hippo-memory 1.30.0 → 1.31.0

package/dist/rejection.d.ts

@@ -0,0 +1,100 @@
+/**
+ * AT1 rejected-value tombstone — core invariant.
+ * docs/plans/2026-08-15-at1-rejected-value-tombstone.md
+ *
+ * Exact-normalized-value semantics: a human who rejects a fact can refuse
+ * byte-stable re-ingestion of the same value across remember/capture/import/
+ * sync surfaces. Paraphrase/semantic matching is explicitly out of scope
+ * (documented limitation, plan "Design").
+ *
+ * Kept db-agnostic (helpers take a `DatabaseSyncLike` handle) and does NOT
+ * import from store.ts — store.ts imports from here, and the reverse would
+ * be a cycle.
+ */
+import type { DatabaseSyncLike } from './db.js';
+/**
+ * Normalize content for rejection-digest comparisons: Unicode NFC →
+ * lowercase → collapse whitespace runs to a single space → trim. No
+ * punctuation stripping — over-normalization creates false refusals, which
+ * are worse than misses (plan §1).
+ */
+export declare function normalizeValueForRejection(content: string): string;
+/**
+ * Full sha256 hex (64 chars) of the normalized content. Reuses the strong-
+ * identity convention (importers.ts:814 content-hash tag), NOT the privacy-
+ * lossy 16-char convention (recall-trace query hashing) — a tombstone lookup
+ * key needs collision resistance, not redaction (plan §1).
+ */
+export declare function rejectionDigest(content: string): string;
+/**
+ * Thrown by the write-path guard (checkRejectionGuard, called from
+ * upsertEntryRow) when an incoming write would introduce a value matching a
+ * tombstoned digest. Carries enough context for the transaction-owner catch
+ * blocks (writeEntry, api.supersede) to write a post-rollback
+ * `reject_refusal` audit row via `auditRejectionRefusal` (plan §3).
+ */
+export declare class RejectedValueError extends Error {
+    readonly digest: string;
+    readonly tenantId: string;
+    readonly entryId: string;
+    readonly reason: string | null;
+    readonly rejectedAt: string;
+    constructor(opts: {
+        digest: string;
+        tenantId: string;
+        entryId: string;
+        reason: string | null;
+        rejectedAt: string;
+    });
+}
+export interface RejectedValueRow {
+    tenantId: string;
+    digest: string;
+    reason: string | null;
+    rejectedBy: string | null;
+    rejectedAt: string;
+    sourceMemoryId: string | null;
+    normalizedChars: number | null;
+}
+/**
+ * Look up a tombstone by tenant + digest. One indexed point query — the
+ * guard's common-case cost, a miss ends the guard (plan §3).
+ */
+export declare function findRejectedValue(db: DatabaseSyncLike, tenantId: string, digest: string): RejectedValueRow | null;
+/**
+ * Insert (or refresh) a tombstone row. Caller owns the transaction — used by
+ * the T2 `reject` verb and `resolveConflict`'s `rejectLoserValue` path.
+ */
+export declare function insertRejectedValue(db: DatabaseSyncLike, opts: {
+    tenantId: string;
+    digest: string;
+    reason: string;
+    rejectedBy: string;
+    rejectedAt: string;
+    sourceMemoryId?: string | null;
+    normalizedChars: number;
+}): void;
+/**
+ * Delete a tombstone by tenant + exact digest — the T2 `unreject` verb, the
+ * only v1 escape hatch (plan §4).
+ */
+export declare function deleteRejectedValue(db: DatabaseSyncLike, tenantId: string, digest: string): boolean;
+/** List tombstones for a tenant, newest first — the T2 `rejections` verb. */
+export declare function listRejectedValues(db: DatabaseSyncLike, tenantId: string): RejectedValueRow[];
+/**
+ * The write-path guard's check helper, called from `upsertEntryRow`
+ * (store.ts). Fires when the incoming content's digest matches a tombstone
+ * AND the write *introduces* that content: the row is new, OR the stored
+ * row's content digest differs from the incoming one — an UPSERT editing a
+ * same-id row TO a rejected value is a content introduction and must be
+ * refused. Unchanged same-id re-persists (recall boost, decay, star toggle)
+ * are exempt by construction (plan §3).
+ *
+ * Ordering minimizes queries on the common (miss) path: (a) caller has
+ * already computed nothing yet — this does the digest + point lookup first;
+ * (b) a miss returns immediately (ONE indexed point query); (c) only on a
+ * tombstone hit does it SELECT the stored row's content to classify
+ * new-row vs content-introduction (+1 query, rare path).
+ */
+export declare function checkRejectionGuard(db: DatabaseSyncLike, tenantId: string, entryId: string, content: string): void;
+//# sourceMappingURL=rejection.d.ts.map

