hippo-memory 1.70.0 → 1.71.0

package/dist/util/secret-detect.js

@@ -1,22 +1,5 @@
-/**
- * Secret detection for memory content (memory scope isolation).
- *
- * Conservative, provider-bounded patterns only - a bare `sk-` in prose must
- * NOT flag. Detection gates two surfaces:
- *  - producer: shareMemory/autoShare never promote flagged rows to the
- *    global store;
- *  - consumer: ambient context (getContext) never injects a flagged row
- *    outside its owning project, and never anywhere when the row has no
- *    project origin. Explicit recall is unaffected - recalling a secret is
- *    a deliberate act.
- *
- * This is deliberately a thin slice of lifecycle compliance
- * (no PII detection). Write-time scrubbing covers only text no person
- * typed into hippo; see `vetSecrets`.
- *
- * Leaf module: keep free of imports from store/api/shared so all of them
- * can import it without cycles.
- */
+/** Secret detection for memory content: conservative provider-bounded patterns (a bare `sk-` in prose must not flag). Flagged rows are never shared to
+ * the global store or injected as ambient context outside their project; explicit recall is unaffected. Leaf module: no imports from store/api/shared. */
 /** Tags that flag a memory as secret, lower case; detectSecret folds a tag's case before the lookup. */
 export const SECRET_TAGS = new Set([
     'secret', 'api-key', 'apikey', 'credential', 'credentials',
@@ -26,7 +9,8 @@ const SECRET_PATTERNS = [
     { name: 'aws-access-key', re: /\bAKIA[0-9A-Z]{16}\b/ },
     { name: 'github-token', re: /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{36}\b/ },
     { name: 'github-fine-grained-pat', re: /\bgithub_pat_[A-Za-z0-9_]{22,}\b/ },
-    // A token may end in a hyphen, where `\b` holds only before a word character: a class that holds `-` runs to its end, and a fixed length may also close on a hyphen.
+    // A token may end in a hyphen, where `\b` holds only before a word character: a class
+    // that holds `-` runs to its end, and a fixed length may also close on a hyphen.
     { name: 'slack-token', re: /\bxox[baprs]-[A-Za-z0-9-]{10,}/ },
     { name: 'stripe-key', re: /\b[sr]k_(?:live|test)_[A-Za-z0-9]{16,}\b/ },
     { name: 'google-api-key', re: /\bAIza[0-9A-Za-z_-]{35}(?:\b|(?<=-))/ },
@@ -38,15 +22,12 @@ const SECRET_PATTERNS = [
     { name: 'google-oauth-token', re: /\bya29\.[\w-]{20,}/ },
     { name: 'slack-webhook', re: /\bhooks\.slack\.com\/(?:services|workflows|triggers)\/[A-Za-z0-9+/]{43,56}/ },
     { name: 'private-key-block', re: /-----BEGIN [A-Z ]*PRIVATE KEY-----/ },
-    // sk-... (OpenAI/Anthropic style) and sk_<vendor>_... shapes. Both require
-    // a key-ish noun somewhere in the content (co-occurrence guard) so prose
-    // like "the sk- prefix identifies API keys" without an actual long token
-    // does not flag, but a stored key ("prod API key sk_live_...")
-    // does.
+    // sk-... (OpenAI/Anthropic) and sk_<vendor>_... shapes; both need a key-ish noun in the content (co-occurrence guard), so prose
+    // like "the sk- prefix identifies API keys" does not flag but "prod API key sk_live_..." does.
     { name: 'sk-style-key', re: /\bsk-[A-Za-z0-9_-]{20,}/ },
