hippo-memory 2.0.0 → 2.1.0

package/dist/cli/session-hooks.js

@@ -16,27 +16,28 @@ import { cmdPreCompact, cmdPostCompact } from '../capture/compact.js';
 import { transcriptWorkingState } from '../capture/working-state.js';
 import { collectHandoffEvidence } from '../capture/handoff-evidence.js';
 import { copilotTranscriptFor, SESSION_ID_RE } from '../capture/copilot-transcript.js';
-import { loadTurnPosition, runSessionWorker, saveTurnPosition, turnsAfter } from '../capture/session-worker.js';
-import { isStringValue, readSessionEnd, readVscodeStop } from '../core/capture-contract.js';
+import { loadTurnPosition, runSessionWorker, saveTurnPosition, turnsAfter, } from '../capture/session-worker.js';
+import { isStringValue, readSessionEnd, readVscodeStop, } from '../core/capture-contract.js';
 import { loadConfig } from '../core/config.js';
-import { autoSleepDue } from '../api/auto-sleep.js';
+import { autoSleepDue } from '../api/sleep/auto-sleep.js';
 import { COMPACTION_DB_WAIT_MS } from '../core/compaction-timing.js';
 import { compactResumeBlock, sessionEndWork as runSessionEnd } from '../api/session-end.js';
 import { normaliseHookPayload, readHookStdin, readStdinBounded } from './stdin.js';
-import { errorMessage, log } from '../util/log.js';
+import { errorMessage, log, errorFields } from '../util/log.js';
 import { cmdShimArgs } from '../util/spawn-argv.js';
 import { bookLedgerTurn } from '../api/ledger-db.js';
 import { flushDeliveryRecorder, startDeliveryRecorder, startToolFailureRecorder } from '../api/prompt-hook.js';
 import { printError } from './output.js';
 import { cmdLastSleep } from './last-sleep.js';
 import { readCompactResumePayload } from './compact-resume-payload.js';
-import { cliApiContext } from './api-context.js';
-import { boolFlag, flagIsTrue, stringFlag } from './flag-values.js';
+import { cliApiContext, cliLedgerReach } from './api-context.js';
+import { boolFlag, flagIsTrue, stringFlag, stringFlagOrExit, } from './flag-values.js';
 import { logSessionEndImport, appendSessionEndCloseLog, reportSessionEndFailure, resetHookInjection, hookStoreRoot, hookRuntime, payloadCwdRoot, runHookWithStores, inPilotHoldout, hostSessionId, } from './hook-runtime.js';
-import { CliExit } from './exit.js';
-/** SessionStart(compact) injector: prints the task snapshot and session trail lost to compaction; no pinned memories (UserPromptSubmit re-injects them).
- * Every path exits 0: a malformed payload or store read failure degrades to empty stdout, never a throw. */
-function cmdCompactResume(hippoRoot, tenantId, stdinText, stdinTimedOut) {
+import { CliExit, fail } from './exit.js';
+/** SessionStart(compact) injector: prints the task snapshot and session trail lost to compaction; no pinned memories
+ * (UserPromptSubmit re-injects them). Every path exits 0: a malformed payload or store read failure degrades to empty
+ * stdout, never a throw. */
+async function cmdCompactResume(hippoRoot, tenantId, stdinText, stdinTimedOut) {
     let rec = null;
     try {
         // Gate on the non-exiting isInitialized check first: the store reads below call initStore, which would
@@ -53,25 +54,27 @@ function cmdCompactResume(hippoRoot, tenantId, stdinText, stdinTimedOut) {
             });
         }
         // A compaction follows a prompt or SessionStart that booked the arm, so this only reads it.
-        if (!suppressOutput && payloadSessionId !== null && inPilotHoldout(hippoRoot, tenantId, payloadSessionId, { write: false })) {
+        if (!suppressOutput && payloadSessionId !== null &&
+            inPilotHoldout(hippoRoot, tenantId, payloadSessionId, { write: false })) {
             suppressOutput = true;
             rec?.disabled();
         }
         if (!suppressOutput)
-            restoreCompactSnapshot(hippoRoot, tenantId, payloadSessionId, rec);
+            await restoreCompactSnapshot(hippoRoot, tenantId, payloadSessionId, rec);
     }
     catch (err) {
         if (err instanceof CliExit)
             throw err;
-        // Empty stdout on any store error, never a crashed SessionStart; the reason goes to stderr, which the model never sees.
-        log.warn(`hippo compact-resume: skipped: ${errorMessage(err)}`);
+        // Empty stdout on any store error, never a crashed SessionStart; the reason goes to stderr, which the model never
+        // sees.
