hippo-memory 1.71.0 → 1.72.0

package/dist/cli/context.js

@@ -1,26 +1,27 @@
 // The `hippo context` verb, which the per-prompt hook also runs; main() loads it lazily from the command table.
-import { isSubagentPayload } from '../store/token-ledger.js';
+import { isSubagentPayload } from '../util/hook-payload.js';
 import { estimateTokens } from '../util/token-text.js';
 import { autoDetectContext } from '../api/context-auto.js';
-import { detectScope } from '../sharing/scope.js';
+import { detectScope } from '../core/active-scope.js';
 import { bookLedgerTurn } from '../api/ledger-db.js';
 import { readHookStdin } from './stdin.js';
 import { isJsonObject, isJsonString } from '../util/json.js';
 import * as api from '../api/index.js';
 import { DEFAULT_CONTEXT_BUDGET } from '../api/context.js';
-import { resolveTenantId } from '../store/tenant.js';
 import { cliApiContext } from './api-context.js';
 import { renderAmbientSummary } from '../core/ambient.js';
 import { contextBlockLines, contextCost, crossProjectLines, settleTokens } from '../api/context-render.js';
-import { additionalContextOutput, flushDeliveryRecorder, hasContextData, sessionStartEnvelope, toRenderItems, } from '../api/prompt-hook.js';
+import { additionalContextOutput, flushDeliveryRecorder, hasContextData, startDeliveryRecorder, sessionStartEnvelope, toRenderItems, } from '../api/prompt-hook.js';
 import { parseLimitFlag, parseCountFlag, parseBudgetFlag, flagIsTrue } from './flag-values.js';
 import { requireInit } from './shared.js';
 import { printActiveTaskSnapshot, printSessionEvents, printHandoff, captureConsole } from './print.js';
-import { hostSessionId, hookStoreRoot, hookRuntime, payloadCwdRoot, runHookWithStores, inPilotHoldout, startDeliveryRecorder } from './hook-runtime.js';
-async function cmdContext(hippoRoot, args, flags, stdinText) {
-    const rec = startDeliveryRecorder(hippoRoot, stdinText, hookRuntime(flags), flagIsTrue(flags, 'pinned-only') ? undefined : 'context');
+import { hostSessionId, hookStoreRoot, hookRuntime, payloadCwdRoot, runHookWithStores, inPilotHoldout } from './hook-runtime.js';
+async function cmdContext(hippoRoot, tenantId, args, flags, stdinText) {
+    const rec = startDeliveryRecorder(cliApiContext(hippoRoot, tenantId), {
+        stdinText, runtime: hookRuntime(flags), eventType: flagIsTrue(flags, 'pinned-only') ? undefined : 'context', envSessionId: hostSessionId(),
+    });
     // No try/finally: a render throw keeps its own exit code and writes no event.
-    await renderContext(hippoRoot, args, flags, stdinText, rec);
+    await renderContext(hippoRoot, tenantId, args, flags, stdinText, rec);
     flushDeliveryRecorder(rec);
 }
 /** The hook payload's session id and raw prompt; a malformed or empty payload yields neither. */
@@ -43,7 +44,7 @@ function readHookPayload(stdinText) {
     }
     return { sessionId, prompt };
 }
-async function renderContext(hippoRoot, args, flags, stdinText, rec) {
+async function renderContext(hippoRoot, resolvedTenant, args, flags, stdinText, rec) {
     // --pinned-only fires on every prompt, even where no local .hippo exists, so it skips requireInit
     // and api.getContext falls back to global-only.
     const pinnedOnly = flagIsTrue(flags, 'pinned-only');
@@ -53,7 +54,6 @@ async function renderContext(hippoRoot, args, flags, stdinText, rec) {
     const session = resolveContextSession(stdinText);
     const { currentSessionId, ledgerSessionId, payloadSessionId } = session;
     // The pilot arm is booked at the first hook call whatever the flags, so the holdout sees no budget or content branch.
-    const resolvedTenant = resolveTenantId({});
     if (inPilotHoldout(hippoRoot, resolvedTenant, currentSessionId, payloadSessionId !== undefined)) {
         rec?.disabled();
         return;
@@ -199,10 +199,10 @@ function printCrossProjectSection(items) {
     for (const line of crossProjectLines(items))
         console.log(line);
 }
-export async function handleContext({ hippoRoot, args, flags }) {
+export async function handleContext({ hippoRoot, tenantId, args, flags }) {
     // Bounded, not a TTY guard: the hot stdin path and a manual run share this one command.
     const { text: stdinText } = await readHookStdin();
     const root = payloadCwdRoot(hippoRoot, stdinText, hookRuntime(flags));
-    await runHookWithStores(() => cmdContext(hookStoreRoot(root), args, flags, stdinText));
+    await runHookWithStores(() => cmdContext(hookStoreRoot(root), tenantId, args, flags, stdinText));
 }
 //# sourceMappingURL=context.js.map

