

package/dist/util/token-text.js

@@ -0,0 +1,20 @@
+import { createHash } from 'node:crypto';
+/** Hex characters kept from a SHA-256 when it fingerprints a block, key or turn. */
+export const FINGERPRINT_HEX_CHARS = 16;
+/** Hex characters kept from a hash or UUID to build a short id. */
+export const ID_SUFFIX_CHARS = 12;
+/** Characters of a rejected-value or tombstone digest shown to a person. */
+export const DIGEST_DISPLAY_CHARS = 12;
+/** Length of the YYYY-MM-DD head of an ISO timestamp. */
+export const DATE_PREFIX_CHARS = 10;
+/** Characters of memory content shown as a one-line preview. */
+export const CONTENT_PREVIEW_CHARS = 80;
+/** Rough token estimate: characters / 4, the single estimate behind every token budget and ledger count. */
+export function estimateTokens(text) {
+    return Math.ceil(text.length / 4);
+}
+/** Stable 16-hex-char hash of a rendered block, for change detection. */
+export function blockHash(text) {
+    return createHash('sha256').update(text).digest('hex').slice(0, FINGERPRINT_HEX_CHARS);
+}
+//# sourceMappingURL=token-text.js.map

package/dist/{transcript-tail.d.ts → util/transcript-tail.d.ts}

@@ -4,4 +4,6 @@ export declare const PRE_COMPACT_TAIL_BYTES: number;
 export declare function truncateCodePointSafe(text: string, maxChars: number): string;
 /** The last `capBytes` of a JSONL transcript, read at an offset and starting on a whole line so every line parses. */
 export declare function readTranscriptTail(transcriptPath: string, capBytes?: number): string;
+/** {@link readTranscriptTail} for a transcript the caller opened and sized, so the size and the bytes come from one file. */
+export declare function readOpenTranscriptTail(fd: number, size: number, capBytes: number): string;
 //# sourceMappingURL=transcript-tail.d.ts.map

package/dist/util/transcript-tail.js

@@ -0,0 +1,49 @@
+// Transcript reads shared by src/capture/ and compaction-record.ts; a leaf so neither has to import the other.
+import * as fs from 'fs';
+/** Never read the whole transcript: PreCompact fires exactly when it's largest. */
+export const PRE_COMPACT_TAIL_BYTES = 256 * 1024;
+/** Cut to `maxChars` UTF-16 units, backing off one unit rather than leave half a surrogate pair in a stored field. */
+export function truncateCodePointSafe(text, maxChars) {
+    if (text.length <= maxChars)
+        return text;
+    let end = maxChars;
+    if (end > 0) {
+        const code = text.charCodeAt(end - 1);
+        if (code >= 0xd800 && code <= 0xdbff)
+            end -= 1;
+    }
+    return text.slice(0, end);
+}
+/** The last `capBytes` of a JSONL transcript, read at an offset and starting on a whole line so every line parses. */
+export function readTranscriptTail(transcriptPath, capBytes = PRE_COMPACT_TAIL_BYTES) {
+    const fd = fs.openSync(transcriptPath, 'r');
+    try {
+        return readOpenTranscriptTail(fd, fs.fstatSync(fd).size, capBytes);
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+}
+/** {@link readTranscriptTail} for a transcript the caller opened and sized, so the size and the bytes come from one file. */
+export function readOpenTranscriptTail(fd, size, capBytes) {
+    const start = Math.max(0, size - capBytes);
+    const length = size - start;
+    if (length <= 0)
+        return '';
+    // A seek that lands just after '\n' already starts a whole line and must keep it.
+    let onLineBoundary = start === 0;
+    if (!onLineBoundary) {
+        const prevByte = Buffer.alloc(1);
+        fs.readSync(fd, prevByte, 0, 1, start - 1);
+        onLineBoundary = prevByte[0] === 0x0a; // '\n'
+    }
+    const buf = Buffer.alloc(length);
+    fs.readSync(fd, buf, 0, length, start);
+    const text = buf.toString('utf8');
+    if (onLineBoundary)
+        return text;
+    // A read that lands mid-line drops the partial first line, so every line left parses as complete JSON.
+    const nl = text.indexOf('\n');
+    return nl === -1 ? '' : text.slice(nl + 1);
+}
+//# sourceMappingURL=transcript-tail.js.map

