hippo-memory 1.61.0 → 1.63.0

package/dist/graph-view.d.ts

@@ -1,6 +1,6 @@
 /**
- * E3 graph observability + visualization — READ-ONLY over the entity/relation
- * graph (docs/plans/2026-06-02-graph-observability.md).
+ * Graph observability and visualization, READ-ONLY over the entity/relation
+ * graph.
  *
  * This module only READS the graph (`loadEntities` / `loadRelations`) and renders
  * view-models; it issues no INSERT/UPDATE/DELETE, so `scripts/check-graph-writes.mjs`

package/dist/graph-view.js

@@ -1,6 +1,6 @@
 /**
- * E3 graph observability + visualization — READ-ONLY over the entity/relation
- * graph (docs/plans/2026-06-02-graph-observability.md).
+ * Graph observability and visualization, READ-ONLY over the entity/relation
+ * graph.
  *
  * This module only READS the graph (`loadEntities` / `loadRelations`) and renders
  * view-models; it issues no INSERT/UPDATE/DELETE, so `scripts/check-graph-writes.mjs`
@@ -20,7 +20,7 @@ export function buildGraphModel(hippoRoot, tenantId, opts = {}) {
     const limit = opts.limit ?? DEFAULT_VIEW_LIMIT;
     // All reads run inside ONE read snapshot so a concurrent `graph extract` /
     // sleep-drain rebuild can't make the model mix old entity ids with new relation
-    // ids (codex P2). Every load* call below is passed the snapshot connection `db`.
+    // ids. Every load* call below is passed the snapshot connection `db`.
     return withGraphReadSnapshot(hippoRoot, (db) => {
         let nodeEntities;
         let relations;
@@ -31,7 +31,7 @@ export function buildGraphModel(hippoRoot, tenantId, opts = {}) {
             // (2) A name can map to MANY entities (e.g. many notes for one customer), so
             // cap the focus matches. (3) Discover 1-hop neighbours and cap the UNION to
             // `limit` nodes. (4) Load ALL edges AMONG the union so neighbour-to-neighbour
-            // edges that don't touch the focus are included too. (codex P2s.)
+            // edges that don't touch the focus are included too.
             const focus = loadEntitiesByName(hippoRoot, tenantId, opts.entity, { limit }, db);
             if (focus.length === 0)
                 return { nodes: [], edges: [], truncated: false };
@@ -51,12 +51,12 @@ export function buildGraphModel(hippoRoot, tenantId, opts = {}) {
             nodeEntities = loadEntitiesByIds(hippoRoot, tenantId, unionIds, db);
             // Edges AMONG the union (BOTH endpoints in the set): includes
             // neighbour-to-neighbour edges, and the LIMIT can never drop a valid in-union
-            // edge in favour of out-of-union rows (codex P2).
+            // edge in favour of out-of-union rows.
             relations = loadRelationsAmong(hippoRoot, tenantId, unionIds, { limit }, db);
             truncated =
                 focus.length >= limit ||
-                    hop.length >= limit || // neighbour scan capped -> a 1-hop neighbour may be omitted (codex P2)
-                    neighboursCapped || // node cap filled before all neighbours were consumed (codex P2)
+                    hop.length >= limit || // neighbour scan capped -> a 1-hop neighbour may be omitted
+                    neighboursCapped || // node cap filled before all neighbours were consumed
                     union.size > unionIds.length ||
                     relations.length >= limit;
         }

package/dist/half-life-migration.d.ts

@@ -5,8 +5,7 @@
  * default base and a few write-time multipliers (`deriveHalfLife`). Changing
  * the default therefore reaches only new memories; without this migration a
  * store would mix old-base and new-base memories, a state the decay
- * evaluation never tested (docs/evals/2026-09-24-decay-default-prereg.md,
- * Migration). The rule, declared there before any run:
+ * evaluation never tested. The rule, declared before any run:
  *
  * - only a memory still on the old base is rescaled: its half-life is
  *   `deriveHalfLife(from, entry)` plus its recall bonus. A memory hippo shortened since