+        log.warn(`hippo compact-resume: skipped: ${errorMessage(err)}`, errorFields(err));
     }
     // A no-op when the token ledger's handle already wrote the row; exit would drop it otherwise.
     flushDeliveryRecorder(rec);
     throw new CliExit(0);
 }
-function restoreCompactSnapshot(hippoRoot, tenantId, payloadSessionId, rec) {
-    const text = compactResumeBlock(cliApiContext(hippoRoot, tenantId), payloadSessionId);
+async function restoreCompactSnapshot(hippoRoot, tenantId, payloadSessionId, rec) {
+    const text = await compactResumeBlock(cliApiContext(hippoRoot, tenantId), payloadSessionId);
     if (text === null)
         return;
     // Printed in one write so the ledger books exactly the text the model is handed.
@@ -79,21 +82,29 @@ function restoreCompactSnapshot(hippoRoot, tenantId, payloadSessionId, rec) {
     rec?.delivered({ state: 'sent', emittedText: `${text}\n` });
     bookLedgerTurn(hippoRoot, {
         uses: [{
-                tenantId, sessionId: payloadSessionId, surface: 'compact_resume', event: 'inject', items: 1, tokens: estimateTokens(text),
+                tenantId,
+                sessionId: payloadSessionId,
+                surface: 'compact_resume',
+                event: 'inject',
+                items: 1,
+                tokens: estimateTokens(text),
             }],
         delivery: (write) => flushDeliveryRecorder(rec, write),
-    });
+    }, cliLedgerReach(hippoRoot));
 }
-/** SessionEnd entry: TUI teardown kills children still running, so read stdin inline, spawn a detached child that runs sleep then capture, and exit.
- * The child logs to a file that the next SessionStart reads via `hippo last-sleep`. */
+/** SessionEnd entry: TUI teardown kills children still running, so read stdin inline, spawn a detached child that runs
+ * sleep then capture, and exit. The child logs to a file that the next SessionStart reads via `hippo last-sleep`. */
 export async function handleSessionEnd({ hippoRoot, tenantId, flags }) {
     const runtime = hookRuntime(flags);
     const turn = flagIsTrue(flags, 'turn');
-    // Copilot's hook command carries no path, since one quoted into it would need escaping for each shell; the log goes where the hook table used to point.
-    const logFile = stringFlag(flags, 'log-file') ?? (runtime === 'copilot' ? resolveJsonHookPaths('copilot').logFile : null);
+    // Copilot's hook command carries no path, since one quoted into it would need escaping for each shell; the log goes
+    // where the hook table used to point.
+    const logFile = stringFlag(flags, 'log-file') ??
+        (runtime === 'copilot' ? resolveJsonHookPaths('copilot').logFile : null);
     // Bounded read: extracts transcript_path + session_id for the detached worker's argv.
     const raw = await readStdinBounded();
-    // Read before normalising: the Copilot CLI's agentStop shares this hook line, and camelCase keys would pass as VS Code's.
+    // Read before normalising: the Copilot CLI's agentStop shares this hook line, and camelCase keys would pass as VS
+    // Code's.
     const stop = turn ? vscodeStopInput(raw) : null;
     if (turn && !stop)
         return;
@@ -103,11 +114,12 @@ export async function handleSessionEnd({ hippoRoot, tenantId, flags }) {
     const input = stop ?? sessionEndInput(stdinText, raw.timedOut, runtime);
     // Only a host payload ends a session: a manual run and a reply's end (turn mode) are not boundaries.
     const rec = !turn && input !== null && !input.manual
-        ? startDeliveryRecorder(cliApiContext(hookStoreRoot(root), tenantId), { stdinText, runtime, eventType: 'session-end', envSessionId: hostSessionId() })
+        ? startSessionEndRecorder(root, tenantId, stdinText, runtime)
         : null;
     const sessionId = input?.sessionId ?? null;
-    // Resolved here because only this process saw the payload; the worker captures just the path it is handed.
-    // Always a hook, so never scan: an empty stdin here is not a manual run. The Copilot CLI's sessionEnd names no transcript, so its log is found by id.
