hippo-memory 1.61.0 → 1.62.0

package/dist/processes.js

@@ -130,9 +130,82 @@ function buildProcessContent(processName, steps, description) {
         content += `\n\nDescription: ${description}`;
     return content;
 }
-// ---------------------------------------------------------------------------
-// Public API
-// ---------------------------------------------------------------------------
+// Preflight the supersede target BEFORE inserting the new row. The new
+// row's autoincrement id could otherwise collide with a non-existent
+// supersedesProcessId (e.g. superseding id 1 on an empty store), making
+// the row supersede itself. Validating first means the new row is never a
+// candidate for its own supersede UPDATE. Mirrors saveDecision (codex P1
+// 2026-05-28). The same SELECT reads the predecessor version so the
+// successor's version is server-derived, never client-supplied.
+function preflightProcessSupersede(db, tenantId, supersedesId) {
+    // SAFETY: SELECT status, version FROM processes; row shape matches
+    // the two selected columns 1:1.
+    const pred = db.prepare(`SELECT status, version FROM processes WHERE id = ? AND tenant_id = ?`).get(supersedesId, tenantId);
+    if (!pred) {
+        throw new NotFoundError(`saveProcess: process ${supersedesId} to supersede not found for tenant ${tenantId}`);
+    }
+    if (pred.status !== 'active') {
+        throw new ConflictError(`saveProcess: process ${supersedesId} is not active (status='${pred.status}'); only active processes can be superseded.`);
+    }
+    return pred.version + 1;
+}
+function insertProcessRow(db, memoryId, w, version) {
+    const result = db.prepare(`
+    INSERT INTO processes(
+      memory_id, tenant_id, process_name, description, steps, version,
+      status, superseded_by, superseded_at, change_summary, closed_at, created_at
+    ) VALUES (?, ?, ?, ?, ?, ?, 'active', NULL, NULL, ?, NULL, ?)
+  `).run(memoryId, w.tenantId, w.processName, w.description ?? null, JSON.stringify(w.steps), version, w.changeSummary, w.now);
+    return Number(result.lastInsertRowid ?? 0);
+}
+function supersedeProcessRow(db, w, supersedesId, processId, version) {
+    const sup = db.prepare(`
+    UPDATE processes
+    SET status = 'superseded', superseded_by = ?, superseded_at = ?
+    WHERE id = ? AND tenant_id = ? AND status = 'active' AND id != ?
+  `).run(processId, w.now, supersedesId, w.tenantId, processId);
+    if (sup.changes === 0) {
+        throw new ConflictError(`saveProcess: process ${supersedesId} could not be superseded (no longer active or self-reference).`);
+    }
+    appendAuditEvent(db, {
+        tenantId: w.tenantId,
+        actor: w.actor,
+        op: 'process_supersede',
+        targetId: String(supersedesId),
+        metadata: {
+            process_id: supersedesId,
+            superseded_by: processId,
+            new_version: version,
+        },
+    });
+}
+/** The afterWrite body: preflight, INSERT, supersede, reload, create audit, all in one SAVEPOINT. */
+function writeProcessRow(db, memoryId, w) {
+    const version = w.supersedesId !== undefined ? preflightProcessSupersede(db, w.tenantId, w.supersedesId) : 1;
+    const processId = insertProcessRow(db, memoryId, w, version);
+    if (w.supersedesId !== undefined)
+        supersedeProcessRow(db, w, w.supersedesId, processId, version);
+    // SAFETY: SELECT ${PROCESS_COLS} enumerates every ProcessRow field
+    // 1:1 (see PROCESS_COLS above).
+    const row = db.prepare(`SELECT ${PROCESS_COLS} FROM processes WHERE id = ?`)
+        .get(processId);
+    if (!row)
+        throw new Error('saveProcess: failed to reload saved process row');
+    // GDPR-light metadata: ids + counts only, no process_name / step text.