package/dist/rejection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rejection.d.ts","sourceRoot":"","sources":["../src/rejection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAEhD;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAElE;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;;;;GAMG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;gBAEhB,IAAI,EAAE;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,UAAU,EAAE,MAAM,CAAC;KACpB;CAYF;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAwBD;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,gBAAgB,EACpB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,gBAAgB,GAAG,IAAI,CAQzB;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,EAAE,EAAE,gBAAgB,EACpB,IAAI,EAAE;IACJ,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;CACzB,GACA,IAAI,CAmBN;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAGnG;AAED,6EAA6E;AAC7E,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAQ7F;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,mBAAmB,CACjC,EAAE,EAAE,gBAAgB,EACpB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GACd,IAAI,CAmCN"}

package/dist/rejection.js

@@ -0,0 +1,157 @@
+/**
+ * AT1 rejected-value tombstone — core invariant.
+ * docs/plans/2026-08-15-at1-rejected-value-tombstone.md
+ *
+ * Exact-normalized-value semantics: a human who rejects a fact can refuse
+ * byte-stable re-ingestion of the same value across remember/capture/import/
+ * sync surfaces. Paraphrase/semantic matching is explicitly out of scope
+ * (documented limitation, plan "Design").
+ *
+ * Kept db-agnostic (helpers take a `DatabaseSyncLike` handle) and does NOT
+ * import from store.ts — store.ts imports from here, and the reverse would
+ * be a cycle.
+ */
+import { createHash } from 'node:crypto';
+/**
+ * Normalize content for rejection-digest comparisons: Unicode NFC →
+ * lowercase → collapse whitespace runs to a single space → trim. No
+ * punctuation stripping — over-normalization creates false refusals, which
+ * are worse than misses (plan §1).
+ */
+export function normalizeValueForRejection(content) {
+    return content.normalize('NFC').toLowerCase().replace(/\s+/g, ' ').trim();
+}
+/**
+ * Full sha256 hex (64 chars) of the normalized content. Reuses the strong-
+ * identity convention (importers.ts:814 content-hash tag), NOT the privacy-
+ * lossy 16-char convention (recall-trace query hashing) — a tombstone lookup
+ * key needs collision resistance, not redaction (plan §1).
+ */
+export function rejectionDigest(content) {
+    return createHash('sha256').update(normalizeValueForRejection(content)).digest('hex');
+}
+/**
+ * Thrown by the write-path guard (checkRejectionGuard, called from
+ * upsertEntryRow) when an incoming write would introduce a value matching a
+ * tombstoned digest. Carries enough context for the transaction-owner catch
+ * blocks (writeEntry, api.supersede) to write a post-rollback
+ * `reject_refusal` audit row via `auditRejectionRefusal` (plan §3).
+ */
+export class RejectedValueError extends Error {
+    digest;
+    tenantId;
+    entryId;
+    reason;
+    rejectedAt;
+    constructor(opts) {
+        super(`Memory value refused: matches a rejected value (digest ${opts.digest.slice(0, 12)}..., ` +
+            `reason: ${opts.reason ?? 'none given'}). Run "hippo unreject" to allow it again.`);
+        this.name = 'RejectedValueError';
+        this.digest = opts.digest;
+        this.tenantId = opts.tenantId;
+        this.entryId = opts.entryId;
+        this.reason = opts.reason;
+        this.rejectedAt = opts.rejectedAt;
+    }
+}
+function rowToRejectedValue(row) {
+    return {
+        tenantId: row.tenant_id,
+        digest: row.digest,
+        reason: row.reason,
+        rejectedBy: row.rejected_by,
+        rejectedAt: row.rejected_at,
+        sourceMemoryId: row.source_memory_id,
+        normalizedChars: row.normalized_chars,
+    };
+}
+/**
+ * Look up a tombstone by tenant + digest. One indexed point query — the
+ * guard's common-case cost, a miss ends the guard (plan §3).
+ */
+export function findRejectedValue(db, tenantId, digest) {
+    const row = db
+        .prepare(`SELECT tenant_id, digest, reason, rejected_by, rejected_at, source_memory_id, normalized_chars
+       FROM rejected_values WHERE tenant_id = ? AND digest = ?`)
+        .get(tenantId, digest);
+    return row ? rowToRejectedValue(row) : null;
+}