+    // Resolved here because only this process saw the payload; the worker captures just the path it is handed. Always a
+    // hook, so never scan: an empty stdin here is not a manual run. The Copilot CLI's sessionEnd names no transcript, so
+    // its log is found by id.
     const named = input?.transcriptPath ?? null;
     const transcriptPath = (named !== null && fs.existsSync(named) ? named : null)
         ?? (runtime === 'copilot' && sessionId ? copilotTranscriptFor(sessionId) : null);
@@ -116,7 +128,7 @@ export async function handleSessionEnd({ hippoRoot, tenantId, flags }) {
         spawnSessionEndWorker(sessionEndWorkerArgs(worker));
     }
     catch (err) {
-        log.debug(`session-end: the worker did not spawn, running inline: ${errorMessage(err)}`);
+        log.debug(`session-end: the worker did not spawn, running inline: ${errorMessage(err)}`, errorFields(err));
         // Inline is the last resort, handed what the child's argv would have carried.
         try {
             await cmdSessionEndWorker(root, tenantId, inlineWorkerFlags(flags, worker));
@@ -129,7 +141,16 @@ export async function handleSessionEnd({ hippoRoot, tenantId, flags }) {
     // After the spawn, so a locked store delays only the row; the hook's short lock wait bounds it.
     await runHookWithStores(() => flushDeliveryRecorder(rec));
 }
-/** What the session-end payload named; null for one hippo refuses or one that never arrived, and the worker then runs with neither value. */
+function startSessionEndRecorder(root, tenantId, stdinText, runtime) {
+    return startDeliveryRecorder(cliApiContext(hookStoreRoot(root), tenantId), {
+        stdinText,
+        runtime,
+        eventType: 'session-end',
+        envSessionId: hostSessionId(),
+    });
+}
+/** What the session-end payload named; null for one hippo refuses or one that never arrived, and the worker then runs
+ * with neither value. */
 function sessionEndInput(stdinText, timedOut, runtime) {
     const receipt = readSessionEnd(stdinText, timedOut, runtime);
     if (receipt.status === 'received')
@@ -150,7 +171,8 @@ function sessionEndWorkerArgs(o) {
         workerArgs.push('--turn');
     return workerArgs;
 }
-/** The flags the detached worker would parse from its argv, so the inline run sees what the child would have; the hook's own flags fill the gaps. */
+/** The flags the detached worker would parse from its argv, so the inline run sees what the child would have; the
+ * hook's own flags fill the gaps. */
 function inlineWorkerFlags(flags, w) {
     const out = {};
     const keep = (name, value) => {
@@ -180,10 +202,12 @@ function spawnSessionEndWorker(workerArgs) {
     child.on('error', (err) => log.warn(`hippo session-end: the worker did not start: ${errorMessage(err)}`));
     child.unref();
 }
-/** The input of a VS Code Stop payload with a session id that can name the lock file; null makes turn mode a silent no-op. */
+/** The input of a VS Code Stop payload with a session id that can name the lock file; null makes turn mode a silent
+ * no-op. */
 function vscodeStopInput(raw) {
     const receipt = readVscodeStop(raw.text, raw.timedOut);
-    return receipt.status === 'received' && receipt.input.sessionId !== null && SESSION_ID_RE.test(receipt.input.sessionId) ? receipt.input : null;
+    return receipt.status === 'received' && receipt.input.sessionId !== null &&
+        SESSION_ID_RE.test(receipt.input.sessionId) ? receipt.input : null;
 }
 async function cmdSessionEndWorker(hippoRoot, tenantId, flags) {
     const sessionId = flags['session-id'];
@@ -203,7 +227,10 @@ function sessionEndWork(hippoRoot, tenantId, flags, mode) {
         sessionId,
         transcriptPath,
         contextFor: (root) => cliApiContext(root, tenantId),
-        storeRoot: () => hookStoreRoot(hippoRoot),
+        storeRoot: () => {
+            const root = hookStoreRoot(hippoRoot);
+            return isInitialized(root) ? root : null;
+        },
         log: (line, opts) => appendSessionEndCloseLog(logFile, line, opts),
         sleep: () => (mode === 'turn' && sessionId
             ? sleepIfDue(hippoRoot, tenantId, flags, logFile, transcriptPath, sessionId)
@@ -211,8 +238,9 @@ function sessionEndWork(hippoRoot, tenantId, flags, mode) {
         readScan: (log) => (transcriptPath ? readSessionScan(transcriptPath, log) : null),
         capture: (store, scan) => {
             const capture = (turns) => captureEndedSession(hippoRoot, tenantId, store, flags, transcriptPath, turns);
-            if (mode === 'turn')
+            if (mode === 'turn') {
                 captureNewTurns(transcriptPath, sessionId, scan, capture, (line) => appendSessionEndCloseLog(logFile, line));
+            }
             else
                 capture(scan?.turns);
         },
@@ -241,7 +269,8 @@ async function sleepProjectStore(hippoRoot, tenantId, flags, closeLogFile, trans
         logSessionEndImport(closeLogFile, transcriptPath);
     }
 }