package/dist/cli/continuity.d.ts

@@ -3,5 +3,5 @@ export declare function handleSnapshot({ hippoRoot, tenantId, args, flags }: Com
 export declare function handleSession({ hippoRoot, tenantId, args, flags }: CommandContext): void;
 export declare function handleHandoff({ hippoRoot, tenantId, args, flags }: CommandContext): void;
 export declare function handleCurrent({ hippoRoot, tenantId, args, flags }: CommandContext): void;
-export declare function handleWm({ hippoRoot, args, flags }: CommandContext): void;
+export declare function handleWm({ hippoRoot, tenantId, args, flags }: CommandContext): void;
 //# sourceMappingURL=continuity.d.ts.map

package/dist/cli/continuity.js

@@ -1,13 +1,12 @@
 // Where-you-left-off verbs: snapshot, session, handoff, current and working memory.
-import { saveActiveTaskSnapshot, loadActiveTaskSnapshot, clearActiveTaskSnapshot, appendSessionEvent, listSessionEvents, } from '../store/sessions.js';
-import { saveSessionHandoff, loadLatestHandoff, loadHandoffById, stampHandoffOutcome } from '../store/handoffs.js';
+import { snapshotSave as apiSnapshotSave, snapshotClear as apiSnapshotClear, snapshotLoad, sessionEventAppend, sessionEventList, continuityLatest, handoffStampOutcome, handoffSave, handoffLatest as apiHandoffLatest, handoffById, workingMemoryPush, workingMemoryRead, workingMemoryClear, workingMemoryFlush, } from '../api/continuity.js';
+import { cliApiContext } from './api-context.js';
 import { isHandoffOutcome, formatHandoffEvidenceLine } from '../core/handoff.js';
-import { wmPush, wmRead, wmClear, wmFlush } from '../store/working-memory.js';
 import { collectHandoffEvidence } from '../capture/handoff-evidence.js';
 import { printError } from './output.js';
 import { requireInit } from './shared.js';
 import { printActiveTaskSnapshot, printSessionEvents, printHandoff } from './print.js';
-import { boolFlag, isStringFlag } from './flag-values.js';
+import { boolFlag, isStringFlag, numberFlag } from './flag-values.js';
 import { CliExit } from './exit.js';
 const ISO_DATETIME_CHARS = 19;
 function snapshotSave(hippoRoot, tenantId, flags) {
@@ -19,7 +18,7 @@ function snapshotSave(hippoRoot, tenantId, flags) {
         printError('Usage: hippo snapshot save --task <task> --summary <summary> --next-step <step> [--source <source>] [--session <session-id>]');
         throw new CliExit(1);
     }
-    const snapshot = saveActiveTaskSnapshot(hippoRoot, tenantId, {
+    const snapshot = apiSnapshotSave(cliApiContext(hippoRoot, tenantId), {
         task,
         summary,
         next_step: nextStep,
@@ -34,7 +33,7 @@ function snapshotSave(hippoRoot, tenantId, flags) {
     }
 }
 function snapshotClear(hippoRoot, tenantId, flags) {
-    const cleared = clearActiveTaskSnapshot(hippoRoot, tenantId, String(flags['status'] ?? 'cleared'));
+    const cleared = apiSnapshotClear(cliApiContext(hippoRoot, tenantId), String(flags['status'] ?? 'cleared'));
     if (!cleared) {
         console.log('No active task snapshot to clear.');
         return;
@@ -42,7 +41,7 @@ function snapshotClear(hippoRoot, tenantId, flags) {
     console.log('Cleared active task snapshot.');
 }
 function snapshotShow(hippoRoot, tenantId, flags) {
-    const snapshot = loadActiveTaskSnapshot(hippoRoot, tenantId);
+    const snapshot = snapshotLoad(cliApiContext(hippoRoot, tenantId));
     if (!snapshot) {
         if (flags['json']) {
             console.log(JSON.stringify({ snapshot: null }));
@@ -77,7 +76,7 @@ function sessionLog(hippoRoot, tenantId, s, flags) {
         printError('Usage: hippo session log --id <session-id> --content <text> [--type <type>] [--task <task>] [--source <source>]');
         throw new CliExit(1);
     }
-    const event = appendSessionEvent(hippoRoot, tenantId, {
+    const event = sessionEventAppend(cliApiContext(hippoRoot, tenantId), {
         session_id: s.sessionId,
         task: s.task || null,
         event_type: eventType || 'note',
@@ -89,7 +88,7 @@ function sessionLog(hippoRoot, tenantId, s, flags) {
     console.log(`   Type: ${event.event_type}`);
 }
 function sessionShow(hippoRoot, tenantId, s, flags) {
-    const events = listSessionEvents(hippoRoot, tenantId, {
+    const events = sessionEventList(cliApiContext(hippoRoot, tenantId), {
         session_id: s.sessionId || undefined,
         task: s.task || undefined,
         limit: s.limit,
@@ -101,9 +100,8 @@ function sessionShow(hippoRoot, tenantId, s, flags) {
     printSessionEvents(events);
 }