package/dist/half-life-migration.js

@@ -5,8 +5,7 @@
  * default base and a few write-time multipliers (`deriveHalfLife`). Changing
  * the default therefore reaches only new memories; without this migration a
  * store would mix old-base and new-base memories, a state the decay
- * evaluation never tested (docs/evals/2026-09-24-decay-default-prereg.md,
- * Migration). The rule, declared there before any run:
+ * evaluation never tested. The rule, declared before any run:
  *
  * - only a memory still on the old base is rescaled: its half-life is
  *   `deriveHalfLife(from, entry)` plus its recall bonus. A memory hippo shortened since
@@ -151,7 +150,7 @@ function objectMemoryIds(db) {
     }
     return { all, retired };
 }
-/** Memories that lost a conflict, which resolveConflict halved untagged. A resolved conflict with no audit row (before v1.31.0, or found stale) names no winner, so both sides count. */
+/** Memories that lost a conflict, which resolveConflict halved untagged. A resolved conflict with no audit row (resolved before resolves were audited, or found stale) names no winner, so both sides count. */
 function conflictLosers(db) {
     // SAFETY: SELECT of two fields every conflict_resolve audit row carries (ConflictResolveMeta in store.ts).
     const audited = db.prepare(`SELECT json_extract(metadata_json, '$.conflictId') AS conflictId, json_extract(metadata_json, '$.loserId') AS loserId FROM audit_log WHERE op = 'conflict_resolve'`).all();

package/dist/hooks/codex-session.js

@@ -1,6 +1,6 @@
 import * as fs from 'fs';
 import * as path from 'path';
-import { isJsonString } from './shared.js';
+import { isJsonString } from '../json.js';
 function collectFiles(dir) {
     if (!fs.existsSync(dir))
         return [];

package/dist/hooks/codex-wrapper.d.ts

@@ -49,7 +49,7 @@ export declare function isCodexWrapperInstalled(): boolean;
  * opt-in record. Never performs a first install. Replacing another vendor's
  * binary must stay behind the explicit `hippo hook install codex` command;
  * doing it from postinstall or routine commands is a consent violation and
- * reads as binary hijacking to security scanners (issue #133).
+ * reads as binary hijacking to security scanners.
  */
 export declare function repairCodexWrapperIfInstalled(hippoCliPath?: string): EnsureCodexWrapperResult;
 //# sourceMappingURL=codex-wrapper.d.ts.map

package/dist/hooks/codex-wrapper.js

@@ -2,7 +2,8 @@ import { envPath } from '../env.js';
 import * as fs from 'fs';
 import * as path from 'path';
 import { fileURLToPath } from 'url';
-import { isJsonString, HIPPO_CODEX_WRAPPER_MARKER, homeDir, codexHomeDir, ensureDir } from './shared.js';
+import { HIPPO_CODEX_WRAPPER_MARKER, homeDir, codexHomeDir, ensureDir } from './shared.js';
+import { isJsonString } from '../json.js';
 export function resolveCodexWrapperPaths() {
     const home = homeDir();
     const codexHome = codexHomeDir(home);
@@ -271,7 +272,7 @@ export function isCodexWrapperInstalled() {
  * opt-in record. Never performs a first install. Replacing another vendor's
  * binary must stay behind the explicit `hippo hook install codex` command;
  * doing it from postinstall or routine commands is a consent violation and
- * reads as binary hijacking to security scanners (issue #133).
+ * reads as binary hijacking to security scanners.
  */
 export function repairCodexWrapperIfInstalled(hippoCliPath = resolveHippoCliPath()) {
     if (readCodexWrapperMetadata() === null) {

package/dist/hooks/json-hooks.d.ts

@@ -23,8 +23,8 @@
  *
  * 2. Plugin install (OpenCode only). OpenCode does NOT share Claude Code's
  *    JSON-hook schema — its config has `additionalProperties: false` and no
- *    `hooks` key, so v1.10.x-v1.11.1's JSON-hook installer broke opencode
- *    launch (issue #24). Hippo now installs a TypeScript plugin at
+ *    `hooks` key, so a JSON-hook install breaks opencode launch. Hippo
+ *    installs a TypeScript plugin at
  *    `~/.config/opencode/plugins/hippo.ts` subscribing to opencode's
  *    `session.idle` (→ `hippo session-end`) and `session.created` (→
  *    `hippo last-sleep`) events. See OPENCODE_PLUGIN_SOURCE below for the