-/** A close after every reply sleeps only at the MCP server's auto-sleep threshold; each line starts the log afresh, as a sleep does. */
+/** A close after every reply sleeps only at the MCP server's auto-sleep threshold; each line starts the log afresh, as
+ * a sleep does. */
 async function sleepIfDue(hippoRoot, tenantId, flags, closeLogFile, transcriptPath, sessionId) {
     if (!isInitialized(hippoRoot))
         return sleepProjectStore(hippoRoot, tenantId, flags, closeLogFile, transcriptPath);
@@ -329,7 +358,7 @@ export function handleCodexRun({ hippoRoot, tenantId, args }) {
         cmdLastSleep(hippoRoot, { path: metadata.logFile }, 'terminal');
     }
     catch (err) {
-        log.debug(`codex run: the last sleep summary was not shown: ${errorMessage(err)}`);
+        log.debug(`codex run: the last sleep summary was not shown: ${errorMessage(err)}`, errorFields(err));
     }
     const child = spawnRealCodex(metadata.realCodexPath, args, process.cwd());
     child.on('error', (err) => {
@@ -369,10 +398,11 @@ async function launchCodexSessionEndWorker(hippoRoot, tenantId, historyPath, sta
         });
     }
     catch (inlineErr) {
-        log.debug(`codex run: the inline session-end failed: ${errorMessage(inlineErr)}`);
+        log.debug(`codex run: the inline session-end failed: ${errorMessage(inlineErr)}`, errorFields(inlineErr));
     }
 }
-/** Resolves true once the detached worker is running, false when the spawn fails, whether it throws or reports later. */
+/** Resolves true once the detached worker is running, false when the spawn fails, whether it throws or reports
+ * later. */
 function detachedWorkerStarted(workerArgs) {
     return new Promise((resolve) => {
         const failed = (reason) => {
@@ -437,8 +467,8 @@ function captureCodexTranscript(hippoRoot, tenantId, store, flags, logFile) {
     try {
         const codexHome = stringFlag(flags, 'codex-home') ?? resolveCodexWrapperPaths().codexHome;
         const historyPath = stringFlag(flags, 'history-path') ?? path.join(codexHome, 'history.jsonl');
-        const startOffsetBytes = parseInt(String(flags['start-offset'] ?? '0'), 10) || 0;
-        const startedAtMs = parseInt(String(flags['started-at'] ?? Date.now()), 10) || Date.now();
+        const startOffsetBytes = parseInt(stringFlag(flags, 'start-offset') ?? '', 10) || 0;
+        const startedAtMs = parseInt(stringFlag(flags, 'started-at') ?? '', 10) || Date.now();
         const transcriptPath = resolveCodexSessionTranscript({
             codexHome,
             historyPath,
@@ -499,8 +529,8 @@ export async function handlePreCompact({ hippoRoot, tenantId, flags }) {
     });
 }
 export async function handlePostCompact({ hippoRoot, flags }) {
-    // PostCompact hook: saves the compaction summary and its memories, then prints one plain line, because Claude Code shows this hook's
-    // stdout as-is. Always exits 0.
+    // PostCompact hook: saves the compaction summary and its memories, then prints one plain line, because Claude Code
+    // shows this hook's stdout as-is. Always exits 0.
     const { text, timedOut } = await readHookStdin();
     const logFlag = flags['log-file'];
     const store = hookStoreRoot(hippoRoot);
@@ -510,7 +540,10 @@ export async function handlePostCompact({ hippoRoot, flags }) {
         logFile: logFlag === true || logFlag === false || Array.isArray(logFlag) ? undefined : logFlag,
         // Passed in, since src/capture/ importing the sync would close an import cycle.
         afterSave: (transcriptPath, cwd, log) => {
-            const report = importSessionFolder(store, transcriptPath, cwd, { machine: currentMachine(), busyWaitMs: COMPACTION_DB_WAIT_MS });
+            const report = importSessionFolder(store, transcriptPath, cwd, {
+                machine: currentMachine(),
+                busyWaitMs: COMPACTION_DB_WAIT_MS,
+            });
             const summary = summaryLine(report);
             if (summary !== null)
                 log(summary);
@@ -531,7 +564,11 @@ export async function handleCaptureError({ hippoRoot, tenantId, flags }) {
         if (isInitialized(root) && payload) {
             // SAFETY: JSON.parse returns a JSON value by definition.
             const failure = JSON.parse(payload);
-            const rec = startToolFailureRecorder(cliApiContext(root, tenantId), { stdinText: text, runtime: hookRuntime(flags), envSessionId: hostSessionId() });
+            const rec = startToolFailureRecorder(cliApiContext(root, tenantId), {
+                stdinText: text,
+                runtime: hookRuntime(flags),
+                envSessionId: hostSessionId(),
+            });
             await runHookWithStores(() => {
                 try {
                     return captureToolFailure(root, tenantId, failure, (id) => rec?.logged(id));
@@ -544,14 +581,14 @@ export async function handleCaptureError({ hippoRoot, tenantId, flags }) {
     }
     catch (err) {
         // A malformed payload or store error must never fail the agent's tool call, so it is reported and dropped.