 function sessionLatest(hippoRoot, tenantId, s, flags) {
-    const snapshot = loadActiveTaskSnapshot(hippoRoot, tenantId);
-    const events = listSessionEvents(hippoRoot, tenantId, {
-        session_id: s.sessionId || snapshot?.session_id || undefined,
+    const { snapshot, events } = continuityLatest(cliApiContext(hippoRoot, tenantId), {
+        sessionId: s.sessionId,
         limit: s.limit,
     });
     if (flags['json']) {
@@ -135,7 +133,7 @@ function sessionComplete(hippoRoot, tenantId, s, flags) {
     const metadata = { ended_at: new Date().toISOString() };
     if (summary)
         metadata.summary = summary;
-    const event = appendSessionEvent(hippoRoot, tenantId, {
+    const event = sessionEventAppend(cliApiContext(hippoRoot, tenantId), {
         session_id: sessionId,
         task: task || null,
         event_type: 'session_complete',
@@ -144,7 +142,7 @@ function sessionComplete(hippoRoot, tenantId, s, flags) {
         metadata,
     });
     console.log(`Completed session ${event.session_id} with outcome=${outcome} (event #${event.id})`);
-    const stamped = stampHandoffOutcome(hippoRoot, tenantId, sessionId, outcome);
+    const stamped = handoffStampOutcome(cliApiContext(hippoRoot, tenantId), sessionId, outcome);
     if (stamped > 0) {
         console.log(`Stamped outcome on handoff for session ${sessionId}`);
     }
@@ -154,7 +152,7 @@ export function handleSession({ hippoRoot, tenantId, args, flags }) {
     const subcommand = args[0] ?? 'show';
     const sessionId = String(flags['id'] ?? flags['session'] ?? '').trim();
     const task = String(flags['task'] ?? '').trim();
-    const limit = Math.max(1, parseInt(String(flags['limit'] ?? '8'), 10) || 8);
+    const limit = Math.max(1, numberFlag(flags, 'limit') || 8);
     const s = { sessionId, task, limit };
     if (subcommand === 'log')
         return sessionLog(hippoRoot, tenantId, s, flags);
@@ -170,7 +168,7 @@ export function handleSession({ hippoRoot, tenantId, args, flags }) {
     throw new CliExit(1);
 }
 function sessionResume(hippoRoot, tenantId, sessionId) {
-    const handoff = loadLatestHandoff(hippoRoot, tenantId, sessionId || undefined);
+    const handoff = apiHandoffLatest(cliApiContext(hippoRoot, tenantId), sessionId || undefined);
     if (!handoff) {
         console.log('No handoff to resume from.');
         return;
@@ -217,10 +215,13 @@ function sessionResume(hippoRoot, tenantId, sessionId) {
 function flagList(value) {
     return Array.isArray(value) ? value : (isStringFlag(value) ? [value] : []);
 }
+const HANDOFF_CREATE_USAGE = 'Usage: hippo handoff create --summary "..." [--next "..."] [--session <id>] [--task <id>] [--artifact <path>...] ' +
+    '[--constraint <text>...] [--outcome <success|failure|partial>] [--target-runtime <name>] [--card-id <id>] ' +
+    '[--tests <pass|fail|unknown>]';
 function handoffCreate(hippoRoot, tenantId, flags) {
     const summary = String(flags['summary'] ?? '').trim();
     if (!summary) {
-        printError('Usage: hippo handoff create --summary "..." [--next "..."] [--session <id>] [--task <id>] [--artifact <path>...] [--constraint <text>...] [--outcome <success|failure|partial>] [--target-runtime <name>] [--card-id <id>] [--tests <pass|fail|unknown>]');
+        printError(HANDOFF_CREATE_USAGE);
         throw new CliExit(1);
     }
     const outcomeRaw = flags['outcome'];
@@ -244,7 +245,7 @@ function handoffCreate(hippoRoot, tenantId, flags) {
     const cardId = String(flags['card-id'] ?? '').trim() || undefined;
     const testStatus = String(flags['tests'] ?? '').trim();
     const evidence = collectHandoffEvidence(process.cwd(), testStatus === 'pass' || testStatus === 'fail' ? testStatus : 'unknown');
-    const handoff = saveSessionHandoff(hippoRoot, tenantId, {
+    const handoff = handoffSave(cliApiContext(hippoRoot, tenantId), {
         version: 1,
         sessionId,
         repoRoot: process.cwd(),
@@ -283,7 +284,7 @@ function printCreatedHandoff(handoff) {
 }
 function handoffLatest(hippoRoot, tenantId, flags) {
     const sessionId = String(flags['session'] ?? flags['id'] ?? '').trim() || undefined;
-    const handoff = loadLatestHandoff(hippoRoot, tenantId, sessionId);
+    const handoff = apiHandoffLatest(cliApiContext(hippoRoot, tenantId), sessionId);
     if (!handoff) {
         if (flags['json']) {
             console.log(JSON.stringify({ handoff: null }));
@@ -310,7 +311,7 @@ function handoffShow(hippoRoot, tenantId, args, flags) {