package/dist/util/version.d.ts

@@ -0,0 +1,11 @@
+/** Single source of truth for the package version, written by scripts/sync-version.mjs; never edit by hand. Read by the db rollback guard, /health, MCP.
+ * A constant, not a runtime package.json read: the published bundle may lack package.json on a path ESM can resolve. */
+export declare const PACKAGE_VERSION = "1.71.0";
+/** The floor a store takes on its first expiring key: the first release with schema
+ * v53, set by hand in that release; scripts/check-expiring-keys-floor.mjs gates it. */
+export declare const EXPIRING_KEYS_MIN_BINARY = "1.64.0";
+/** The floor a store takes on its first session bind or owner snapshot: first release with v54; set by hand in that release. */
+export declare const TASK_OWNER_MIN_BINARY = "1.64.0";
+/** Compares plain x.y.z versions, positive if a > b; tags throw so the rollback guard never misfires silently. */
+export declare function compareSemver(a: string, b: string): number;
+//# sourceMappingURL=version.d.ts.map

package/dist/util/version.js

@@ -0,0 +1,26 @@
+/** Single source of truth for the package version, written by scripts/sync-version.mjs; never edit by hand. Read by the db rollback guard, /health, MCP.
+ * A constant, not a runtime package.json read: the published bundle may lack package.json on a path ESM can resolve. */
+export const PACKAGE_VERSION = '1.71.0';
+/** The floor a store takes on its first expiring key: the first release with schema
+ * v53, set by hand in that release; scripts/check-expiring-keys-floor.mjs gates it. */
+export const EXPIRING_KEYS_MIN_BINARY = '1.64.0';
+/** The floor a store takes on its first session bind or owner snapshot: first release with v54; set by hand in that release. */
+export const TASK_OWNER_MIN_BINARY = '1.64.0';
+/** Compares plain x.y.z versions, positive if a > b; tags throw so the rollback guard never misfires silently. */
+export function compareSemver(a, b) {
+    const parse = (v) => {
+        const parts = v.split('.');
+        if (parts.length !== 3 || parts.some((n) => !/^\d+$/.test(n))) {
+            throw new Error(`compareSemver: expected numeric x.y.z without pre-release/build metadata: ${v}`);
+        }
+        return parts.map(Number);
+    };
+    const [a1, a2, a3] = parse(a);
+    const [b1, b2, b3] = parse(b);
+    if (a1 !== b1)
+        return (a1 ?? 0) - (b1 ?? 0);
+    if (a2 !== b2)
+        return (a2 ?? 0) - (b2 ?? 0);
+    return (a3 ?? 0) - (b3 ?? 0);
+}
+//# sourceMappingURL=version.js.map

package/extensions/openclaw-plugin/index.ts

@@ -294,12 +294,8 @@ export default function register(api: any) {
     async execute(_id: string, params: { query: string; budget?: number }) {
       const cfg = getConfig(api);
       const budget = params.budget ?? cfg.budget ?? 1500;
-      const framing = cfg.framing ?? 'observe';
       const hippoCwd = resolveHippoCwdFromContext(api, ctx, cfg.root);
-      const result = runHippo(
-        ['recall', params.query, '--budget', String(budget), '--framing', framing],
-        hippoCwd,
-      );
+      const result = runHippo(['recall', params.query, '--budget', String(budget)], hippoCwd);
       return { content: [{ type: 'text', text: result || 'No relevant memories found.' }] };
     },
   }));
@@ -356,7 +352,7 @@ export default function register(api: any) {
   api.registerTool((ctx: HippoRuntimeContext) => ({
     name: 'hippo_outcome',
     description:
-      'Report whether recalled memories were useful. Strengthens good memories (+5 days half-life) and weakens bad ones (-3 days). Call after completing work.',
+      "Report whether recalled memories were useful. Good outcomes slow a memory's decay and bad ones speed it up, in proportion to its record. Call after completing work.",
     parameters: {
       type: 'object',
       properties: {

package/extensions/openclaw-plugin/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "hippo-memory",
   "name": "Hippo Memory",
   "description": "Make your agent's memory work like a brain. Hippo is long-term memory for coding agents.",
-  "version": "1.69.0",
+  "version": "1.71.0",
 