-        log.warn(`failure capture skipped: ${errorMessage(err)}`);
+        log.warn(`failure capture skipped: ${errorMessage(err)}`, errorFields(err));
     }
 }
 export async function handleCompactResume({ hippoRoot, tenantId }) {
     const { text: stdinText, timedOut: stdinTimedOut } = await readHookStdin();
-    await runHookWithStores(() => {
+    await runHookWithStores(async () => {
         resetHookInjection(hippoRoot, tenantId, stdinText, 'compact');
-        cmdCompactResume(hookStoreRoot(hippoRoot), tenantId, stdinText, stdinTimedOut);
+        await cmdCompactResume(hookStoreRoot(hippoRoot), tenantId, stdinText, stdinTimedOut);
     });
 }
 export async function handleCapture({ hippoRoot, tenantId, flags }) {
@@ -563,19 +600,19 @@ export async function handleCapture({ hippoRoot, tenantId, flags }) {
     }
     else if (flags['file']) {
         captureSource = 'file';
-        captureFile = String(flags['file']);
+        captureFile = stringFlagOrExit(flags, 'file');
     }
     else if (flags['last-session']) {
         captureSource = 'last-session';
     }
     if (flags['transcript']) {
-        transcriptPath = String(flags['transcript']);
+        transcriptPath = stringFlagOrExit(flags, 'transcript');
         if (!captureSource)
             captureSource = 'last-session';
     }
     if (!captureSource) {
-        printError('Usage: hippo capture --stdin|--file <path>|--last-session [--transcript <path>] [--log-file <path>] [--dry-run] [--global]');
-        throw new CliExit(1);
+        fail('Usage: hippo capture --stdin|--file <path>|--last-session [--transcript <path>] [--log-file <path>] ' +
+            '[--dry-run] [--global]');
     }
     // Bounded, and only when last-session has no explicit path: the
     // --stdin source keeps its own blocking read in src/capture/ by design.

package/dist/cli/setup.js

@@ -3,7 +3,7 @@ import { MINUTE_MS } from '../util/time.js';
 import * as path from 'path';
 import * as fs from 'fs';
 import { execFileSync } from 'child_process';
-import { installJsonHooks, uninstallJsonHooks, checkUninstallable, copilotHookEvents, resolveJsonHookPaths } from '../hooks/json-hooks.js';
+import { installJsonHooks, uninstallJsonHooks, checkUninstallable, copilotHookEvents, resolveJsonHookPaths, } from '../hooks/json-hooks.js';
 import { detectInstalledTools } from '../hooks/shared.js';
 import { ensureCodexWrapperInstalled, installCodexWrapper, detectRealCodexPath, uninstallCodexWrapper, } from '../hooks/codex-wrapper.js';
 import { installOpencodePlugin, uninstallOpencodePlugin, resolveOpencodePluginPath } from '../hooks/opencode.js';
@@ -23,7 +23,7 @@ import { installCodexMemoryHooks, setupDailySchedule, warnClaudeSettingsUnusable
 import { repairQualityOnceAt } from './quality-repair-once.js';
 import { HOOK_MARKERS, HOOKS, hippoBlock, withoutHookBlock } from '../hooks/hook-blocks.js';
 import { escapeRegex } from '../util/escape.js';
-import { CliExit } from './exit.js';
+import { fail } from './exit.js';
 // Hook install/uninstall
 export function handleHook({ args }) {
     const subcommand = args[0];
@@ -34,8 +34,7 @@ export function handleHook({ args }) {
         return hookInstall(target);
     if (subcommand === 'uninstall')
         return hookUninstall(target);
-    printError('Usage: hippo hook <install|uninstall|list> [target]');
-    throw new CliExit(1);
+    fail('Usage: hippo hook <install|uninstall|list> [target]');
 }
 // Cursor has no init row, so the AGENTS.md block is usually another agent's, and Cursor reads that one as it is.