+    appendAuditEvent(db, {
+        tenantId: w.tenantId,
+        actor: w.actor,
+        op: 'process_create',
+        targetId: String(processId),
+        metadata: {
+            process_id: processId,
+            version,
+            step_count: w.steps.length,
+            has_description: w.description !== undefined && w.description !== null && w.description !== '',
+        },
+    });
+    return row;
+}
 /**
  * Create a process (or a new version that supersedes an existing one). Writes
  * the memory mirror + the processes row atomically inside writeEntry's SAVEPOINT
@@ -163,78 +236,21 @@ export function saveProcess(hippoRoot, tenantId, opts, actor = 'cli') {
         baseHalfLifeDays: objectHalfLifeDays(hippoRoot),
         tenantId,
     });
+    const w = {
+        tenantId,
+        actor,
+        processName: opts.processName,
+        description: opts.description,
+        steps,
+        changeSummary,
+        supersedesId: opts.supersedesProcessId,
+        now,
+    };
     let savedRow;
     writeEntry(hippoRoot, mem, {
         actor,
         afterWrite: (db, memoryId) => {
-            // Preflight the supersede target BEFORE inserting the new row. The new
-            // row's autoincrement id could otherwise collide with a non-existent
-            // supersedesProcessId (e.g. superseding id 1 on an empty store), making
-            // the row supersede itself. Validating first means the new row is never a
-            // candidate for its own supersede UPDATE. Mirrors saveDecision (codex P1
-            // 2026-05-28). The same SELECT reads the predecessor version so the
-            // successor's version is server-derived, never client-supplied.
-            let version = 1;
-            if (opts.supersedesProcessId !== undefined) {
-                // SAFETY: SELECT status, version FROM processes; row shape matches
-                // the two selected columns 1:1.
-                const pred = db.prepare(`SELECT status, version FROM processes WHERE id = ? AND tenant_id = ?`).get(opts.supersedesProcessId, tenantId);
-                if (!pred) {
-                    throw new NotFoundError(`saveProcess: process ${opts.supersedesProcessId} to supersede not found for tenant ${tenantId}`);
-                }
-                if (pred.status !== 'active') {
-                    throw new ConflictError(`saveProcess: process ${opts.supersedesProcessId} is not active (status='${pred.status}'); only active processes can be superseded.`);
-                }
-                version = pred.version + 1;
-            }
-            const result = db.prepare(`
-        INSERT INTO processes(
-          memory_id, tenant_id, process_name, description, steps, version,
-          status, superseded_by, superseded_at, change_summary, closed_at, created_at
-        ) VALUES (?, ?, ?, ?, ?, ?, 'active', NULL, NULL, ?, NULL, ?)
-      `).run(memoryId, tenantId, opts.processName, opts.description ?? null, JSON.stringify(steps), version, changeSummary, now);
-            const processId = Number(result.lastInsertRowid ?? 0);
-            if (opts.supersedesProcessId !== undefined) {
-                const sup = db.prepare(`
-          UPDATE processes
-          SET status = 'superseded', superseded_by = ?, superseded_at = ?
-          WHERE id = ? AND tenant_id = ? AND status = 'active' AND id != ?
-        `).run(processId, now, opts.supersedesProcessId, tenantId, processId);
-                if (sup.changes === 0) {
-                    throw new ConflictError(`saveProcess: process ${opts.supersedesProcessId} could not be superseded (no longer active or self-reference).`);
-                }
-                appendAuditEvent(db, {
-                    tenantId,
-                    actor,
-                    op: 'process_supersede',
-                    targetId: String(opts.supersedesProcessId),
-                    metadata: {
-                        process_id: opts.supersedesProcessId,
-                        superseded_by: processId,
-                        new_version: version,
-                    },
-                });
-            }
-            // SAFETY: SELECT ${PROCESS_COLS} enumerates every ProcessRow field
-            // 1:1 (see PROCESS_COLS above).
-            const row = db.prepare(`SELECT ${PROCESS_COLS} FROM processes WHERE id = ?`)
-                .get(processId);
-            if (!row)
-                throw new Error('saveProcess: failed to reload saved process row');
-            savedRow = row;
-            // GDPR-light metadata: ids + counts only, no process_name / step text.
-            appendAuditEvent(db, {
-                tenantId,
-                actor,
-                op: 'process_create',
-                targetId: String(processId),
-                metadata: {
-                    process_id: processId,
-                    version,
-                    step_count: steps.length,
-                    has_description: opts.description !== undefined && opts.description !== null && opts.description !== '',
-                },
-            });
+            savedRow = writeProcessRow(db, memoryId, w);
         },
     });
     if (!savedRow) {

package/dist/project-briefs.js

@@ -103,9 +103,83 @@ const BRIEF_COLS = `
 function buildBriefContent(repo, summary) {
     return `${repo}\n\n${summary}`;
 }
-// ---------------------------------------------------------------------------
-// Public API
-// ---------------------------------------------------------------------------
+// Preflight the supersede target BEFORE inserting the new row (so the new
+// autoincrement id can never be its own supersede target); read the
+// predecessor version in the same SELECT for server-derived versioning.