         printError(`Invalid handoff ID: ${idArg}`);
         throw new CliExit(1);
     }
-    const handoff = loadHandoffById(hippoRoot, tenantId, handoffId);
+    const handoff = handoffById(cliApiContext(hippoRoot, tenantId), handoffId);
     if (!handoff) {
         if (flags['json']) {
             console.log(JSON.stringify({ handoff: null }));
@@ -363,12 +364,7 @@ function printCurrentState(snapshot, events) {
 }
 function currentShow(hippoRoot, tenantId, flags) {
     const asJson = boolFlag(flags, 'json');
-    const snapshot = loadActiveTaskSnapshot(hippoRoot, tenantId);
-    const sessionId = snapshot?.session_id ?? undefined;
-    const events = listSessionEvents(hippoRoot, tenantId, {
-        session_id: sessionId,
-        limit: 5,
-    });
+    const { snapshot, events } = continuityLatest(cliApiContext(hippoRoot, tenantId), { limit: 5 });
     if (asJson) {
         console.log(JSON.stringify({
             snapshot: snapshot ?? null,
@@ -397,54 +393,55 @@ export function handleCurrent({ hippoRoot, tenantId, args, flags }) {
     throw new CliExit(1);
 }
 // Working Memory
-export function handleWm({ hippoRoot, args, flags }) {
+export function handleWm({ hippoRoot, tenantId, args, flags }) {
     requireInit(hippoRoot);
     const subcommand = args[0] ?? '';
     if (subcommand === 'push')
-        return wmPushCmd(hippoRoot, flags);
+        return wmPushCmd(hippoRoot, tenantId, flags);
     if (subcommand === 'read')
-        return wmReadCmd(hippoRoot, flags);
+        return wmReadCmd(hippoRoot, tenantId, flags);
     if (subcommand === 'clear') {
         const scope = flags['scope'] ? String(flags['scope']).trim() : undefined;
         const sessionId = flags['session'] ? String(flags['session']).trim() : undefined;
-        const count = wmClear(hippoRoot, { scope, sessionId });
+        const count = workingMemoryClear(cliApiContext(hippoRoot, tenantId), { scope, sessionId });
         console.log(`Cleared ${count} working memory entries.`);
         return;
     }
     if (subcommand === 'flush') {
         const scope = flags['scope'] ? String(flags['scope']).trim() : undefined;
         const sessionId = flags['session'] ? String(flags['session']).trim() : undefined;
-        const count = wmFlush(hippoRoot, { scope, sessionId });
+        const count = workingMemoryFlush(cliApiContext(hippoRoot, tenantId), { scope, sessionId });
         console.log(`Flushed ${count} working memory entries.`);
         return;
     }
     printError('Usage: hippo wm <push|read|clear|flush>');
     throw new CliExit(1);
 }
-function wmPushCmd(hippoRoot, flags) {
+const WM_DEFAULT_IMPORTANCE = 0.5;
+function wmPushCmd(hippoRoot, tenantId, flags) {
     const scope = String(flags['scope'] ?? 'default').trim();
     const content = String(flags['content'] ?? '').trim();
-    const importance = parseFloat(String(flags['importance'] ?? '0.5'));
+    const importance = numberFlag(flags, 'importance') ?? WM_DEFAULT_IMPORTANCE;
     const sessionId = flags['session'] ? String(flags['session']).trim() : undefined;
     const taskId = flags['task'] ? String(flags['task']).trim() : undefined;
     if (!content) {
         printError('Usage: hippo wm push --scope <scope> --content "..." [--importance 0.8] [--session <id>] [--task <id>]');
         throw new CliExit(1);
     }
-    const id = wmPush(hippoRoot, {
+    const id = workingMemoryPush(cliApiContext(hippoRoot, tenantId), {
         scope,
         content,
-        importance: Number.isFinite(importance) ? importance : 0.5,
+        importance,
         sessionId,
         taskId,
     });
-    console.log(`Pushed working memory #${id} (scope=${scope}, importance=${Number.isFinite(importance) ? importance : 0.5})`);
+    console.log(`Pushed working memory #${id} (scope=${scope}, importance=${importance})`);
 }
-function wmReadCmd(hippoRoot, flags) {
+function wmReadCmd(hippoRoot, tenantId, flags) {
     const scope = flags['scope'] ? String(flags['scope']).trim() : undefined;
     const sessionId = flags['session'] ? String(flags['session']).trim() : undefined;
-    const limit = parseInt(String(flags['limit'] ?? '20'), 10) || 20;
-    const items = wmRead(hippoRoot, { scope, sessionId, limit });
+    const limit = numberFlag(flags, 'limit') || 20;
+    const items = workingMemoryRead(cliApiContext(hippoRoot, tenantId), { scope, sessionId, limit });
     if (flags['json']) {
         console.log(JSON.stringify({ items }, null, 2));
         return;