 function othersBlock(target, text) {
@@ -46,7 +45,8 @@ function hookList() {
     for (const [name, hook] of Object.entries(HOOKS)) {
         console.log(`  ${name.padEnd(15)} -> ${hook.file} (${hook.description})`);
     }
-    console.log(`  ${'copilot'.padEnd(15)} -> $COPILOT_HOME or ~/.copilot, and each VS Code User folder (GitHub Copilot: hooks, MCP server and instructions)`);
+    console.log(`  ${'copilot'.padEnd(15)} -> $COPILOT_HOME or ~/.copilot, and each VS Code User folder ` +
+        '(GitHub Copilot: hooks, MCP server and instructions)');
     console.log('\nUsage: hippo hook install <name>');
     console.log('       hippo hook uninstall <name>');
 }
@@ -56,8 +56,7 @@ function hookInstall(target) {
         return printCopilotInstall(installCopilot(), '');
     if (!target || !HOOKS[target]) {
         printError(`Unknown hook target: ${target ?? '(none)'}`);
-        printError(`   Available: ${[...Object.keys(HOOKS), 'copilot'].join(', ')}`);
-        throw new CliExit(1);
+        fail(`   Available: ${[...Object.keys(HOOKS), 'copilot'].join(', ')}`);
     }
     const hook = HOOKS[target];
     patchAgentFile(hook, target);
@@ -103,8 +102,8 @@ function patchAgentFile(hook, target) {
         }
     }
     else {
-        // Do not create an agent-instructions file (CLAUDE.md, AGENTS.md, etc.) in directories without one, to avoid polluting cwd;
-        // the settings.json hook below is still installed for claude-code.
+        // Do not create an agent-instructions file (CLAUDE.md, AGENTS.md, etc.) in directories without one, to avoid
+        // polluting cwd; the settings.json hook below is still installed for claude-code.
         console.log(`${hook.file} not found in ${process.cwd()} — skipping agent-instructions patch.`);
         console.log(`   Create ${hook.file} and re-run \`hippo hook install ${target}\` if you want the agent prompt.`);
     }
@@ -155,7 +154,8 @@ function installOpencodeHook() {
         console.log(`Removed legacy Claude Code-style hooks block from opencode.json — opencode can now launch`);
     }
     if (result.jsonRepairFailed) {
-        console.log(`WARNING: opencode.json is unparseable; legacy hooks block could not be auto-removed. Fix the file manually.`);
+        console.log(`WARNING: opencode.json is unparseable; legacy hooks block could not be auto-removed. ` +
+            `Fix the file manually.`);
     }
 }
 const addByHand = (host) => `add this under "${host.key}" by hand: ${copilotMcpSnippet(host)}`;
@@ -163,20 +163,24 @@ const MCP_MERGE_LINES = {
     added: (file) => `Added the "hippo" MCP server -> ${file}`,
     present: (file) => `The "hippo" MCP server is already in ${file}`,
     'user-owned': (file) => `Left the "hippo" MCP server in ${file} as it is: hippo did not write it`,
-    unreadable: (file, host) => `WARNING: ${file} has comments or is not a JSON object hippo can merge into, so it was left unchanged; ${addByHand(host)}`,
+    unreadable: (file, host) => `WARNING: ${file} has comments or is not a JSON object hippo can merge into, so it was left unchanged; ` +
+        addByHand(host),
 };
 const mcpFailureLine = (file, failure, fix) => `WARNING: hippo could not use ${file} (${failure.failed}), so it was left unchanged; ${fix}`;
-const unclosedLine = (file) => `WARNING: ${file} has ${HOOK_MARKERS.start} with no ${HOOK_MARKERS.end}, so hippo left it unchanged; fix the markers by hand`;
+const unclosedLine = (file) => `WARNING: ${file} has ${HOOK_MARKERS.start} with no ${HOOK_MARKERS.end}, so hippo left it unchanged; ` +
+    'fix the markers by hand';
 const INSTRUCTIONS_INSTALL_LINES = {
     written: (file) => `Wrote the hippo block -> ${file}`,
     present: (file) => `The hippo block is already in ${file}`,
-    kept: (file) => `Kept the hippo block in ${file} as it is: it is not the Copilot text hippo wrote, so it was edited or is another agent's`,
+    kept: (file) => `Kept the hippo block in ${file} as it is: it is not the Copilot text hippo wrote, ` +
+        `so it was edited or is another agent's`,
     unclosed: unclosedLine,
 };
 const INSTRUCTIONS_REMOVE_LINES = {
     removed: (file) => `Removed the hippo block from ${file}`,
     absent: () => '',
-    kept: (file) => `Left the hippo block in ${file}: it is not the Copilot text hippo wrote. Delete it by hand if no agent needs it.`,
+    kept: (file) => `Left the hippo block in ${file}: it is not the Copilot text hippo wrote. ` +
+        'Delete it by hand if no agent needs it.',
     unclosed: unclosedLine,
 };