+// Mirrors saveSkill / saveProcess (codex P1 2026-05-28).
+function preflightBriefSupersede(db, tenantId, supersedesId) {
+    // SAFETY: SELECT projects exactly status, version; .get() returns that
+    // shape for the matching row, or undefined when no brief/tenant pair matches.
+    const pred = db.prepare(`SELECT status, version FROM project_briefs WHERE id = ? AND tenant_id = ?`).get(supersedesId, tenantId);
+    if (!pred) {
+        throw new NotFoundError(`saveProjectBrief: brief ${supersedesId} to supersede not found for tenant ${tenantId}`);
+    }
+    if (pred.status !== 'active') {
+        throw new ConflictError(`saveProjectBrief: brief ${supersedesId} is not active (status='${pred.status}'); only active briefs can be superseded.`);
+    }
+    return pred.version + 1;
+}
+function insertBriefRow(db, memoryId, w, version) {
+    const result = db.prepare(`
+    INSERT INTO project_briefs(
+      memory_id, tenant_id, repo, summary, version,
+      status, superseded_by, superseded_at, change_summary, closed_at, created_at
+    ) VALUES (?, ?, ?, ?, ?, 'active', NULL, NULL, ?, NULL, ?)
+  `).run(memoryId, w.tenantId, w.repo, w.summary, version, w.changeSummary, w.now);
+    return Number(result.lastInsertRowid ?? 0);
+}
+function supersedeBriefRow(db, w, supersedesId, briefId, version) {
+    const sup = db.prepare(`
+    UPDATE project_briefs
+    SET status = 'superseded', superseded_by = ?, superseded_at = ?
+    WHERE id = ? AND tenant_id = ? AND status = 'active' AND id != ?
+  `).run(briefId, w.now, supersedesId, w.tenantId, briefId);
+    if (sup.changes === 0) {
+        throw new ConflictError(`saveProjectBrief: brief ${supersedesId} could not be superseded (no longer active or self-reference).`);
+    }
+    appendAuditEvent(db, {
+        tenantId: w.tenantId,
+        actor: w.actor,
+        op: 'project_brief_supersede',
+        targetId: String(supersedesId),
+        metadata: {
+            brief_id: supersedesId,
+            superseded_by: briefId,
+            new_version: version,
+            refreshed: w.isRefresh,
+            ...w.refreshAuditExtra,
+        },
+    });
+}
+/** The afterWrite body: preflight, INSERT, supersede, reload, create audit, all in one SAVEPOINT. */
+function writeBriefRow(db, memoryId, w) {
+    const version = w.supersedesId !== undefined ? preflightBriefSupersede(db, w.tenantId, w.supersedesId) : 1;
+    const briefId = insertBriefRow(db, memoryId, w, version);
+    if (w.supersedesId !== undefined)
+        supersedeBriefRow(db, w, w.supersedesId, briefId, version);
+    // SAFETY: SELECT ${BRIEF_COLS} projects exactly the ProjectBriefRow
+    // columns; .get() returns that row, or undefined only if the
+    // just-inserted id can't be found.
+    const row = db.prepare(`SELECT ${BRIEF_COLS} FROM project_briefs WHERE id = ?`)
+        .get(briefId);
+    if (!row)
+        throw new Error('saveProjectBrief: failed to reload saved brief row');
+    // GDPR-light metadata: ids + flags only, no brief text.
+    appendAuditEvent(db, {
+        tenantId: w.tenantId,
+        actor: w.actor,
+        op: 'project_brief_create',
+        targetId: String(briefId),
+        metadata: {
+            brief_id: briefId,
+            repo: w.repo,
+            version,
+            refreshed: w.isRefresh,
+            ...w.refreshAuditExtra,
+        },
+    });
+    return row;
+}
 /**
  * Create a project_brief (or a new version that supersedes an existing one). Writes
  * the memory mirror + the project_briefs row atomically inside writeEntry's
@@ -133,79 +207,22 @@ export function saveProjectBrief(hippoRoot, tenantId, opts, actor = 'cli') {
         baseHalfLifeDays: objectHalfLifeDays(hippoRoot),
         tenantId,
     });
+    const w = {
+        tenantId,
+        actor,
+        repo,
+        summary: opts.summary,
+        changeSummary,
+        supersedesId: opts.supersedesBriefId,
+        isRefresh,
+        refreshAuditExtra,
+        now,
+    };
     let savedRow;
     writeEntry(hippoRoot, mem, {
         actor,
         afterWrite: (db, memoryId) => {
-            // Preflight the supersede target BEFORE inserting the new row (so the new
-            // autoincrement id can never be its own supersede target); read the
-            // predecessor version in the same SELECT for server-derived versioning.