package/dist/cli/curate.d.ts

@@ -1,6 +1,6 @@
 import { type CommandContext } from './flag-values.js';
 export declare function handleOutcome({ hippoRoot, tenantId, flags }: CommandContext): void;
-export declare function handleConflicts({ hippoRoot, flags }: CommandContext): void;
+export declare function handleConflicts({ hippoRoot, tenantId, flags }: CommandContext): void;
 export declare function handleResolve({ hippoRoot, tenantId, args, flags }: CommandContext): Promise<void>;
 export declare function handleReject({ hippoRoot, tenantId, args, flags }: CommandContext): void;
 export declare function handleRejections({ hippoRoot, tenantId, flags }: CommandContext): void;

package/dist/cli/curate.js

@@ -1,12 +1,11 @@
 // Verbs that weaken, suppress or retire memories: outcome, forget, conflicts, reject, dormant, quarantine, invalidate.
+import { truncateWithEllipsis } from '../util/ellipsize.js';
 import * as path from 'path';
-import { listMemoryConflicts, resolveConflict } from '../store/conflicts.js';
-import { rejectValue, unrejectValue, listRejectionsForTenant } from '../trust/reject-flow.js';
-import { RejectedValueError } from '../store/rejection.js';
+import { unrejectValue, listRejectionsForTenant } from '../trust/reject-flow.js';
+import { RejectedValueError } from '../core/api-errors.js';
 import { loadConfig } from '../core/config.js';
 import { RawAppendOnlyError } from '../core/raw-append-only.js';
 import { isGitRepo } from '../learn/autolearn.js';
-import { invalidateMatching } from '../learn/invalidation.js';
 import * as api from '../api/index.js';
 import { getMemory } from '../api/memories.js';
 import * as client from './client.js';
@@ -116,12 +115,12 @@ async function previewForget(hippoRoot, tenantId, id, archive) {
         printError(`Could not archive ${id}: memory ${id} is not raw (kind=${entry.kind})`);
         throw new CliExit(1);
     }
-    const snippet = entry.content.length > CONTENT_PREVIEW_CHARS ? `${entry.content.slice(0, CONTENT_PREVIEW_CHARS)}...` : entry.content;
+    const snippet = truncateWithEllipsis(entry.content, CONTENT_PREVIEW_CHARS);
     console.log(`Would ${archive ? 'archive' : 'forget'} ${id} (dry run, nothing changed): "${snippet}"`);
 }
-export function handleConflicts({ hippoRoot, flags }) {
+export function handleConflicts({ hippoRoot, tenantId, flags }) {
     requireInit(hippoRoot);
-    const conflicts = listMemoryConflicts(hippoRoot, String(flags['status'] ?? 'open'));
+    const conflicts = api.listConflicts(cliApiContext(hippoRoot, tenantId), String(flags['status'] ?? 'open'), { everyTenant: true });
     if (flags['json']) {
         console.log(JSON.stringify({ conflicts }, null, 2));
         return;
@@ -140,7 +139,7 @@ export function handleConflicts({ hippoRoot, flags }) {
 }
 /** Shown when --keep is missing, to help the user decide. */
 async function showConflictForResolve(hippoRoot, conflictId, tenantId) {
-    const conflicts = listMemoryConflicts(hippoRoot, 'open', tenantId);
+    const conflicts = api.listConflicts(cliApiContext(hippoRoot, tenantId), 'open');
     const conflict = conflicts.find((c) => c.id === conflictId);
     if (!conflict) {
         printError(`Conflict ${conflictId} not found or already resolved.`);
@@ -155,11 +154,11 @@ async function showConflictForResolve(hippoRoot, conflictId, tenantId) {
     const entryB = await getMemory(ctx, conflict.memory_b_id);
     if (entryA) {
         console.log(`  [A] ${conflict.memory_a_id}:`);
-        console.log(`      ${entryA.content.slice(0, CONFLICT_PREVIEW_CHARS)}${entryA.content.length > CONFLICT_PREVIEW_CHARS ? '...' : ''}`);
+        console.log(`      ${truncateWithEllipsis(entryA.content, CONFLICT_PREVIEW_CHARS)}`);
     }
     if (entryB) {
         console.log(`  [B] ${conflict.memory_b_id}:`);
-        console.log(`      ${entryB.content.slice(0, CONFLICT_PREVIEW_CHARS)}${entryB.content.length > CONFLICT_PREVIEW_CHARS ? '...' : ''}`);
+        console.log(`      ${truncateWithEllipsis(entryB.content, CONFLICT_PREVIEW_CHARS)}`);
     }
     console.log('');
     console.log(`Resolve with: hippo resolve ${conflictId} --keep <memory_id> [--forget] [--reject-loser [--reason "<why>"]]`);
@@ -183,14 +182,12 @@ export async function handleResolve({ hippoRoot, tenantId, args, flags }) {
     // --reason is optional here, unlike `hippo reject`: resolve already has the conflict id and keepId.
     const rejectLoser = boolFlag(flags, 'reject-loser');
     const reasonFlag = stringFlag(flags, 'reason');
-    const result = resolveConflict(hippoRoot, conflictId, keepId, forgetLoser, tenantId, {
