hippo-memory 1.70.0 → 1.72.0

package/dist/util/version.js

@@ -1,23 +1,8 @@
-/**
- * Single source of truth for the hippo-memory binary's package version.
- *
- * Written by `npm version <x> --no-git-tag-version` through
- * scripts/sync-version.mjs, with the three plugin manifests; never edit it by
- * hand. scripts/check-manifest-versions.mjs gates publish on all seven sites.
- *
- * Used by:
- *   - src/db/migrate.ts rollback-safety guard (refuses to open a DB stamped with
- *     min_compatible_binary newer than this).
- *   - src/server.ts HTTP /health.
- *   - src/mcp/server.ts MCP serverInfo.
- *
- * Why not read package.json at runtime: the npm-published bundle ships
- * compiled `dist/` files that may not have package.json on a relative path
- * an ESM `import` can resolve cleanly, and a hardcoded constant survives
- * any packager that drops .json files.
- */
-export const PACKAGE_VERSION = '1.70.0';
-/** The floor a store takes on its first expiring key: the first release with schema v53, set by hand in that release; scripts/check-expiring-keys-floor.mjs gates it. */
+/** Single source of truth for the package version, written by scripts/sync-version.mjs; never edit by hand. Read by the db rollback guard, /health, MCP.
+ * A constant, not a runtime package.json read: the published bundle may lack package.json on a path ESM can resolve. */
+export const PACKAGE_VERSION = '1.72.0';
+/** The floor a store takes on its first expiring key: the first release with schema
+ * v53, set by hand in that release; scripts/check-expiring-keys-floor.mjs gates it. */
 export const EXPIRING_KEYS_MIN_BINARY = '1.64.0';
 /** The floor a store takes on its first session bind or owner snapshot: first release with v54; set by hand in that release. */
 export const TASK_OWNER_MIN_BINARY = '1.64.0';

package/dist/{store → util}/yaml.d.ts

@@ -1,8 +1,4 @@
-/**
- * Minimal YAML frontmatter serializer/deserializer.
- * No external deps. Handles simple key-value + arrays (inline only).
- * Sufficient for the MemoryEntry frontmatter schema.
- */
+/** Minimal YAML frontmatter serializer/deserializer with no external deps: simple key-value pairs and inline arrays, enough for the MemoryEntry schema. */
 type YamlValue = string | number | boolean | null | string[] | number[];
 export declare function dumpFrontmatter(obj: Record<string, YamlValue>): string;
 export interface ParsedFrontmatter {

package/dist/{store → util}/yaml.js

@@ -1,13 +1,9 @@
-/**
- * Minimal YAML frontmatter serializer/deserializer.
- * No external deps. Handles simple key-value + arrays (inline only).
- * Sufficient for the MemoryEntry frontmatter schema.
- */
+/** Minimal YAML frontmatter serializer/deserializer with no external deps: simple key-value pairs and inline arrays, enough for the MemoryEntry schema. */
 const SCALAR_LOOKALIKE = /^(null|true|false|-?\d+(\.\d+)?)$/;
 const UNESCAPES = new Map([['\\', '\\'], ['"', '"'], ['n', '\n'], ['r', '\r']]);
 function escapeString(s) {
     // A string that reads as null, a boolean or a number is quoted so it comes back a string.
-    if (/[:#\[\]{},\n\r"']/.test(s) || s.trim() !== s || s === '' || SCALAR_LOOKALIKE.test(s)) {
+    if (/[:#[\]{},\n\r"']/.test(s) || s.trim() !== s || s === '' || SCALAR_LOOKALIKE.test(s)) {
         const escaped = s.replace(/\\/g, '\\\\').replace(/"/g, '\\"').replace(/\n/g, '\\n').replace(/\r/g, '\\r');
         return `"${escaped}"`;
     }

package/extensions/openclaw-plugin/index.ts

@@ -352,7 +352,7 @@ export default function register(api: any) {
   api.registerTool((ctx: HippoRuntimeContext) => ({
     name: 'hippo_outcome',
     description:
-      'Report whether recalled memories were useful. Strengthens good memories (+5 days half-life) and weakens bad ones (-3 days). Call after completing work.',
+      "Report whether recalled memories were useful. Good outcomes slow a memory's decay and bad ones speed it up, in proportion to its record. Call after completing work.",
     parameters: {
       type: 'object',
       properties: {

package/extensions/openclaw-plugin/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "hippo-memory",
   "name": "Hippo Memory",
   "description": "Make your agent's memory work like a brain. Hippo is long-term memory for coding agents.",
-  "version": "1.70.0",
+  "version": "1.72.0",
 