-            // Mirrors saveSkill / saveProcess (codex P1 2026-05-28).
-            let version = 1;
-            if (opts.supersedesBriefId !== undefined) {
-                // SAFETY: SELECT projects exactly status, version; .get() returns that
-                // shape for the matching row, or undefined when no brief/tenant pair matches.
-                const pred = db.prepare(`SELECT status, version FROM project_briefs WHERE id = ? AND tenant_id = ?`).get(opts.supersedesBriefId, tenantId);
-                if (!pred) {
-                    throw new NotFoundError(`saveProjectBrief: brief ${opts.supersedesBriefId} to supersede not found for tenant ${tenantId}`);
-                }
-                if (pred.status !== 'active') {
-                    throw new ConflictError(`saveProjectBrief: brief ${opts.supersedesBriefId} is not active (status='${pred.status}'); only active briefs can be superseded.`);
-                }
-                version = pred.version + 1;
-            }
-            const result = db.prepare(`
-        INSERT INTO project_briefs(
-          memory_id, tenant_id, repo, summary, version,
-          status, superseded_by, superseded_at, change_summary, closed_at, created_at
-        ) VALUES (?, ?, ?, ?, ?, 'active', NULL, NULL, ?, NULL, ?)
-      `).run(memoryId, tenantId, repo, opts.summary, version, changeSummary, now);
-            const briefId = Number(result.lastInsertRowid ?? 0);
-            if (opts.supersedesBriefId !== undefined) {
-                const sup = db.prepare(`
-          UPDATE project_briefs
-          SET status = 'superseded', superseded_by = ?, superseded_at = ?
-          WHERE id = ? AND tenant_id = ? AND status = 'active' AND id != ?
-        `).run(briefId, now, opts.supersedesBriefId, tenantId, briefId);
-                if (sup.changes === 0) {
-                    throw new ConflictError(`saveProjectBrief: brief ${opts.supersedesBriefId} could not be superseded (no longer active or self-reference).`);
-                }
-                appendAuditEvent(db, {
-                    tenantId,
-                    actor,
-                    op: 'project_brief_supersede',
-                    targetId: String(opts.supersedesBriefId),
-                    metadata: {
-                        brief_id: opts.supersedesBriefId,
-                        superseded_by: briefId,
-                        new_version: version,
-                        refreshed: isRefresh,
-                        ...refreshAuditExtra,
-                    },
-                });
-            }
-            // SAFETY: SELECT ${BRIEF_COLS} projects exactly the ProjectBriefRow
-            // columns; .get() returns that row, or undefined only if the
-            // just-inserted id can't be found.
-            const row = db.prepare(`SELECT ${BRIEF_COLS} FROM project_briefs WHERE id = ?`)
-                .get(briefId);
-            if (!row)
-                throw new Error('saveProjectBrief: failed to reload saved brief row');
-            savedRow = row;
-            // GDPR-light metadata: ids + flags only, no brief text.
-            appendAuditEvent(db, {
-                tenantId,
-                actor,
-                op: 'project_brief_create',
-                targetId: String(briefId),
-                metadata: {
-                    brief_id: briefId,
-                    repo,
-                    version,
-                    refreshed: isRefresh,
-                    ...refreshAuditExtra,
-                },
-            });
+            savedRow = writeBriefRow(db, memoryId, w);
         },
         // afterCommit covers refreshBrief (delegates here) + brief new/supersede.
         afterCommit: () => markGraphDirty(hippoRoot, tenantId, mem.id),
@@ -371,34 +388,16 @@ function receiptHeadline(content) {
         ? `${trimmed.slice(0, MAX_RECEIPT_HEADLINE_LEN)}...`
         : trimmed;
 }
-/**
- * Assemble the repo's recent receipts into a deterministic markdown digest, and
- * return it WITH the receipt count (the count feeds refreshBrief's change_summary +
- * audit metadata). NO LLM. Always returns a non-empty, valid summary (a brief
- * `summary` is NOT NULL), including the zero-receipts case.