     { name: 'sk-underscore-key', re: /\bsk_[A-Za-z0-9]+_[A-Za-z0-9_]{6,}\b/ },
-    // The value needs 12+ token-safe chars and a digit, or `token = estimateTokens(...)` and doc templates like user:password@ would hide code lessons from ambient context.
-    // Secret names end in the keyword (dbPassword, PGPASSWORD) and token_url does not, so the match opens there and scans no prefix; pwd and pass need a _ as OLDPWD and bypass are not secrets.
+    // Value needs 12+ token-safe chars and a digit, or `token = estimateTokens(...)` and user:password@ templates would hide code lessons from ambient context.
+    // Secret names end in the keyword (dbPassword), so the match opens there, no prefix scan; pwd and pass need a _ (OLDPWD, bypass are not secrets).
     { name: 'secret-assignment', re: /(?:(?:api[_-]?key|access[_-]?key|private[_-]?key|secret|token|passw(?:or)?d|(?<=_)(?:pwd|pass))(?:[_-]?(?:key(?:[_-]?base)?|value|secret))?['"]?\s*(?::=?|=>?)\s*['"]?|(?<=--)password(?:=|\s+))(?=[A-Za-z0-9_\-+/]*\d)[A-Za-z0-9_\-+/=]{12,}/i },
     { name: 'url-password', re: /(?<=[A-Za-z0-9]:\/\/)[^\s/:@?#]*:(?=[^\s/@?#]*\d)[^\s/@?#]+(?=@)/ },
 ];
@@ -59,10 +40,7 @@ const STRICT_ONLY_PATTERNS = [
     /(?<![A-Za-z0-9_-])eyJ[A-Za-z0-9_-]{8,}\.eyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]*/g,
     /(?<=[A-Za-z0-9]:\/\/)[^\s/:@?#]*:[^\s/@?#]+(?=@)/g,
 ];
-/**
- * Scan a memory's tags + content for secret material.
- * Pure and deterministic; no filesystem or store access.
- */
+/** Scan a memory's tags + content for secret material; pure and deterministic, no filesystem or store access. */
 export function detectSecret(entry) {
     for (const tag of entry.tags) {
         if (SECRET_TAGS.has(tag.toLowerCase())) {
@@ -78,17 +56,13 @@ export function detectSecret(entry) {
     }
     return { flagged: false, reason: null };
 }
-/**
- * Replace secret-shaped substrings in free text with a redaction marker.
- * Reuses the same `SECRET_PATTERNS` / co-occurrence guard as `detectSecret`
- * (which only flags whole-entry content) so callers that must persist raw
- * text that never passes through the normal capture content gate (e.g. the
- * pre-compact snapshot fields) can scrub it in place instead.
- */
+/** Replace secret-shaped substrings in free text with a redaction marker, using the same `SECRET_PATTERNS` and co-occurrence guard as `detectSecret`;
+ * for callers persisting text that skips the capture content gate (e.g. pre-compact snapshot fields). */
 export function redactSecrets(text) {
     return redactText(text, false);
 }
-/** Only a run's first character starts a match, so a long run is scanned once; a domain's first label opens on a letter, so logo@2x.png and react@18.2.0 stay. */
+/** Only a run's first character starts a match, so a long run is scanned once; a
+ * domain's first label opens on a letter, so logo@2x.png and react@18.2.0 stay. */
 const EMAIL = /(?<![A-Za-z0-9._%+-])[A-Za-z0-9._%+-]{1,64}@[A-Za-z][A-Za-z0-9-]*(?:\.[A-Za-z0-9-]+)*\.[A-Za-z]{2,}\b/g;
 /** Memories never hold a raw email address (AGENTS.md); phone numbers are left alone, as their patterns misfire on ids. */
 export function maskEmails(text) {