   "configSchema": {
     "type": "object",

package/extensions/openclaw-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hippo-memory",
-  "version": "1.69.0",
+  "version": "1.71.0",
   "type": "module",
   "description": "Make your agent's memory work like a brain. Hippo is long-term memory for coding agents.",
   "main": "index.ts",

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "hippo-memory",
   "name": "Hippo Memory",
   "description": "Make your agent's memory work like a brain. Hippo is long-term memory for coding agents.",
-  "version": "1.69.0",
+  "version": "1.71.0",
   "configSchema": {
     "type": "object",
     "additionalProperties": false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hippo-memory",
-  "version": "1.69.0",
+  "version": "1.71.0",
   "description": "Make your agent's memory work like a brain. Hippo is long-term memory for coding agents.",
   "mcpName": "io.github.kitfunso/hippo-memory",
   "type": "module",
@@ -43,7 +43,7 @@
     "test:eval": "vitest run --config vitest.eval.config.ts",
     "lint": "oxlint",
     "sbom": "node scripts/sbom.mjs",
-    "audit:security": "npm audit --audit-level=high && npm --prefix ui audit --audit-level=high",
+    "audit:security": "npm audit --audit-level=moderate && npm --prefix ui audit --audit-level=moderate",
     "postinstall": "node scripts/postinstall.cjs",
     "smoke:pack": "node scripts/smoke-pack.mjs",
     "smoke:openclaw-install": "node scripts/smoke-openclaw-install.mjs",