   "configSchema": {
     "type": "object",

package/extensions/openclaw-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hippo-memory",
-  "version": "1.70.0",
+  "version": "1.72.0",
   "type": "module",
   "description": "Make your agent's memory work like a brain. Hippo is long-term memory for coding agents.",
   "main": "index.ts",

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "hippo-memory",
   "name": "Hippo Memory",
   "description": "Make your agent's memory work like a brain. Hippo is long-term memory for coding agents.",
-  "version": "1.70.0",
+  "version": "1.72.0",
   "configSchema": {
     "type": "object",
     "additionalProperties": false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hippo-memory",
-  "version": "1.70.0",
+  "version": "1.72.0",
   "description": "Make your agent's memory work like a brain. Hippo is long-term memory for coding agents.",
   "mcpName": "io.github.kitfunso/hippo-memory",
   "type": "module",
@@ -39,7 +39,7 @@
     "test": "vitest run",
     "test:watch": "vitest",
     "test:coverage": "vitest run --coverage",
-    "test:delivery-ledger": "vitest run tests/delivery-ledger",
+    "test:delivery-ledger": "vitest run tests/delivery-ledger tests/migration-v55",
     "test:eval": "vitest run --config vitest.eval.config.ts",
     "lint": "oxlint",
     "sbom": "node scripts/sbom.mjs",

package/dist/cli/provenance-coverage.d.ts

@@ -1,18 +0,0 @@
-import { MemoryEntry } from '../core/memory.js';
-export interface ProvenanceCoverage {
-    rawTotal: number;
-    rawWithEnvelope: number;
-    coverage: number;
-    gaps: Array<{
-        id: string;
-        missing: ('owner' | 'artifact_ref')[];
-    }>;
-}
-/**
- * Provenance coverage gate: every `kind='raw'` row must carry both `owner`
- * and `artifact_ref`. Distilled / superseded / archived rows are excluded —
- * those are derivative or terminal, not source receipts. Coverage of 1.0 on
- * a non-empty raw set is the ship gate from the Company Brain scorecard.
- */
-export declare function buildProvenanceCoverage(entries: MemoryEntry[]): ProvenanceCoverage;
-//# sourceMappingURL=provenance-coverage.d.ts.map

package/dist/connectors/github/cli-impl.d.ts

@@ -1,25 +0,0 @@
-/**
- * Implementation of `hippo github` CLI subcommands. Extracted from the main
- * cli.ts so unit tests can import these functions directly without triggering
- * the cli.ts main() side effects. The cli.ts dispatcher re-exports the
- * top-level cmdGithub.
- *
- * Subcommands mirror the Slack connector shape (cli.ts §Slack subcommands):
- *   - hippo github backfill --repo <owner/name> [--since ISO] [--max <N>]
- *   - hippo github dlq list
- *   - hippo github dlq replay <id> [--force]
- */
-import { type GitHubFetcher } from './octokit-client.js';
-type FlagValue = string | boolean | string[];
-type Flags = Record<string, FlagValue>;
-export declare function printGithubBackfillUsage(): void;
-/**
- * `hippo github backfill`. The fetcher is injectable so tests can drive the
- * code path without hitting the network. Defaults to `realGitHubFetcher`.
- */
-export declare function cmdGithubBackfill(hippoRoot: string, flags: Flags, fetcher?: GitHubFetcher): Promise<void>;
-export declare function cmdGithubDlqList(hippoRoot: string, _flags: Flags): void;
-export declare function cmdGithubDlqReplay(hippoRoot: string, args: string[], flags: Flags): Promise<void>;
-export declare function cmdGithub(hippoRoot: string, args: string[], flags: Flags): Promise<void>;
-export {};
-//# sourceMappingURL=cli-impl.d.ts.map

package/dist/sharing/scope.d.ts

@@ -1,14 +0,0 @@
-/**
- * Detect the current operational scope from environment signals.
- * Returns a scope name string (no prefix), or null if no scope detected.
- * Priority: HIPPO_SCOPE > GSTACK_SKILL > OPENCLAW_SKILL.
- *
- * Pure env var reads: no I/O, safe to call from hot paths (e.g. UserPromptSubmit hook).
- */
-export declare function detectScope(): string | null;
-/**
- * Compute scope match between a memory's scope tags and the active scope.
- * Returns: 1 if matching scope, -1 if mismatching scope, 0 if neutral (no scope on either side).
- */
-export declare function scopeMatch(memoryTags: string[], activeScope: string | null): -1 | 0 | 1;
-//# sourceMappingURL=scope.d.ts.map