-        rejectLoserValue: rejectLoser,
+    const result = api.resolveMemoryConflict(cliApiContext(hippoRoot, tenantId), conflictId, {
+        keepId,
+        forget: forgetLoser,
+        rejectLoser,
         reason: reasonFlag,
     });
-    if (!result) {
-        printError(`Could not resolve conflict ${conflictId}. Check the ID and --keep value.`);
-        throw new CliExit(1);
-    }
     const action = rejectLoser
         ? 'rejected (tombstoned) and removed'
         : forgetLoser
@@ -222,10 +219,7 @@ export function handleReject({ hippoRoot, tenantId, args, flags }) {
         throw new CliExit(1);
     }
     try {
-        const result = rejectValue({
-            hippoRoot: root,
-            tenantId,
-            actor: 'cli',
+        const result = api.rejectOnHost(cliApiContext(root, tenantId), {
             reason,
             memoryId: valueFlag === undefined ? memoryId : undefined,
             value: valueFlag,
@@ -239,7 +233,7 @@ export function handleReject({ hippoRoot, tenantId, args, flags }) {
 }
 function printRejected(result, reason) {
     const digestPrefix = result.digest.slice(0, DIGEST_DISPLAY_CHARS);
-    const preview = result.content.length > CONTENT_PREVIEW_CHARS ? `${result.content.slice(0, CONTENT_PREVIEW_CHARS)}...` : result.content;
+    const preview = truncateWithEllipsis(result.content, CONTENT_PREVIEW_CHARS);
     console.log(`Rejected [${digestPrefix}...]: "${preview}"`);
     console.log(`  Reason: ${reason}`);
     if (result.removedIds.length > 0) {
@@ -357,10 +351,12 @@ function printDormantRows(rows, hasQuery, root) {
     }
     console.log(`${rows.length} dormant memor${rows.length === 1 ? 'y' : 'ies'}${hasQuery ? ' matching' : ''} (newest first):\n`);
     for (const row of rows) {
-        const preview = row.content.length > DORMANT_PREVIEW_CHARS ? `${row.content.slice(0, DORMANT_PREVIEW_CHARS)}...` : row.content;
+        const preview = truncateWithEllipsis(row.content, DORMANT_PREVIEW_CHARS);
         console.log(`--- ${row.id}`);
         console.log(`    ${preview}`);
-        console.log(`    Dormant since ${row.dormantAt.slice(0, DATE_PREFIX_CHARS)} (${row.reason}, strength ${row.strength.toFixed(STRENGTH_DECIMALS)})${row.tags.length > 0 ? `  tags: ${row.tags.join(', ')}` : ''}`);
+        console.log(`    Dormant since ${row.dormantAt.slice(0, DATE_PREFIX_CHARS)} ` +
+            `(${row.reason}, strength ${row.strength.toFixed(STRENGTH_DECIMALS)})` +
+            `${row.tags.length > 0 ? `  tags: ${row.tags.join(', ')}` : ''}`);
         console.log('');
     }
     console.log('Bring one back: hippo dormant restore <id>   Delete for good: hippo dormant forget <id>');
@@ -459,7 +455,7 @@ export async function handleForget({ hippoRoot, tenantId, args, flags }) {
         return;
     cmdForget(hippoRoot, tenantId, id, flags);
 }
-function invalidateChurn(hippoRoot, args, flags) {
+function invalidateChurn(hippoRoot, tenantId, args, flags) {
     if (args[0] || flags['id'] !== undefined) {
         printError('Usage: hippo invalidate --churn [--dry-run]');
         printError('--churn takes no pattern or --id.');
@@ -471,7 +467,7 @@ function invalidateChurn(hippoRoot, args, flags) {
     }
     const churnDryRun = flagIsTrue(flags, 'dry-run');
     let churnFailed = false;
-    for (const { root, result } of runChurnStaleForRepo(hippoRoot, churnDryRun)) {
+    for (const { root, result } of runChurnStaleForRepo(hippoRoot, tenantId, churnDryRun)) {
         if (result.error) {
             printError(`Churn-staleness check failed for ${root}: ${result.error}`);
             churnFailed = true;
@@ -497,7 +493,7 @@ function invalidateChurn(hippoRoot, args, flags) {
 export function handleInvalidate({ hippoRoot, tenantId, args, flags }) {
     requireInit(hippoRoot);
     if (flagIsTrue(flags, 'churn'))
-        return invalidateChurn(hippoRoot, args, flags);
+        return invalidateChurn(hippoRoot, tenantId, args, flags);
     const target = args[0];
     if (flagIsTrue(flags, 'id')) {
         // Value-less --id must never silently fall through to pattern mode
@@ -519,7 +515,7 @@ export function handleInvalidate({ hippoRoot, tenantId, args, flags }) {
         to: reason,
         type: 'migration',
     };
-    const result = invalidateMatching(hippoRoot, invTarget, tenantId, { dryRun, onlyId });
+    const result = api.invalidateMemories(cliApiContext(hippoRoot, tenantId), invTarget, { dryRun, onlyId });
     const label = target ? `"${target}"` : `--id ${onlyId}`;
     if (result.dryRun) {
         if (result.invalidated === 0) {