package/dist/ablation.d.ts

@@ -1,102 +0,0 @@
-/**
- * EVAL-ONLY lifecycle ablation switches.
- *
- * These env flags exist for controlled experiments on hippo's memory-lifecycle
- * mechanisms (the "lifecycle, ablated" paper protocol): each switch neutralizes
- * exactly ONE mechanism so its causal contribution can be measured in isolation.
- *
- * They are NOT a production configuration surface:
- *   - no config-file equivalents, deliberately (config implies support);
- *   - undocumented in user-facing help;
- *   - semantics may change with the experiment design.
- * Production behavior with all flags unset is byte-identical to before this
- * module existed.
- *
- * Flags (set to '1' or 'true'):
- *   HIPPO_ABLATE_DECAY         time-decay term := 1 in calculateStrength.
- *   HIPPO_ABLATE_RECALL_BOOST  full recall-strengthening ablation:
- *                              - markRetrieved returns entries UNMUTATED (no
- *                                clock reset / count / half-life increment);
- *                                ids stay available so `hippo outcome`
- *                                attribution keeps working in this arm;
- *                              - persisting callers (CLI recall, api context,
- *                                MCP recall/context, consolidation replay)
- *                                skip their writeEntry loops (identical-row
- *                                writes still refresh updated_at / mirrors /
- *                                DAG dirty flags);
- *                              - the retrieval-count READ boost := 1;
- *                              - decay anchors at `created` instead of
- *                                `last_retrieved` (prior-run clock resets
- *                                cannot leak in);
- *                              - physics: computeMass ignores the count, and
- *                                physicsSearch recomputes loaded masses LIVE
- *                                under ablated strength rules (persisted
- *                                masses embed recall history in their frozen
- *                                strength component);
- *                              - replay rehearsal is silenced entirely (it IS
- *                                strengthening; use config replay.count=0 to
- *                                separate replay in unflagged arms).
- *                              CAVEAT: half_life increments persisted by
- *                              prior unflagged runs are NOT reconstructed
- *                              (consolidation legitimately writes half_life
- *                              too) - ablation arms run on FRESH stores, as
- *                              the experiment protocol mandates.
- *   HIPPO_ABLATE_OUTCOME       both outcome channels := neutral
- *                              (= _SLOW + _FAST together). The slow side also
- *                              silences replay's outcome reward bias
- *                              (replayPriority). NOT gated: the opt-in
- *                              `recall --value-aware` rerank (an explicit CLI
- *                              flag that also reads outcome counts) - ablated
- *                              arms must not pass it.
- *   HIPPO_ABLATE_OUTCOME_SLOW  rewardFactor := 1 (no half-life modulation).
- *   HIPPO_ABLATE_OUTCOME_FAST  hybridSearch outcomeBoost := 1.
- *   HIPPO_ABLATE_RECENCY       search recency factor := 1 (the creation-age
- *                              multiplier 0.8 + 0.2*exp(-age/30d)); decay,
- *                              strengthening and outcomes stay live.
- *   HIPPO_EVAL_RECENCY_DAYS    a positive number replaces the 30-day scale of
- *                              that recency factor (tuning grids only). Unset,
- *                              zero, negative or junk values keep 30.
- *   HIPPO_FAKE_NOW            timestamp injected as the default `now` for
- *                              strength computation and retrieval stamping
- *                              (simulated-time protocols). MUST be the exact
- *                              Date.toISOString() form
- *                              (YYYY-MM-DDTHH:mm:ss.sssZ); validated by
- *                              round-trip, so junk, locale dates, non-UTC
- *                              offsets, and rolled-over dates (2026-02-31)
- *                              all fall back to the real clock.
- *
- * Formula notes (load-bearing for the experiments) - ablating decay has TWO
- * intrinsic co-effects, because the unified formula routes other mechanisms
- * THROUGH the decay term. Both are real properties of the architecture, not
- * implementation accidents; experiment analysis must attribute accordingly
- * (the decay-off arm is "decay + its dependents off", see prereg amendment A1):
- *   1. Read-side strengthening flattens: raw = retrievalBoost * emotionalMult
- *      >= 1, and the [0,1] clamp caps it at 1.0 - the recall boost can only
- *      offset decay, never exceed baseline. (Write-side still runs.)
- *   2. Outcome-slow goes inert: rewardFactor only acts by scaling the
- *      effective half-life INSIDE the decay exponent; with decay := 1 there
- *      is no exponent for it to modulate. Outcome-slow is decay-rate
- *      modulation BY DESIGN, so "no decay" necessarily means "no slow
- *      channel" (the fast channel in hybridSearch is unaffected).
- *
- * Env caching follows the house pattern (see getLossAversionRatio in
- * memory.ts): read once per process, with a test-only reset helper. Tests
- * that mutate these env vars MUST call _resetAblationCacheForTests() in BOTH
- * beforeEach AND afterEach.
- */
-export declare function isDecayAblated(): boolean;
-export declare function isRecallBoostAblated(): boolean;
-export declare function isOutcomeSlowAblated(): boolean;
-export declare function isOutcomeFastAblated(): boolean;
-export declare function isRecencyAblated(): boolean;
-/** HIPPO_EVAL_RECENCY_DAYS when it is a positive number, else null (callers keep their default). */
-export declare function evalRecencyScaleDays(): number | null;
-/**
- * The default `now` for lifecycle computations: HIPPO_FAKE_NOW when set and
- * parseable, else the real clock. Callers that already take an explicit `now`
- * parameter are unaffected (explicit always wins).
- */
-export declare function evalNow(): Date;
-/** Test-only. See module JSDoc: call in BOTH beforeEach AND afterEach. */
-export declare function _resetAblationCacheForTests(): void;
-//# sourceMappingURL=ablation.d.ts.map