+/**
+ * Insert (or refresh) a tombstone row. Caller owns the transaction — used by
+ * the T2 `reject` verb and `resolveConflict`'s `rejectLoserValue` path.
+ */
+export function insertRejectedValue(db, opts) {
+    db.prepare(`INSERT INTO rejected_values(tenant_id, digest, reason, rejected_by, rejected_at, source_memory_id, normalized_chars)
+     VALUES (?, ?, ?, ?, ?, ?, ?)
+     ON CONFLICT(tenant_id, digest) DO UPDATE SET
+       reason = excluded.reason,
+       rejected_by = excluded.rejected_by,
+       rejected_at = excluded.rejected_at,
+       source_memory_id = excluded.source_memory_id,
+       normalized_chars = excluded.normalized_chars`).run(opts.tenantId, opts.digest, opts.reason, opts.rejectedBy, opts.rejectedAt, opts.sourceMemoryId ?? null, opts.normalizedChars);
+}
+/**
+ * Delete a tombstone by tenant + exact digest — the T2 `unreject` verb, the
+ * only v1 escape hatch (plan §4).
+ */
+export function deleteRejectedValue(db, tenantId, digest) {
+    const result = db.prepare(`DELETE FROM rejected_values WHERE tenant_id = ? AND digest = ?`).run(tenantId, digest);
+    return (result.changes ?? 0) > 0;
+}
+/** List tombstones for a tenant, newest first — the T2 `rejections` verb. */
+export function listRejectedValues(db, tenantId) {
+    const rows = db
+        .prepare(`SELECT tenant_id, digest, reason, rejected_by, rejected_at, source_memory_id, normalized_chars
+       FROM rejected_values WHERE tenant_id = ? ORDER BY rejected_at DESC, digest ASC`)
+        .all(tenantId);
+    return rows.map(rowToRejectedValue);
+}
+/**
+ * The write-path guard's check helper, called from `upsertEntryRow`
+ * (store.ts). Fires when the incoming content's digest matches a tombstone
+ * AND the write *introduces* that content: the row is new, OR the stored
+ * row's content digest differs from the incoming one — an UPSERT editing a
+ * same-id row TO a rejected value is a content introduction and must be
+ * refused. Unchanged same-id re-persists (recall boost, decay, star toggle)
+ * are exempt by construction (plan §3).
+ *
+ * Ordering minimizes queries on the common (miss) path: (a) caller has
+ * already computed nothing yet — this does the digest + point lookup first;
+ * (b) a miss returns immediately (ONE indexed point query); (c) only on a
+ * tombstone hit does it SELECT the stored row's content to classify
+ * new-row vs content-introduction (+1 query, rare path).
+ */
+export function checkRejectionGuard(db, tenantId, entryId, content) {
+    const incomingDigest = rejectionDigest(content);
+    const tombstone = findRejectedValue(db, tenantId, incomingDigest);
+    if (!tombstone)
+        return; // miss ends the guard — the overwhelmingly common case
+    // Deliberately id-only (no tenant filter): memory ids are globally unique
+    // ULIDs, this lookup only classifies new-row vs same-id re-persist for the
+    // id the caller is already writing, and the tombstone lookup above is the
+    // tenant-scoped decision. Matches deleteEntry's own by-id SELECT.
+    //
+    // P2 fix: also read tenant_id. Content-digest-only comparison let a
+    // same-id upsert that ONLY changes tenantId slip through as an "unchanged
+    // re-persist" — content C sitting quietly (never rejected) in tenant A
+    // could be re-tagged into tenant B, and since C's digest already matched
+    // this row's stored digest, the guard exempted it even though B is the
+    // tenant that rejected C (that is WHY `tombstone` above is non-null: the
+    // lookup already ran under the INCOMING/destination tenantId). A tenant
+    // change on the SAME id is therefore always a content introduction into
+    // the destination tenant, exactly as if the row were new there.
+    const storedRow = db.prepare(`SELECT content, tenant_id FROM memories WHERE id = ?`).get(entryId);
+    const isNewRow = storedRow === undefined;
+    const tenantChanged = !isNewRow && storedRow.tenant_id !== tenantId;
+    const isContentIntroduction = isNewRow || tenantChanged || rejectionDigest(storedRow.content) !== incomingDigest;
+    if (!isContentIntroduction)
+        return; // unchanged same-id re-persist — exempt by construction
+    throw new RejectedValueError({
+        digest: incomingDigest,
+        tenantId,
+        entryId,
+        reason: tombstone.reason,
+        rejectedAt: tombstone.rejectedAt,
+    });
+}
+//# sourceMappingURL=rejection.js.map