- *
- * A "receipt" = a tenant memory row carrying the repo's `path:<repo>` tag. The
- * brief's OWN memory mirror (source='project_brief') is excluded so a brief never
- * becomes its own receipt on the next refresh. The match is against the JSON-array
- * serialization (each element is a double-quoted string `"path:hippo"`); the
- * surrounding quotes are load-bearing — they stop `hip` matching `path:hippo`.
- * `repo` is LIKE-escaped + parameterized (operator-supplied; security.md).
- */
-export function assembleBriefFromReceipts(hippoRoot, tenantId, repo) {
-    assertTenantId('assembleBriefFromReceipts', tenantId);
-    const normalizedRepo = (repo ?? '').trim();
-    if (normalizedRepo.length === 0) {
-        throw new BadRequestError('assembleBriefFromReceipts: repo is required');
-    }
+/** The repo's receipt rows, newest first, capped at MAX_BRIEF_RECEIPTS. */
+function loadBriefReceipts(hippoRoot, tenantId, normalizedRepo) {
     const tag = `path:${normalizedRepo.toLowerCase()}`;
     const likeParam = `%"${escapeLike(tag)}"%`;
     const denyPlaceholders = RECALL_DEFAULT_DENY_SCOPES.map(() => '?').join(', ');
     const db = openHippoDb(hippoRoot);
-    let receipts;
     try {
         // SAFETY: SELECT projects exactly id, created, source, content (the
         // ReceiptRow columns); .all() returns rows in that shape.
-        receipts = db.prepare(`
+        return db.prepare(`
       SELECT id, created, source, content FROM memories
       WHERE tenant_id = ?
         AND source != 'project_brief'
@@ -411,17 +410,19 @@ export function assembleBriefFromReceipts(hippoRoot, tenantId, repo) {
     finally {
         closeHippoDb(db);
     }
-    // NOTE on ordering: the `id DESC` tiebreak is lexical on a random-ish memory id
-    // (e.g. `sem_<hex>`), NOT chronological — within the same `created` timestamp the
-    // order is stable-but-arbitrary, not insertion order. `created DESC` is the real
-    // recency ordering. (plan-eng-critic 2026-05-30, med.)
-    //
-    // Budget-aware assembly (codex-review-critic 2026-05-30, P2): the digest is the
-    // brief `summary`, which saveProjectBrief caps at MAX_BRIEF_SUMMARY_LEN. The
-    // receipt/headline caps (50 x ~200) could otherwise build an ~11KB body that the
-    // store then REJECTS, breaking refresh for inputs within the advertised caps. So
-    // include receipt lines newest-first only while they fit under the cap (reserving
-    // slack for the header + an omission footer), and note the omitted remainder.
+}
+// NOTE on ordering: the `id DESC` tiebreak is lexical on a random-ish memory id
+// (e.g. `sem_<hex>`), NOT chronological — within the same `created` timestamp the
+// order is stable-but-arbitrary, not insertion order. `created DESC` is the real
+// recency ordering. (plan-eng-critic 2026-05-30, med.)
+//
+// Budget-aware assembly (codex-review-critic 2026-05-30, P2): the digest is the
+// brief `summary`, which saveProjectBrief caps at MAX_BRIEF_SUMMARY_LEN. The
+// receipt/headline caps (50 x ~200) could otherwise build an ~11KB body that the
+// store then REJECTS, breaking refresh for inputs within the advertised caps. So
+// include receipt lines newest-first only while they fit under the cap (reserving
+// slack for the header + an omission footer), and note the omitted remainder.