package/dist/ablation.js

@@ -1,136 +0,0 @@
-/**
- * EVAL-ONLY lifecycle ablation switches.
- *
- * These env flags exist for controlled experiments on hippo's memory-lifecycle
- * mechanisms (the "lifecycle, ablated" paper protocol): each switch neutralizes
- * exactly ONE mechanism so its causal contribution can be measured in isolation.
- *
- * They are NOT a production configuration surface:
- *   - no config-file equivalents, deliberately (config implies support);
- *   - undocumented in user-facing help;
- *   - semantics may change with the experiment design.
- * Production behavior with all flags unset is byte-identical to before this
- * module existed.
- *
- * Flags (set to '1' or 'true'):
- *   HIPPO_ABLATE_DECAY         time-decay term := 1 in calculateStrength.
- *   HIPPO_ABLATE_RECALL_BOOST  full recall-strengthening ablation:
- *                              - markRetrieved returns entries UNMUTATED (no
- *                                clock reset / count / half-life increment);
- *                                ids stay available so `hippo outcome`
- *                                attribution keeps working in this arm;
- *                              - persisting callers (CLI recall, api context,
- *                                MCP recall/context, consolidation replay)
- *                                skip their writeEntry loops (identical-row
- *                                writes still refresh updated_at / mirrors /
- *                                DAG dirty flags);
- *                              - the retrieval-count READ boost := 1;
- *                              - decay anchors at `created` instead of
- *                                `last_retrieved` (prior-run clock resets
- *                                cannot leak in);
- *                              - physics: computeMass ignores the count, and
- *                                physicsSearch recomputes loaded masses LIVE
- *                                under ablated strength rules (persisted
- *                                masses embed recall history in their frozen
- *                                strength component);
- *                              - replay rehearsal is silenced entirely (it IS
- *                                strengthening; use config replay.count=0 to
- *                                separate replay in unflagged arms).
- *                              CAVEAT: half_life increments persisted by
- *                              prior unflagged runs are NOT reconstructed
- *                              (consolidation legitimately writes half_life
- *                              too) - ablation arms run on FRESH stores, as
- *                              the experiment protocol mandates.
- *   HIPPO_ABLATE_OUTCOME       both outcome channels := neutral
- *                              (= _SLOW + _FAST together). The slow side also
- *                              silences replay's outcome reward bias
- *                              (replayPriority). NOT gated: the opt-in
- *                              `recall --value-aware` rerank (an explicit CLI
- *                              flag that also reads outcome counts) - ablated
- *                              arms must not pass it.
- *   HIPPO_ABLATE_OUTCOME_SLOW  rewardFactor := 1 (no half-life modulation).
- *   HIPPO_ABLATE_OUTCOME_FAST  hybridSearch outcomeBoost := 1.
- *   HIPPO_ABLATE_RECENCY       search recency factor := 1 (the creation-age
- *                              multiplier 0.8 + 0.2*exp(-age/30d)); decay,
- *                              strengthening and outcomes stay live.
- *   HIPPO_EVAL_RECENCY_DAYS    a positive number replaces the 30-day scale of
- *                              that recency factor (tuning grids only). Unset,
- *                              zero, negative or junk values keep 30.
- *   HIPPO_FAKE_NOW            timestamp injected as the default `now` for
- *                              strength computation and retrieval stamping
- *                              (simulated-time protocols). MUST be the exact
- *                              Date.toISOString() form
- *                              (YYYY-MM-DDTHH:mm:ss.sssZ); validated by
- *                              round-trip, so junk, locale dates, non-UTC
- *                              offsets, and rolled-over dates (2026-02-31)
- *                              all fall back to the real clock.
- *
- * Formula notes (load-bearing for the experiments) - ablating decay has TWO
- * intrinsic co-effects, because the unified formula routes other mechanisms
- * THROUGH the decay term. Both are real properties of the architecture, not
- * implementation accidents; experiment analysis must attribute accordingly
- * (the decay-off arm is "decay + its dependents off", see prereg amendment A1):
- *   1. Read-side strengthening flattens: raw = retrievalBoost * emotionalMult
- *      >= 1, and the [0,1] clamp caps it at 1.0 - the recall boost can only
- *      offset decay, never exceed baseline. (Write-side still runs.)
- *   2. Outcome-slow goes inert: rewardFactor only acts by scaling the
- *      effective half-life INSIDE the decay exponent; with decay := 1 there
- *      is no exponent for it to modulate. Outcome-slow is decay-rate
- *      modulation BY DESIGN, so "no decay" necessarily means "no slow
- *      channel" (the fast channel in hybridSearch is unaffected).
- *
- * Env caching follows the house pattern (see getLossAversionRatio in
- * memory.ts): read once per process, with a test-only reset helper. Tests
- * that mutate these env vars MUST call _resetAblationCacheForTests() in BOTH
- * beforeEach AND afterEach.
- */
-import { envAblateDecay, envAblateOutcome, envAblateOutcomeFast, envAblateOutcomeSlow, envAblateRecallBoost, envAblateRecency, envEvalRecencyDays, envFakeNowMs, } from './env.js';
-let _cache;
-function readFlags() {
-    if (_cache !== undefined)
-        return _cache;
-    const outcomeBoth = envAblateOutcome();
-    _cache = {
-        decay: envAblateDecay(),
-        recallBoost: envAblateRecallBoost(),
-        outcomeSlow: outcomeBoth || envAblateOutcomeSlow(),
-        outcomeFast: outcomeBoth || envAblateOutcomeFast(),
-        recency: envAblateRecency(),
-        recencyDays: envEvalRecencyDays(),
-        fakeNowMs: envFakeNowMs(),
-    };
-    return _cache;
-}
-export function isDecayAblated() {
-    return readFlags().decay;
-}
-export function isRecallBoostAblated() {
-    return readFlags().recallBoost;
-}
-export function isOutcomeSlowAblated() {
-    return readFlags().outcomeSlow;
-}
-export function isOutcomeFastAblated() {
-    return readFlags().outcomeFast;
-}
-export function isRecencyAblated() {
-    return readFlags().recency;
-}
-/** HIPPO_EVAL_RECENCY_DAYS when it is a positive number, else null (callers keep their default). */
-export function evalRecencyScaleDays() {
-    return readFlags().recencyDays;
-}
-/**
- * The default `now` for lifecycle computations: HIPPO_FAKE_NOW when set and
- * parseable, else the real clock. Callers that already take an explicit `now`
- * parameter are unaffected (explicit always wins).
- */
-export function evalNow() {
-    const ms = readFlags().fakeNowMs;
-    return ms === null ? new Date() : new Date(ms);
-}
-/** Test-only. See module JSDoc: call in BOTH beforeEach AND afterEach. */
-export function _resetAblationCacheForTests() {
-    _cache = undefined;
-}
-//# sourceMappingURL=ablation.js.map