package/dist/rejection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rejection.js","sourceRoot":"","sources":["../src/rejection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAe;IACxD,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAClC,MAAM,CAAS;IACf,QAAQ,CAAS;IACjB,OAAO,CAAS;IAChB,MAAM,CAAgB;IACtB,UAAU,CAAS;IAE5B,YAAY,IAMX;QACC,KAAK,CACH,0DAA0D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO;YACvF,WAAW,IAAI,CAAC,MAAM,IAAI,YAAY,4CAA4C,CACrF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACpC,CAAC;CACF;AAsBD,SAAS,kBAAkB,CAAC,GAAwB;IAClD,OAAO;QACL,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,cAAc,EAAE,GAAG,CAAC,gBAAgB;QACpC,eAAe,EAAE,GAAG,CAAC,gBAAgB;KACtC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,EAAoB,EACpB,QAAgB,EAChB,MAAc;IAEd,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CACN;+DACyD,CAC1D;SACA,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAoC,CAAC;IAC5D,OAAO,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,EAAoB,EACpB,IAQC;IAED,EAAE,CAAC,OAAO,CACR;;;;;;;oDAOgD,CACjD,CAAC,GAAG,CACH,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,cAAc,IAAI,IAAI,EAC3B,IAAI,CAAC,eAAe,CACrB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAAoB,EAAE,QAAgB,EAAE,MAAc;IACxF,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,gEAAgE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClH,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AACnC,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,kBAAkB,CAAC,EAAoB,EAAE,QAAgB;IACvE,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CACN;sFACgF,CACjF;SACA,GAAG,CAAC,QAAQ,CAA0B,CAAC;IAC1C,OAAO,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,mBAAmB,CACjC,EAAoB,EACpB,QAAgB,EAChB,OAAe,EACf,OAAe;IAEf,MAAM,cAAc,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,iBAAiB,CAAC,EAAE,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;IAClE,IAAI,CAAC,SAAS;QAAE,OAAO,CAAC,uDAAuD;IAE/E,0EAA0E;IAC1E,2EAA2E;IAC3E,0EAA0E;IAC1E,kEAAkE;IAClE,EAAE;IACF,oEAAoE;IACpE,0EAA0E;IAC1E,uEAAuE;IACvE,yEAAyE;IACzE,uEAAuE;IACvE,yEAAyE;IACzE,wEAAwE;IACxE,wEAAwE;IACxE,gEAAgE;IAChE,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAC,GAAG,CAAC,OAAO,CAEnF,CAAC;IACd,MAAM,QAAQ,GAAG,SAAS,KAAK,SAAS,CAAC;IACzC,MAAM,aAAa,GAAG,CAAC,QAAQ,IAAI,SAAS,CAAC,SAAS,KAAK,QAAQ,CAAC;IACpE,MAAM,qBAAqB,GACzB,QAAQ,IAAI,aAAa,IAAI,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,cAAc,CAAC;IACrF,IAAI,CAAC,qBAAqB;QAAE,OAAO,CAAC,wDAAwD;IAE5F,MAAM,IAAI,kBAAkB,CAAC;QAC3B,MAAM,EAAE,cAAc;QACtB,QAAQ;QACR,OAAO;QACP,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,UAAU,EAAE,SAAS,CAAC,UAAU;KACjC,CAAC,CAAC;AACL,CAAC"}

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAyBA,kFAAkF;AAClF,wBAAgB,+BAA+B,IAAI,IAAI,CAEtD;AA2QD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;;;8BAG0B;IAC1B,MAAM,CAAC,EAAE,OAAO,WAAW,EAAE,MAAM,CAAC;CACrC;AAED,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AA0HD;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAMrE;AAmrFD;;;;;;;;;;GAUG;AACH,wBAAsB,KAAK,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,CA0JlE"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAyBA,kFAAkF;AAClF,wBAAgB,+BAA+B,IAAI,IAAI,CAEtD;AA+QD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;;;8BAG0B;IAC1B,MAAM,CAAC,EAAE,OAAO,WAAW,EAAE,MAAM,CAAC;CACrC;AAED,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AA0HD;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAMrE;AAmrFD;;;;;;;;;;GAUG;AACH,wBAAsB,KAAK,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,CA0JlE"}

package/dist/server.js

@@ -109,6 +109,10 @@ const VALID_AUDIT_OPS = new Set([
     'customer_note_supersede', // E2 — emitted by saveCustomerNote on a supersession
     'customer_note_close', // E2 — emitted by closeCustomerNote
     'mv_rescue', // LC2-E3 — emitted by consolidate() per rescue; lockstep with AuditOp union + cli.ts VALID_AUDIT_OPS
+    'reject_value', // AT1 — emitted by `hippo reject`; lockstep with AuditOp union + cli.ts VALID_AUDIT_OPS
+    'reject_refusal', // AT1 — emitted when the rejection guard refuses a write; lockstep
+    'unreject_value', // AT1 — emitted by `hippo unreject`; lockstep
+    'conflict_resolve', // AT1 — emitted by resolveConflict on every resolution path; lockstep
 ]);
 // Cap on GET /v1/audit?limit=. Matches docs/api.md (when written) and is large
 // enough to dump a small deployment's full audit log without paginating, but