package/dist/cli/dag.d.ts

@@ -1,5 +1,5 @@
 import { type CommandContext } from './flag-values.js';
-export declare function handleDag({ hippoRoot, flags }: CommandContext): void;
+export declare function handleDag({ hippoRoot, tenantId, flags }: CommandContext): void;
 export declare function handleDrill({ hippoRoot, tenantId, args, flags }: CommandContext): Promise<void>;
 export declare function handleAssemble({ hippoRoot, tenantId, args, flags }: CommandContext): Promise<void>;
 //# sourceMappingURL=dag.d.ts.map

package/dist/cli/dag.js

@@ -1,7 +1,9 @@
 // DAG summary verbs: `hippo dag`, `hippo assemble` and `hippo drill`.
-import { loadAllEntries } from '../store/entry-reads.js';
+import { truncateWithEllipsis } from '../util/ellipsize.js';
 import * as api from '../api/index.js';
 import { assembleCost, assembleHeading, drillCost, settleTokens } from '../api/context-render.js';
+import { listMemories } from '../api/memories.js';
+import { cliApiContext } from './api-context.js';
 import { printError } from './output.js';
 import { parseBudgetFlag, flagIsTrue, stringFlag, numberFlag } from './flag-values.js';
 import { requireInit } from './shared.js';
@@ -13,9 +15,9 @@ const TREE_LEAF_PREVIEW_CHARS = 60;
 const DAG_HEAD_CHARS = 120;
 const DAG_SUMMARY_PREVIEW_CHARS = 200;
 const DAG_CHILD_PREVIEW_CHARS = 100;
-export function handleDag({ hippoRoot, flags }) {
+export function handleDag({ hippoRoot, tenantId, flags }) {
     requireInit(hippoRoot);
-    const entries = loadAllEntries(hippoRoot);
+    const entries = listMemories(cliApiContext(hippoRoot, tenantId), { everyTenant: true });
     const isStats = flagIsTrue(flags, 'stats');
     const byLevel = new Map();
     let unlinked = 0;
@@ -39,6 +41,17 @@ function printDagStats(byLevel, unlinked) {
     console.log(`  Level 0 (raw memories):     ${byLevel.get(0) ?? 0}`);
     console.log(`  Unlinked facts: ${unlinked}`);
 }
+function groupByParent(entries) {
+    const byParent = new Map();
+    for (const e of entries) {
+        if (!e.dag_parent_id)
+            continue;
+        const list = byParent.get(e.dag_parent_id) ?? [];
+        list.push(e);
+        byParent.set(e.dag_parent_id, list);
+    }
+    return byParent;
+}
 function printDagTree(entries) {
     // Tree view: L3 entity profiles as roots with L2 children indented, then orphan L2 summaries at top level.
     const profiles = entries.filter((e) => e.dag_level === 3);
@@ -52,6 +65,7 @@ function printDagTree(entries) {
         list.push(l2);
         childL2ByProfile.set(l2.dag_parent_id, list);
     }
+    const childrenByParent = groupByParent(entries);
     if (profiles.length === 0 && orphanL2.length === 0) {
         console.log('No DAG summaries yet. Run `hippo sleep` with ANTHROPIC_API_KEY set.');