package/dist/util/stored-json.d.ts

@@ -4,6 +4,6 @@ export interface StoredJsonSite {
     id: string | number;
     column: string;
 }
-/** Warns the first time this row's column is found damaged, then logs at debug, so a row read on every recall cannot flood stderr. */
+/** Warns the first time this row's column is found damaged (the logger caps how many), then at debug, so a row read on every recall cannot flood stderr. */
 export declare function warnDamagedColumn(site: StoredJsonSite, problem: 'not valid JSON' | 'wrong shape'): void;
 //# sourceMappingURL=stored-json.d.ts.map

package/dist/util/stored-json.js

@@ -1,6 +1,6 @@
 // One log line for a stored JSON column that will not read, so a reader that degrades to an empty value still leaves a trace.
 import { log } from './log.js';
-/** Warns the first time this row's column is found damaged, then logs at debug, so a row read on every recall cannot flood stderr. */
+/** Warns the first time this row's column is found damaged (the logger caps how many), then at debug, so a row read on every recall cannot flood stderr. */
 export function warnDamagedColumn(site, problem) {
     const { table, id, column } = site;
     log.warnThenDebug(`damaged-column:${table}:${id}:${column}`, `store: ${table}.${column} is ${problem}; read as empty`, { table, id, column });

package/dist/util/token-text.d.ts

@@ -8,10 +8,7 @@ export declare const DIGEST_DISPLAY_CHARS = 12;
 export declare const DATE_PREFIX_CHARS = 10;
 /** Characters of memory content shown as a one-line preview. */
 export declare const CONTENT_PREVIEW_CHARS = 80;
-/**
- * Rough token estimate: characters / 4. The single estimate behind every
- * token budget and ledger count in hippo.
- */
+/** Rough token estimate: characters / 4, the single estimate behind every token budget and ledger count. */
 export declare function estimateTokens(text: string): number;
 /** Stable 16-hex-char hash of a rendered block, for change detection. */
 export declare function blockHash(text: string): string;

package/dist/util/token-text.js

@@ -9,10 +9,7 @@ export const DIGEST_DISPLAY_CHARS = 12;
 export const DATE_PREFIX_CHARS = 10;
 /** Characters of memory content shown as a one-line preview. */
 export const CONTENT_PREVIEW_CHARS = 80;
-/**
- * Rough token estimate: characters / 4. The single estimate behind every
- * token budget and ledger count in hippo.
- */
+/** Rough token estimate: characters / 4, the single estimate behind every token budget and ledger count. */
 export function estimateTokens(text) {
     return Math.ceil(text.length / 4);
 }

package/dist/util/transcript-tail.d.ts

@@ -4,4 +4,6 @@ export declare const PRE_COMPACT_TAIL_BYTES: number;
 export declare function truncateCodePointSafe(text: string, maxChars: number): string;
 /** The last `capBytes` of a JSONL transcript, read at an offset and starting on a whole line so every line parses. */
 export declare function readTranscriptTail(transcriptPath: string, capBytes?: number): string;
+/** {@link readTranscriptTail} for a transcript the caller opened and sized, so the size and the bytes come from one file. */
+export declare function readOpenTranscriptTail(fd: number, size: number, capBytes: number): string;
 //# sourceMappingURL=transcript-tail.d.ts.map

package/dist/util/transcript-tail.js

@@ -1,4 +1,4 @@
-// Transcript reads shared by capture.ts and compaction-record.ts; a leaf so neither has to import the other.
+// Transcript reads shared by src/capture/ and compaction-record.ts; a leaf so neither has to import the other.
 import * as fs from 'fs';
 /** Never read the whole transcript: PreCompact fires exactly when it's largest. */
 export const PRE_COMPACT_TAIL_BYTES = 256 * 1024;
@@ -16,33 +16,34 @@ export function truncateCodePointSafe(text, maxChars) {
 }
 /** The last `capBytes` of a JSONL transcript, read at an offset and starting on a whole line so every line parses. */
 export function readTranscriptTail(transcriptPath, capBytes = PRE_COMPACT_TAIL_BYTES) {
-    const size = fs.statSync(transcriptPath).size;
-    const start = Math.max(0, size - capBytes);
-    const length = size - start;
-    if (length <= 0)
-        return '';
     const fd = fs.openSync(transcriptPath, 'r');
     try {
-        // A seek that lands just after '\n' already starts a whole line and must keep it.
-        let onLineBoundary = start === 0;
-        if (!onLineBoundary) {
-            const prevByte = Buffer.alloc(1);
-            fs.readSync(fd, prevByte, 0, 1, start - 1);
-            onLineBoundary = prevByte[0] === 0x0a; // '\n'
-        }
-        const buf = Buffer.alloc(length);
-        fs.readSync(fd, buf, 0, length, start);
-        let text = buf.toString('utf8');
-        if (!onLineBoundary) {
-            // Landed mid-line — drop the partial first line so every remaining
-            // line parses as complete JSON.
-            const nl = text.indexOf('\n');
-            text = nl === -1 ? '' : text.slice(nl + 1);
-        }
-        return text;
+        return readOpenTranscriptTail(fd, fs.fstatSync(fd).size, capBytes);
     }
     finally {
         fs.closeSync(fd);
     }
 }
+/** {@link readTranscriptTail} for a transcript the caller opened and sized, so the size and the bytes come from one file. */
+export function readOpenTranscriptTail(fd, size, capBytes) {
+    const start = Math.max(0, size - capBytes);
+    const length = size - start;
+    if (length <= 0)
+        return '';
+    // A seek that lands just after '\n' already starts a whole line and must keep it.
+    let onLineBoundary = start === 0;
+    if (!onLineBoundary) {
+        const prevByte = Buffer.alloc(1);
+        fs.readSync(fd, prevByte, 0, 1, start - 1);
+        onLineBoundary = prevByte[0] === 0x0a; // '\n'
+    }
+    const buf = Buffer.alloc(length);
+    fs.readSync(fd, buf, 0, length, start);
+    const text = buf.toString('utf8');
+    if (onLineBoundary)
+        return text;
+    // A read that lands mid-line drops the partial first line, so every line left parses as complete JSON.
+    const nl = text.indexOf('\n');
+    return nl === -1 ? '' : text.slice(nl + 1);
+}
 //# sourceMappingURL=transcript-tail.js.map