package/dist/api.d.ts

@@ -1,26 +0,0 @@
-export { ApiError, BadRequestError, ConflictError, ForbiddenError, NotFoundError } from './api-errors.js';
-export { isPrivateScope, passesScopeFilterForRecall } from './recall-scope.js';
-export { passesCliRecallScopeFilter, ScopeForbiddenError } from './recall-scope.js';
-export type { TokenSummary, TokenSurface, TokenSurfaceSummary } from './token-ledger.js';
-export type { FailureSummary } from './failure-log.js';
-export { classifyOriginProject } from './project-identity.js';
-export * from './api/types.js';
-export * from './api/remember.js';
-export * from './api/recall-types.js';
-export * from './api/recall.js';
-export * from './api/assemble.js';
-export * from './api/drill-down.js';
-export * from './api/outcome.js';
-export * from './api/forget.js';
-export * from './api/promote.js';
-export * from './api/auth.js';
-export * from './api/audit.js';
-export * from './api/context-types.js';
-export * from './api/context.js';
-export * from './api/tokens.js';
-export * from './api/dormant.js';
-export * from './api/quarantine.js';
-export * from './api/sleep.js';
-export * from './api/goals.js';
-export * from './api/learn.js';
-//# sourceMappingURL=api.d.ts.map

package/dist/api.js

@@ -1,29 +0,0 @@
-// Domain API layer: Context-taking functions that the CLI, the HTTP server and MCP all call, so the
-// business logic lives in one place. The code lives in src/api/, one module per domain; this barrel
-// keeps every import path that callers already use.
-export { ApiError, BadRequestError, ConflictError, ForbiddenError, NotFoundError } from './api-errors.js';
-// The recall-side scope predicates live in recall-scope.ts (leaf) so shared.ts can use them without an import cycle.
-export { isPrivateScope, passesScopeFilterForRecall } from './recall-scope.js';
-export { passesCliRecallScopeFilter, ScopeForbiddenError } from './recall-scope.js';
-// classifyOriginProject lives in project-identity.ts (leaf) for the same reason.
-export { classifyOriginProject } from './project-identity.js';
-export * from './api/types.js';
-export * from './api/remember.js';
-export * from './api/recall-types.js';
-export * from './api/recall.js';
-export * from './api/assemble.js';
-export * from './api/drill-down.js';
-export * from './api/outcome.js';
-export * from './api/forget.js';
-export * from './api/promote.js';
-export * from './api/auth.js';
-export * from './api/audit.js';
-export * from './api/context-types.js';
-export * from './api/context.js';
-export * from './api/tokens.js';
-export * from './api/dormant.js';
-export * from './api/quarantine.js';
-export * from './api/sleep.js';
-export * from './api/goals.js';
-export * from './api/learn.js';
-//# sourceMappingURL=api.js.map