+function fitReceiptLines(receipts) {
     const buildReceiptLine = (r) => `- ${(r.created ?? '').slice(0, 10)} [${r.source}] ${receiptHeadline(r.content)}`;
     const receiptLines = [];
     if (receipts.length > 0) {
@@ -437,17 +438,20 @@ export function assembleBriefFromReceipts(hippoRoot, tenantId, repo) {
             bodyBudget -= line.length + 1;
         }
     }
-    const omitted = receipts.length - receiptLines.length;
+    return receiptLines;
+}
+function renderBriefDigest(normalizedRepo, receiptCount, receiptLines) {
+    const omitted = receiptCount - receiptLines.length;
     const lines = [];
     lines.push(`# Project Brief: ${normalizedRepo}`);
     lines.push('');
     lines.push(omitted > 0
-        ? `_Auto-assembled from ${receiptLines.length} of ${receipts.length} receipt(s)._`
-        : `_Auto-assembled from ${receipts.length} receipt(s)._`);
+        ? `_Auto-assembled from ${receiptLines.length} of ${receiptCount} receipt(s)._`
+        : `_Auto-assembled from ${receiptCount} receipt(s)._`);
     lines.push('');
     lines.push('## Recent receipts');
     lines.push('');
-    if (receipts.length === 0) {
+    if (receiptCount === 0) {
         lines.push(`_No receipts found for ${normalizedRepo}._`);
     }
     else {
@@ -464,6 +468,29 @@ export function assembleBriefFromReceipts(hippoRoot, tenantId, repo) {
     if (markdown.length > MAX_BRIEF_SUMMARY_LEN) {
         markdown = markdown.slice(0, MAX_BRIEF_SUMMARY_LEN);
     }
+    return markdown;
+}
+/**
+ * Assemble the repo's recent receipts into a deterministic markdown digest, and
+ * return it WITH the receipt count (the count feeds refreshBrief's change_summary +
+ * audit metadata). NO LLM. Always returns a non-empty, valid summary (a brief
+ * `summary` is NOT NULL), including the zero-receipts case.
+ *
+ * A "receipt" = a tenant memory row carrying the repo's `path:<repo>` tag. The
+ * brief's OWN memory mirror (source='project_brief') is excluded so a brief never
+ * becomes its own receipt on the next refresh. The match is against the JSON-array
+ * serialization (each element is a double-quoted string `"path:hippo"`); the
+ * surrounding quotes are load-bearing — they stop `hip` matching `path:hippo`.
+ * `repo` is LIKE-escaped + parameterized (operator-supplied; security.md).
+ */
+export function assembleBriefFromReceipts(hippoRoot, tenantId, repo) {
+    assertTenantId('assembleBriefFromReceipts', tenantId);
+    const normalizedRepo = (repo ?? '').trim();
+    if (normalizedRepo.length === 0) {
+        throw new BadRequestError('assembleBriefFromReceipts: repo is required');
+    }
+    const receipts = loadBriefReceipts(hippoRoot, tenantId, normalizedRepo);
+    const markdown = renderBriefDigest(normalizedRepo, receipts.length, fitReceiptLines(receipts));
     return { markdown, receiptCount: receipts.length };
 }
 /**

package/dist/project-merge.d.ts

@@ -18,7 +18,15 @@ export interface MergeResult {
     readonly compactions: number;
     readonly backup: string | null;
 }
+export interface ProjectFold {
+    readonly from: string;
+    readonly into: string;
+}
 export interface RepairResult {
+    /** Imported notes filed under the wrong project, or under a project name when a user-global import holds the same text: set aside. */
+    readonly copies: readonly string[];
+    /** Names whose recorded session folders all resolve to one other project today, folded as `merge` would. */
+    readonly folds: readonly ProjectFold[];
     readonly toProject: ReadonlyArray<{
         readonly id: string;
         readonly origin: string;
@@ -42,10 +50,10 @@ export declare function mergeProjects(db: DatabaseSyncLike, hippoRoot: string, o
     into: string;
     dryRun: boolean;
 }): MergeResult;
-/** Reads only, so doctor can call it on a read-only handle: what the repair would do to each user-global merged row. */
-export declare function planUserGlobalRepair(db: DatabaseSyncLike, tenantId: string): Omit<RepairResult, 'backup'>;
-/** Re-tags sleep's merged rows saved as user-global before the fix, by the projects of their parents. */
-export declare function repairUserGlobalMerges(db: DatabaseSyncLike, hippoRoot: string, opts: {
+/** Reads only, so doctor and a dry run take no write lock; merged rows are planned before any fold, so a few may re-tag differently once folds apply. */
+export declare function planProjectRepair(db: DatabaseSyncLike, hippoRoot: string, tenantId: string): Omit<RepairResult, 'backup'>;
+/** Sets aside stray imports, folds the names the resolver now maps elsewhere, then re-tags sleep's user-global merges by their parents; a dry run only plans. */
+export declare function repairProjects(db: DatabaseSyncLike, hippoRoot: string, opts: {
     tenantId: string;
     dryRun: boolean;
 }): RepairResult;