package/dist/util/version.d.ts

@@ -1,23 +1,8 @@
-/**
- * Single source of truth for the hippo-memory binary's package version.
- *
- * Written by `npm version <x> --no-git-tag-version` through
- * scripts/sync-version.mjs, with the three plugin manifests; never edit it by
- * hand. scripts/check-manifest-versions.mjs gates publish on all seven sites.
- *
- * Used by:
- *   - src/db/migrate.ts rollback-safety guard (refuses to open a DB stamped with
- *     min_compatible_binary newer than this).
- *   - src/server.ts HTTP /health.
- *   - src/mcp/server.ts MCP serverInfo.
- *
- * Why not read package.json at runtime: the npm-published bundle ships
- * compiled `dist/` files that may not have package.json on a relative path
- * an ESM `import` can resolve cleanly, and a hardcoded constant survives
- * any packager that drops .json files.
- */
-export declare const PACKAGE_VERSION = "1.70.0";
-/** The floor a store takes on its first expiring key: the first release with schema v53, set by hand in that release; scripts/check-expiring-keys-floor.mjs gates it. */
+/** Single source of truth for the package version, written by scripts/sync-version.mjs; never edit by hand. Read by the db rollback guard, /health, MCP.
+ * A constant, not a runtime package.json read: the published bundle may lack package.json on a path ESM can resolve. */
+export declare const PACKAGE_VERSION = "1.71.0";
+/** The floor a store takes on its first expiring key: the first release with schema
+ * v53, set by hand in that release; scripts/check-expiring-keys-floor.mjs gates it. */
 export declare const EXPIRING_KEYS_MIN_BINARY = "1.64.0";
 /** The floor a store takes on its first session bind or owner snapshot: first release with v54; set by hand in that release. */
 export declare const TASK_OWNER_MIN_BINARY = "1.64.0";

package/dist/util/version.js

@@ -1,23 +1,8 @@
-/**
- * Single source of truth for the hippo-memory binary's package version.
- *
- * Written by `npm version <x> --no-git-tag-version` through
- * scripts/sync-version.mjs, with the three plugin manifests; never edit it by
- * hand. scripts/check-manifest-versions.mjs gates publish on all seven sites.
- *
- * Used by:
- *   - src/db/migrate.ts rollback-safety guard (refuses to open a DB stamped with
- *     min_compatible_binary newer than this).
- *   - src/server.ts HTTP /health.
- *   - src/mcp/server.ts MCP serverInfo.
- *
- * Why not read package.json at runtime: the npm-published bundle ships
- * compiled `dist/` files that may not have package.json on a relative path
- * an ESM `import` can resolve cleanly, and a hardcoded constant survives
- * any packager that drops .json files.
- */
-export const PACKAGE_VERSION = '1.70.0';
-/** The floor a store takes on its first expiring key: the first release with schema v53, set by hand in that release; scripts/check-expiring-keys-floor.mjs gates it. */
+/** Single source of truth for the package version, written by scripts/sync-version.mjs; never edit by hand. Read by the db rollback guard, /health, MCP.
+ * A constant, not a runtime package.json read: the published bundle may lack package.json on a path ESM can resolve. */
+export const PACKAGE_VERSION = '1.71.0';
+/** The floor a store takes on its first expiring key: the first release with schema
+ * v53, set by hand in that release; scripts/check-expiring-keys-floor.mjs gates it. */
 export const EXPIRING_KEYS_MIN_BINARY = '1.64.0';
 /** The floor a store takes on its first session bind or owner snapshot: first release with v54; set by hand in that release. */
 export const TASK_OWNER_MIN_BINARY = '1.64.0';