         return;
@@ -68,7 +82,7 @@ function printDagTree(entries) {
             console.log(`   └─ 📌 ${l2.content.slice(0, TREE_CHILD_PREVIEW_CHARS)}`);
             if (l2Tags)
                 console.log(`      [${l2Tags}]`);
-            const facts = entries.filter((e) => e.dag_parent_id === l2.id);
+            const facts = childrenByParent.get(l2.id) ?? [];
             for (const f of facts) {
                 console.log(`      └─ ${f.content.slice(0, TREE_LEAF_PREVIEW_CHARS)}`);
             }
@@ -80,7 +94,7 @@ function printDagTree(entries) {
         console.log(`\n📌 ${summary.content.slice(0, CONTENT_PREVIEW_CHARS)}`);
         if (summaryTags)
             console.log(`   [${summaryTags}]`);
-        const children = entries.filter((e) => e.dag_parent_id === summary.id);
+        const children = childrenByParent.get(summary.id) ?? [];
         for (const child of children) {
             console.log(`   └─ ${child.content.slice(0, TREE_CHILD_PREVIEW_CHARS)}`);
         }
@@ -165,11 +179,12 @@ async function cmdDrillDown(hippoRoot, tenantId, summaryId, flags) {
         console.log(JSON.stringify(r, null, 2));
         return;
     }
-    console.log(`Summary ${r.summary.id} — ${r.summary.descendantCount} descendants${r.summary.earliestAt ? ` (${r.summary.earliestAt} → ${r.summary.latestAt})` : ''}`);
-    console.log(`  ${r.summary.content.slice(0, DAG_SUMMARY_PREVIEW_CHARS)}${r.summary.content.length > DAG_SUMMARY_PREVIEW_CHARS ? '…' : ''}`);
+    console.log(`Summary ${r.summary.id} — ${r.summary.descendantCount} descendants` +
+        `${r.summary.earliestAt ? ` (${r.summary.earliestAt} → ${r.summary.latestAt})` : ''}`);
+    console.log(`  ${truncateWithEllipsis(r.summary.content, DAG_SUMMARY_PREVIEW_CHARS, '…')}`);
     console.log(`\nChildren (${r.children.length}/${r.totalChildren}${r.truncated ? ', truncated' : ''}):`);
     for (const c of r.children) {
-        console.log(`  [L${c.dagLevel}] ${c.id} — ${c.content.slice(0, DAG_CHILD_PREVIEW_CHARS)}${c.content.length > DAG_CHILD_PREVIEW_CHARS ? '…' : ''}`);
+        console.log(`  [L${c.dagLevel}] ${c.id} — ${truncateWithEllipsis(c.content, DAG_CHILD_PREVIEW_CHARS, '…')}`);
     }
 }
 export async function handleDrill({ hippoRoot, tenantId, args, flags }) {

package/dist/cli/decisions.d.ts

@@ -1,5 +1,3 @@
 import { type CommandContext } from './flag-values.js';
-export declare function handlePredict({ hippoRoot, tenantId, args, flags }: CommandContext): void;
 export declare function handleDecide({ hippoRoot, tenantId, args, flags }: CommandContext): Promise<void>;
-export declare function handleIncident({ hippoRoot, tenantId, args, flags }: CommandContext): void;
 //# sourceMappingURL=decisions.d.ts.map