 const VSCODE_INSTRUCTIONS_INSTALL_LINES = {
@@ -189,8 +193,8 @@ const VSCODE_INSTRUCTIONS_REMOVE_LINES = {
     absent: () => '',
     kept: (file) => `Left ${file}: it is not the text hippo wrote. Delete it by hand if no agent needs it.`,
 };
-const VSCODE_HOOKS_LINE = 'VS Code: hooks need VS Code 1.109.3 or later with chat.useHooks on (the default); older versions get the MCP server and the ' +
-    'instructions file only.';
+const VSCODE_HOOKS_LINE = 'VS Code: hooks need VS Code 1.109.3 or later with chat.useHooks on (the default); ' +
+    'older versions get the MCP server and the instructions file only.';
 function mcpInstallLine(file, mcp, host) {
     return isMcpFailure(mcp) ? mcpFailureLine(file, mcp, addByHand(host)) : MCP_MERGE_LINES[mcp](file, host);
 }
@@ -201,12 +205,15 @@ function printVscodeInstall(result, indent) {
     if (paths.profiles.length > 0) {
         const names = paths.profiles.map((dir) => path.basename(dir)).join(', ');
         console.log(`${indent}Found VS Code profiles (${names}) under ${path.join(paths.userDir, 'profiles')}: ` +
-            'hippo set up the default profile only; copy the "hippo" server and prompts/hippo.instructions.md into a profile to use hippo there.');
+            'hippo set up the default profile only; copy the "hippo" server and prompts/hippo.instructions.md ' +
+            'into a profile to use hippo there.');
     }
 }
 function printCopilotInstall(result, indent) {
     const { paths } = result;
-    const hooks = result.hooks ? `Installed hippo's Copilot hooks (${copilotHookEvents().join(', ')}) ->` : "hippo's Copilot hooks are already in";
+    const hooks = result.hooks
+        ? `Installed hippo's Copilot hooks (${copilotHookEvents().join(', ')}) ->`
+        : "hippo's Copilot hooks are already in";
     console.log(`${indent}${hooks} ${paths.hooks}`);
     if (result.mcp === null || result.instructions === null) {
         console.log(`${indent}No Copilot CLI files in ${path.dirname(paths.mcpConfig)}, ` +
@@ -257,8 +264,7 @@ function hookUninstall(target) {
     if (target === 'copilot')
         return printCopilotUninstall(uninstallCopilot());
     if (!target || !HOOKS[target]) {
-        printError(`Unknown hook target: ${target ?? '(none)'}`);
-        throw new CliExit(1);
+        fail(`Unknown hook target: ${target ?? '(none)'}`);
     }
     unpatchAgentFile(HOOKS[target], target);
     // For Claude Code, also strip its SessionEnd/SessionStart entries.
@@ -271,7 +277,8 @@ function hookUninstall(target) {
         }
     }
     else if (target === 'opencode') {
-        // opencode uses a TS plugin; uninstall removes the plugin file and also runs the legacy-hooks migration, so remove leaves opencode launchable.
+        // opencode uses a TS plugin; uninstall removes the plugin file and also runs the legacy-hooks migration, so remove
+        // leaves opencode launchable.
         if (uninstallOpencodePlugin()) {
             console.log(`Removed hippo opencode plugin (and any legacy hooks block from opencode.json)`);
         }
@@ -318,7 +325,9 @@ function removeLegacyCursorRules() {
             writeFileAtomic(legacy, left + '\n');
         else
             fs.unlinkSync(legacy);
-        console.log(left ? 'Removed the old Hippo hook from .cursorrules' : 'Deleted .cursorrules, which held only the old Hippo hook');
+        console.log(left
+            ? 'Removed the old Hippo hook from .cursorrules'
+            : 'Deleted .cursorrules, which held only the old Hippo hook');
     }
 }
 function setupDetectedTools(tools, forceAll, dryRun) {
@@ -383,15 +392,19 @@ function setupCopilot(dryRun) {
     if (!dryRun)
         return printCopilotInstall(installCopilot(), indent);
     const { hooks, mcpConfig, instructions, vscode } = copilotPaths();
-    const cliFiles = isCopilotCliPresent() ? `, the MCP server in ${mcpConfig} and the hippo block in ${instructions}` : '';
+    const cliFiles = isCopilotCliPresent()
+        ? `, the MCP server in ${mcpConfig} and the hippo block in ${instructions}`
+        : '';
     console.log(`[dry-run] would install hooks in ${hooks}${cliFiles}`);
-    for (const dir of vscode)
+    for (const dir of vscode) {
         console.log(`[dry-run] would add the MCP server to ${dir.mcpConfig} and write ${dir.instructions}`);
+    }
 }
 function setupJsonTool(tool, dryRun) {
     if (tool.name === 'copilot')
         return setupCopilot(dryRun);
-    // SAFETY: detectInstalledTools gives kind 'json-hook' only to claude-code and copilot (hooks/shared.ts), and copilot returned above.