package/extensions/openclaw-plugin/index.ts

@@ -352,7 +352,7 @@ export default function register(api: any) {
   api.registerTool((ctx: HippoRuntimeContext) => ({
     name: 'hippo_outcome',
     description:
-      'Report whether recalled memories were useful. Strengthens good memories (+5 days half-life) and weakens bad ones (-3 days). Call after completing work.',
+      "Report whether recalled memories were useful. Good outcomes slow a memory's decay and bad ones speed it up, in proportion to its record. Call after completing work.",
     parameters: {
       type: 'object',
       properties: {

package/extensions/openclaw-plugin/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "hippo-memory",
   "name": "Hippo Memory",
   "description": "Make your agent's memory work like a brain. Hippo is long-term memory for coding agents.",
-  "version": "1.70.0",
+  "version": "1.71.0",
 
   "configSchema": {
     "type": "object",

package/extensions/openclaw-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hippo-memory",
-  "version": "1.70.0",
+  "version": "1.71.0",
   "type": "module",
   "description": "Make your agent's memory work like a brain. Hippo is long-term memory for coding agents.",
   "main": "index.ts",

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "hippo-memory",
   "name": "Hippo Memory",
   "description": "Make your agent's memory work like a brain. Hippo is long-term memory for coding agents.",
-  "version": "1.70.0",
+  "version": "1.71.0",
   "configSchema": {
     "type": "object",
     "additionalProperties": false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hippo-memory",
-  "version": "1.70.0",
+  "version": "1.71.0",
   "description": "Make your agent's memory work like a brain. Hippo is long-term memory for coding agents.",
   "mcpName": "io.github.kitfunso/hippo-memory",
   "type": "module",

package/dist/connectors/github/cli-impl.d.ts

@@ -1,25 +0,0 @@
-/**
- * Implementation of `hippo github` CLI subcommands. Extracted from the main
- * cli.ts so unit tests can import these functions directly without triggering
- * the cli.ts main() side effects. The cli.ts dispatcher re-exports the
- * top-level cmdGithub.
- *
- * Subcommands mirror the Slack connector shape (cli.ts §Slack subcommands):
- *   - hippo github backfill --repo <owner/name> [--since ISO] [--max <N>]
- *   - hippo github dlq list
- *   - hippo github dlq replay <id> [--force]
- */
-import { type GitHubFetcher } from './octokit-client.js';
-type FlagValue = string | boolean | string[];
-type Flags = Record<string, FlagValue>;
-export declare function printGithubBackfillUsage(): void;
-/**
- * `hippo github backfill`. The fetcher is injectable so tests can drive the
- * code path without hitting the network. Defaults to `realGitHubFetcher`.
- */
-export declare function cmdGithubBackfill(hippoRoot: string, flags: Flags, fetcher?: GitHubFetcher): Promise<void>;
-export declare function cmdGithubDlqList(hippoRoot: string, _flags: Flags): void;
-export declare function cmdGithubDlqReplay(hippoRoot: string, args: string[], flags: Flags): Promise<void>;
-export declare function cmdGithub(hippoRoot: string, args: string[], flags: Flags): Promise<void>;
-export {};
-//# sourceMappingURL=cli-impl.d.ts.map