package/dist/sharing/shared.d.ts

@@ -1,187 +0,0 @@
-/**
- * Cross-agent shared memory for Hippo.
- * Global store is shared across all projects.
- * Resolution: $HIPPO_HOME > $XDG_DATA_HOME/hippo > ~/.hippo/
- * Local .hippo/ stores are per-project.
- */
-import { MemoryEntry } from '../core/memory.js';
-import { type SearchResult, type ResultCost } from '../core/search-types.js';
-import type { HybridVectorCandidates } from '../search/vector.js';
-import type { DatabaseSyncLike } from '../db/index.js';
-/**
- * Returns the path to the global Hippo store.
- * Resolution order: $HIPPO_HOME > $XDG_DATA_HOME/hippo > ~/.hippo/
- */
-export declare function getGlobalRoot(): string;
-/**
- * Ensure the global store exists.
- */
-export declare function initGlobal(): void;
-/** Copies a local memory to the global store and returns the copy, which gets a new `g_` id so it cannot collide. */
-export declare function promoteToGlobal(localRoot: string, id: string, opts?: {
-    actor?: string;
-    tenantId?: string;
-    afterWrite?: (db: DatabaseSyncLike, globalId: string) => void;
-    /** Also writes one `promote` audit row for the copy ({sourceId}), in the copy's own transaction. */
-    auditAs?: {
-        tenantId: string;
-        actor: string;
-    };
-}): MemoryEntry;
-export interface SearchOptions {
-    budget?: number;
-    now?: Date;
-    minResults?: number;
-    /** Tenant scope for both stores. Undefined = no filter (legacy single-tenant). */
-    tenantId?: string;
-}
-/**
- * Search across both local and global stores, merging results.
- * Local results are boosted by 1.2x to prefer project-specific context.
- * Returns results sorted by adjusted score, within combined token budget.
- */
-export declare function searchBoth(query: string, localRoot: string, globalRoot: string, options?: SearchOptions): SearchResult[];
-export interface HybridSearchOptions extends SearchOptions {
-    embeddingWeight?: number;
-    explain?: boolean;
-    mmr?: boolean;
-    mmrLambda?: number;
-    /** Multiplier applied to local-store scores when merging with global.
-     *  Defaults to 1.2. Use 1.0 to remove the local bias for eval comparisons. */
-    localBump?: number;
-    /** Active scope for scope-boost scoring. Auto-detected if not provided. */
-    scope?: string | null;
-    /** Include superseded memories in results. Default false. */
-    includeSuperseded?: boolean;
-    /** Filter to memories current at this ISO date string. */
-    asOf?: string;
-    /** Budget cost per result, spent the same way in each store and in the merged list. */
-    cost?: ResultCost;
-    /** Propagated to underlying hybridSearch calls.
-     *  Per-call > env HIPPO_SUMMARY_DEBOOST > 0.85 default. */
-    summaryDeboost?: number;
-    /** Propagated. Default true (1.05 boost if rebuilt within 7d). */
-    summaryFreshness?: boolean;
-    /** v39 memory scope isolation: optional admission predicate applied to the
-     *  loaded candidate entries of BOTH stores BEFORE ranking, cross-store
-     *  content-dedupe, and budgeting. Without it, an excluded row can shadow
-     *  its admitted duplicate in the dedupe pass, or saturate the budget.
-     *  Default undefined = unchanged behavior (recall paths never set it). */
-    entryFilter?: (entry: MemoryEntry) => boolean;
-    /** Recall-mode scope filter, consumed by `searchBothHybrid` only.
-     *  ABSENT (undefined) is the only unfiltered mode: both stores load via
-     *  `loadSearchEntries` unchanged (background pipelines / eval callers).
-     *  PRESENT switches the internal loads to `loadRecallSearchEntries` (SQL
-     *  scope predicate) plus the recall-scope JS post-filter:
-     *    `{}`                                  = default-deny (`unknown:legacy`
-     *                                            + `<source>:private:*` excluded)
-     *    `{ requested: 'X' }`                  = exact match on scope X
-     *                                            (api.recall semantics)
-     *    `{ requested: 'X', additive: true }`  = default-admitted set PLUS
-     *                                            scope X (CLI --scope
-     *                                            semantics; see recall-scope.ts
-     *                                            passesCliRecallScopeFilter)
-     *  Object form on purpose — the sibling `scope` option above already gives
-     *  `null` a different meaning (boost-neutral), so a flat `string | null`
-     *  here would overload null with contradictory semantics. Do NOT pass an
-     *  empty object casually from non-recall paths. */
-    recallScope?: {