+    // SAFETY: detectInstalledTools gives kind 'json-hook' only to claude-code and copilot (hooks/shared.ts), and copilot
+    // returned above.
     const target = tool.name;
     if (dryRun) {
         // Resolve the real settings path so the filename is right for each tool
@@ -433,8 +446,9 @@ function setupJsonTool(tool, dryRun) {
 }
 function setupWrapperTool(tool, dryRun) {
     if (dryRun) {
-        if (tool.name === 'codex')
+        if (tool.name === 'codex') {
             console.log(`[dry-run] would install Codex memory hooks in ${resolveJsonHookPaths('codex').settings}`);
+        }
         console.log(`[dry-run] would wrap the detected ${tool.name} launcher in place`);
         return;
     }
@@ -478,12 +492,15 @@ function setupPluginTool(tool, dryRun) {
         console.log(`  ${tool.name.padEnd(14)} ${bits.join(', ')} -> ${result.pluginPath}`);
     }
 }
-// Three times the 10 minutes POST /v1/sleep allows a consolidation, so a slow real sleep fits and a hung child cannot stall every later workspace.
+// Three times the 10 minutes POST /v1/sleep allows a consolidation, so a slow real sleep fits and a hung child cannot
+// stall every later workspace.
 const DAILY_STEP_TIMEOUT_MS = 30 * MINUTE_MS;
-/** Why a child step failed; a child killed at the deadline says so, since its own message is only the spawn error code. */
+/** Why a child step failed; a child killed at the deadline says so, since its own message is only the spawn error
+ * code. */
 function dailyStepFailure(err, timeoutMs) {
-    if (err instanceof Error && 'code' in err && err.code === 'ETIMEDOUT')
+    if (err instanceof Error && 'code' in err && err.code === 'ETIMEDOUT') {
         return `timed out after ${timeoutMs} ms and was stopped`;
+    }
     return errorMessage(err);
 }
 export async function handleDailyRunner({ tenantId }) {
@@ -491,8 +508,9 @@ export async function handleDailyRunner({ tenantId }) {
     // No workspace sleep ever opens the global store, yet hooks in folders without a store compact into it.
     if (isInitialized(globalRoot)) {
         const finished = replayCompactionsAt(globalRoot, (message) => log.warn(`compaction replay: ${message}`));
-        if (finished > 0)
+        if (finished > 0) {
             console.log(`Finished saving ${finished} compaction${finished === 1 ? '' : 's'} left over in the global store.`);
+        }
         await repairQualityOnceAt(globalRoot, tenantId);
     }
     printAgentImport(importUserMemories(globalRoot, { machine: currentMachine() }), '');
@@ -501,7 +519,8 @@ export async function handleDailyRunner({ tenantId }) {
         console.log('No registered Hippo workspaces found. Run `hippo init` inside a project first.');
         return;
     }
-    console.log(`Running daily maintenance across ${workspaces.length} registered workspace${workspaces.length === 1 ? '' : 's'}...`);
+    const plural = workspaces.length === 1 ? '' : 's';
+    console.log(`Running daily maintenance across ${workspaces.length} registered workspace${plural}...`);
     let processed = 0;
     let failed = 0;
     const timeout = envDailyStepTimeoutMs() ?? DAILY_STEP_TIMEOUT_MS;
@@ -519,7 +538,10 @@ export async function handleDailyRunner({ tenantId }) {
         catch (err) {
             failed++;
             const action = args.join(' ');
-            log.error(`daily-runner failed in ${cwd} during \`${action}\`: ${dailyStepFailure(err, timeout)}`, { workspace: cwd, ...errorFields(err) });
+            log.error(`daily-runner failed in ${cwd} during \`${action}\`: ${dailyStepFailure(err, timeout)}`, {
+                workspace: cwd,
+                ...errorFields(err),
+            });
         }
     });
     console.log(`Daily maintenance complete: ${processed} workspace${processed === 1 ? '' : 's'} processed, ` +

package/dist/cli/shared.d.ts

@@ -7,7 +7,9 @@ export declare function runChurnStaleForRepo(hippoRoot: string, tenantId: string
     root: string;
     result: ChurnStaleResult;
 }[];
-/** Run an HTTP-routed command if a `hippo serve` is detected: true if it ran, false on no server or a stale pidfile (removed if it names the dead server).
+/**
+ * Run an HTTP-routed command if a `hippo serve` is detected: true if it ran, false on no server or a stale pidfile
+ * (removed if it names the dead server).
  * With HIPPO_REQUIRE_SERVER set both fallbacks throw; a stale pidfile must self-heal, not crash. */
 export declare function runViaServerIfAvailable(hippoRoot: string, httpFn: (info: ServerInfo, apiKey: string | undefined) => Promise<void>): Promise<boolean>;
 /** True, after one line, on a shared store: this account's commits and agent notes are not its members' memories. */