package/dist/sharing/shared.d.ts

@@ -1,187 +0,0 @@
-/**
- * Cross-agent shared memory for Hippo.
- * Global store is shared across all projects.
- * Resolution: $HIPPO_HOME > $XDG_DATA_HOME/hippo > ~/.hippo/
- * Local .hippo/ stores are per-project.
- */
-import { MemoryEntry } from '../core/memory.js';
-import { type SearchResult, type ResultCost } from '../core/search-types.js';
-import type { HybridVectorCandidates } from '../search/vector.js';
-import type { DatabaseSyncLike } from '../db/index.js';
-/**
- * Returns the path to the global Hippo store.
- * Resolution order: $HIPPO_HOME > $XDG_DATA_HOME/hippo > ~/.hippo/
- */
-export declare function getGlobalRoot(): string;
-/**
- * Ensure the global store exists.
- */
-export declare function initGlobal(): void;
-/** Copies a local memory to the global store and returns the copy, which gets a new `g_` id so it cannot collide. */
-export declare function promoteToGlobal(localRoot: string, id: string, opts?: {
-    actor?: string;
-    tenantId?: string;
-    afterWrite?: (db: DatabaseSyncLike, globalId: string) => void;
-    /** Also writes one `promote` audit row for the copy ({sourceId}), in the copy's own transaction. */
-    auditAs?: {
-        tenantId: string;
-        actor: string;
-    };
-}): MemoryEntry;
-export interface SearchOptions {
-    budget?: number;
-    now?: Date;
-    minResults?: number;
-    /** Tenant scope for both stores. Undefined = no filter (legacy single-tenant). */
-    tenantId?: string;
-}
-/**
- * Search across both local and global stores, merging results.
- * Local results are boosted by 1.2x to prefer project-specific context.
- * Returns results sorted by adjusted score, within combined token budget.
- */
-export declare function searchBoth(query: string, localRoot: string, globalRoot: string, options?: SearchOptions): SearchResult[];
-export interface HybridSearchOptions extends SearchOptions {
-    embeddingWeight?: number;
-    explain?: boolean;
-    mmr?: boolean;
-    mmrLambda?: number;
-    /** Multiplier applied to local-store scores when merging with global.
-     *  Defaults to 1.2. Use 1.0 to remove the local bias for eval comparisons. */
-    localBump?: number;
-    /** Active scope for scope-boost scoring. Auto-detected if not provided. */
-    scope?: string | null;
-    /** Include superseded memories in results. Default false. */
-    includeSuperseded?: boolean;
-    /** Filter to memories current at this ISO date string. */
-    asOf?: string;
-    /** Budget cost per result, spent the same way in each store and in the merged list. */
-    cost?: ResultCost;
-    /** Propagated to underlying hybridSearch calls.
-     *  Per-call > env HIPPO_SUMMARY_DEBOOST > 0.85 default. */
-    summaryDeboost?: number;
-    /** Propagated. Default true (1.05 boost if rebuilt within 7d). */
-    summaryFreshness?: boolean;
-    /** v39 memory scope isolation: optional admission predicate applied to the
-     *  loaded candidate entries of BOTH stores BEFORE ranking, cross-store
-     *  content-dedupe, and budgeting. Without it, an excluded row can shadow
-     *  its admitted duplicate in the dedupe pass, or saturate the budget.
-     *  Default undefined = unchanged behavior (recall paths never set it). */
-    entryFilter?: (entry: MemoryEntry) => boolean;
-    /** Recall-mode scope filter, consumed by `searchBothHybrid` only.
-     *  ABSENT (undefined) is the only unfiltered mode: both stores load via
-     *  `loadSearchEntries` unchanged (background pipelines / eval callers).
-     *  PRESENT switches the internal loads to `loadRecallSearchEntries` (SQL
-     *  scope predicate) plus the recall-scope JS post-filter:
-     *    `{}`                                  = default-deny (`unknown:legacy`
-     *                                            + `<source>:private:*` excluded)
-     *    `{ requested: 'X' }`                  = exact match on scope X
-     *                                            (api.recall semantics)
-     *    `{ requested: 'X', additive: true }`  = default-admitted set PLUS
-     *                                            scope X (CLI --scope
-     *                                            semantics; see recall-scope.ts
-     *                                            passesCliRecallScopeFilter)
-     *  Object form on purpose — the sibling `scope` option above already gives
-     *  `null` a different meaning (boost-neutral), so a flat `string | null`
-     *  here would overload null with contradictory semantics. Do NOT pass an
-     *  empty object casually from non-recall paths. */
-    recallScope?: {