-        requested?: string;
-        additive?: boolean;
-        ownScope?: string;
-    };
-}
-/**
- * Hybrid search across both local and global stores, using embeddings when available.
- * Async version of searchBoth that calls hybridSearch instead of search.
- */
-export declare function searchBothHybrid(query: string, localRoot: string, globalRoot: string, options?: HybridSearchOptions): Promise<SearchResult[]>;
-/** Hybrid ranking of rows already loaded from each store: the local bump, one copy per text, then the shared budget. */
-export declare function rankBothStores(query: string, roots: {
-    local: string;
-    global: string;
-}, entries: {
-    local: MemoryEntry[];
-    global: MemoryEntry[];
-}, vectorCandidates: HybridVectorCandidates, options?: HybridSearchOptions): Promise<SearchResult[]>;
-/** Tags whose rows only a hand-run share or promote may copy to the global store; derived rows inherit them. */
-export declare const NEVER_AUTO_SHARE_TAGS: ReadonlySet<string>;
-export declare function neverAutoShareTags(sources: readonly MemoryEntry[]): string[];
-/** Tags whose rows sleep keeps as written: never merged, never sent to LLM extraction. Conflict detection keeps its own list. */
-export declare const NO_MERGE_TAGS: ReadonlySet<string>;
-/**
- * Estimate how well a memory would transfer to other projects.
- * Returns 0..1 where >0.5 = good candidate for sharing.
- */
-export declare function transferScore(entry: MemoryEntry): number;
-/**
- * Share a memory to the global store with attribution.
- * Enriches the source field with project path and timestamp.
- * Returns the new global entry, or null if transfer score is too low.
- */
-export declare function shareMemory(localRoot: string, id: string, options?: {
-    force?: boolean;
-    tenantId?: string;
-    skipEmbed?: boolean;
-}): MemoryEntry | null;
-/**
- * List all projects that have contributed memories to the global store.
- * Parses the source field for 'shared:<project>:' or 'promoted:<path>' patterns.
- *
- * `tenantId` is optional. When provided, the global entries
- * are filtered to that tenant before aggregation — matches every other
- * read path's default-safe behaviour. When undefined, host-wide (back-compat
- * for legacy callers like CLI standalone + dashboard internal use). Operators
- * who genuinely want cross-tenant peer discovery can pass undefined or
- * use direct SQL.
- */
-export declare function listPeers(globalRoot?: string, tenantId?: string): Array<{
-    project: string;
-    count: number;
-    latest: string;
-}>;
-type AutoShareStats = {
-    secretSkipped: number;
-    rejectedSkipped?: number;
-    neverAutoShareSkipped?: number;
-};
-/**
- * Auto-share: local memories with high transfer scores, not already global, no NEVER_AUTO_SHARE_TAGS tag.
- * Returns the list of shared entries.
- *
- * `options.tenantId` is opt-in. When provided, the LOCAL-entries read is
- * scoped to that tenant. When undefined, the local read is host-wide (current
- * behaviour). The GLOBAL-entries read is always unioned — the global root IS
- * the cross-tenant aggregate by design. `api.sleep` passes no tenantId
- * because `sleep` is host-wide by intent.
- *
- * `options.stats` is an opt-in out-param. When provided,
- * `stats.secretSkipped` is incremented once per row that passed every OTHER
- * admission gate (transfer score, not-already-global) and was withheld SOLELY
- * by the secret veto — i.e. it counts shares actually prevented, not secret
- * rows merely present. Filled identically under `dryRun`.
- *
- * `stats.rejectedSkipped` (optional) is incremented once per candidate
- * refused by the GLOBAL store's rejection tombstone (RejectedValueError from
- * shareMemory -> writeEntry). Unlike secretSkipped, this can only be
- * detected by attempting the write — `dryRun` returns candidates before the
- * write loop runs, so `rejectedSkipped` stays at its initial value under
- * `dryRun` (candidates that WOULD be refused are not distinguished in the
- * dry-run preview).
- */
-export declare function autoShare(localRoot: string, options?: {
-    minScore?: number;
-    dryRun?: boolean;
-    tenantId?: string;
-    stats?: AutoShareStats;
-}): MemoryEntry[];
-/**
- * Copy all global memories into the local store.
- * Skips entries that already exist locally, by ID or by text (promote and share copy under a new ID).
- * Returns the count of newly copied entries.
- */
-export declare function syncGlobalToLocal(localRoot: string, globalRoot: string, opts?: {
-    includeCrossProject?: boolean;
-}): number;
-export {};
-//# sourceMappingURL=shared.d.ts.map