-        requested?: string;
-        additive?: boolean;
-        ownScope?: string;
-    };
-}
-/**
- * Hybrid search across both local and global stores, using embeddings when available.
- * Async version of searchBoth that calls hybridSearch instead of search.
- */
-export declare function searchBothHybrid(query: string, localRoot: string, globalRoot: string, options?: HybridSearchOptions): Promise<SearchResult[]>;
-/** Hybrid ranking of rows already loaded from each store: the local bump, one copy per text, then the shared budget. */
-export declare function rankBothStores(query: string, roots: {
-    local: string;
-    global: string;
-}, entries: {
-    local: MemoryEntry[];
-    global: MemoryEntry[];
-}, vectorCandidates: HybridVectorCandidates, options?: HybridSearchOptions): Promise<SearchResult[]>;
-/** Tags whose rows only a hand-run share or promote may copy to the global store; derived rows inherit them. */
-export declare const NEVER_AUTO_SHARE_TAGS: ReadonlySet<string>;
-export declare function neverAutoShareTags(sources: readonly MemoryEntry[]): string[];
-/** Tags whose rows sleep keeps as written: never merged, never sent to LLM extraction. Conflict detection keeps its own list. */
-export declare const NO_MERGE_TAGS: ReadonlySet<string>;
-/**
- * Estimate how well a memory would transfer to other projects.
- * Returns 0..1 where >0.5 = good candidate for sharing.
- */
-export declare function transferScore(entry: MemoryEntry): number;
-/**
- * Share a memory to the global store with attribution.
- * Enriches the source field with project path and timestamp.
- * Returns the new global entry, or null if transfer score is too low.
- */
-export declare function shareMemory(localRoot: string, id: string, options?: {
-    force?: boolean;
-    tenantId?: string;
-    skipEmbed?: boolean;
-}): MemoryEntry | null;
-/**
- * List all projects that have contributed memories to the global store.
- * Parses the source field for 'shared:<project>:' or 'promoted:<path>' patterns.
- *
- * `tenantId` is optional. When provided, the global entries
- * are filtered to that tenant before aggregation — matches every other
- * read path's default-safe behaviour. When undefined, host-wide (back-compat
- * for legacy callers like CLI standalone + dashboard internal use). Operators
- * who genuinely want cross-tenant peer discovery can pass undefined or
- * use direct SQL.
- */
-export declare function listPeers(globalRoot?: string, tenantId?: string): Array<{
-    project: string;
-    count: number;
-    latest: string;
-}>;
-type AutoShareStats = {
-    secretSkipped: number;
-    rejectedSkipped?: number;
-    neverAutoShareSkipped?: number;
-};
-/**
- * Auto-share: local memories with high transfer scores, not already global, no NEVER_AUTO_SHARE_TAGS tag.
- * Returns the list of shared entries.
- *
- * `options.tenantId` is opt-in. When provided, the LOCAL-entries read is
- * scoped to that tenant. When undefined, the local read is host-wide (current
- * behaviour). The GLOBAL-entries read is always unioned — the global root IS
- * the cross-tenant aggregate by design. `api.sleep` passes no tenantId
- * because `sleep` is host-wide by intent.
- *
- * `options.stats` is an opt-in out-param. When provided,
- * `stats.secretSkipped` is incremented once per row that passed every OTHER
- * admission gate (transfer score, not-already-global) and was withheld SOLELY
- * by the secret veto — i.e. it counts shares actually prevented, not secret
- * rows merely present. Filled identically under `dryRun`.
- *
- * `stats.rejectedSkipped` (optional) is incremented once per candidate
- * refused by the GLOBAL store's rejection tombstone (RejectedValueError from
- * shareMemory -> writeEntry). Unlike secretSkipped, this can only be
- * detected by attempting the write — `dryRun` returns candidates before the
- * write loop runs, so `rejectedSkipped` stays at its initial value under
- * `dryRun` (candidates that WOULD be refused are not distinguished in the
- * dry-run preview).
- */
-export declare function autoShare(localRoot: string, options?: {
-    minScore?: number;
-    dryRun?: boolean;
-    tenantId?: string;
-    stats?: AutoShareStats;
-}): MemoryEntry[];
-/**
- * Copy all global memories into the local store.
- * Skips entries that already exist locally, by ID or by text (promote and share copy under a new ID).
- * Returns the count of newly copied entries.
- */
-export declare function syncGlobalToLocal(localRoot: string, globalRoot: string, opts?: {
-    includeCrossProject?: boolean;
-}): number;
-export {};
-//# sourceMappingURL=shared.d.ts.map