package/dist/hooks/json-hooks.js

@@ -23,8 +23,8 @@
  *
  * 2. Plugin install (OpenCode only). OpenCode does NOT share Claude Code's
  *    JSON-hook schema — its config has `additionalProperties: false` and no
- *    `hooks` key, so v1.10.x-v1.11.1's JSON-hook installer broke opencode
- *    launch (issue #24). Hippo now installs a TypeScript plugin at
+ *    `hooks` key, so a JSON-hook install breaks opencode launch. Hippo
+ *    installs a TypeScript plugin at
  *    `~/.config/opencode/plugins/hippo.ts` subscribing to opencode's
  *    `session.idle` (→ `hippo session-end`) and `session.created` (→
  *    `hippo last-sleep`) events. See OPENCODE_PLUGIN_SOURCE below for the
@@ -34,7 +34,8 @@
  */
 import * as fs from 'fs';
 import * as path from 'path';
-import { isJsonString, isJsonObject, HIPPO_SLEEP_MARKER, HIPPO_LAST_SLEEP_MARKER, HIPPO_CAPTURE_MARKER, HIPPO_SESSION_END_MARKER, HIPPO_PINNED_INJECT_MARKER, HIPPO_PINNED_INJECT_COMMAND, HIPPO_PRE_COMPACT_MARKER, HIPPO_COMPACT_RESUME_MARKER, HIPPO_CAPTURE_ERROR_MARKER, HIPPO_POST_COMPACT_MARKER, homeDir, codexHomeDir, defaultPreCompactLogPath } from './shared.js';
+import { isJsonObject, HIPPO_SLEEP_MARKER, HIPPO_LAST_SLEEP_MARKER, HIPPO_CAPTURE_MARKER, HIPPO_SESSION_END_MARKER, HIPPO_PINNED_INJECT_MARKER, HIPPO_PINNED_INJECT_COMMAND, HIPPO_PRE_COMPACT_MARKER, HIPPO_COMPACT_RESUME_MARKER, HIPPO_CAPTURE_ERROR_MARKER, HIPPO_POST_COMPACT_MARKER, homeDir, codexHomeDir, defaultPreCompactLogPath } from './shared.js';
+import { isJsonString } from '../json.js';
 export function resolveJsonHookPaths(target) {
     const home = homeDir();
     const logsDir = path.join(home, '.hippo', 'logs');
@@ -91,7 +92,7 @@ function migratePinnedInjectRecentCommands(hookArray) {
 }
 /**
  * Returns true when `hooks.SessionEnd` still contains either of the legacy
- * v0.22.x split entries (bare `hippo sleep` / `hippo capture --last-session`)
+ * split entries (bare `hippo sleep` / `hippo capture --last-session`)
  * without the current consolidated `hippo session-end` entry.
  */
 function hasLegacySplitSessionEnd(hookArray) {

package/dist/hooks/opencode.d.ts

@@ -7,7 +7,7 @@ declare const HIPPO_OPENCODE_PLUGIN_MARKER = "HIPPO_OPENCODE_PLUGIN_V1";
  *   session.idle    → `hippo session-end` (Claude Code's SessionEnd equiv)
  *   session.created → `hippo last-sleep` (Claude Code's SessionStart equiv)
  *
- * Design choices forced by plan-eng-critic Rev 0 review (2026-05-23):
+ * Design choices:
  *
  * 1. No `import type { Plugin } from "@opencode-ai/plugin"`. The package's npm
  *    publication status was unverifiable from the build sandbox (npmjs.com

package/dist/hooks/opencode.js

@@ -1,6 +1,7 @@
 import * as fs from 'fs';
 import * as path from 'path';
-import { isJsonString, isJsonObject, homeDir } from './shared.js';
+import { isJsonObject, homeDir } from './shared.js';
+import { isJsonString } from '../json.js';
 const HIPPO_OPENCODE_PLUGIN_MARKER = 'HIPPO_OPENCODE_PLUGIN_V1';
 /**
  * The opencode plugin file we install at ~/.config/opencode/plugins/hippo.ts.
@@ -10,7 +11,7 @@ const HIPPO_OPENCODE_PLUGIN_MARKER = 'HIPPO_OPENCODE_PLUGIN_V1';
  *   session.idle    → `hippo session-end` (Claude Code's SessionEnd equiv)
  *   session.created → `hippo last-sleep` (Claude Code's SessionStart equiv)
  *
- * Design choices forced by plan-eng-critic Rev 0 review (2026-05-23):
+ * Design choices:
  *
  * 1. No `import type { Plugin } from "@opencode-ai/plugin"`. The package's npm
  *    publication status was unverifiable from the build sandbox (npmjs.com
@@ -79,11 +80,11 @@ function resolveOpencodeConfigPath() {
  * hippo itself installs (session-end, last-sleep, sleep, capture, context),
  * not any third-party tool that happens to be named `hippo`.
  *
- * Critic-mandated structural check (Rev 0): substring matching against
+ * Structural check: substring matching against
  * arbitrary user content is unsafe — a user's
  * `echo "remember to hippo sleep your laptop"` is not a hippo-owned hook.
  *
- * Per-hook (not per-entry) granularity (Rev 1 review): an entry whose inner
+ * Per-hook (not per-entry) granularity: an entry whose inner
  * hooks array mixes hippo-installed commands with user-authored commands
  * must NOT lose the user-authored commands. The migration filters the inner
  * array per-hook, then drops the entry only when its inner array is empty.

package/dist/hooks/shared.d.ts

@@ -1,10 +1,6 @@
-import type { JsonValue, JsonObject } from '../working-memory.js';
-/** JSON-value string check. `constructor` narrows a primitive via its boxed wrapper
- *  instead of inspecting the `typeof` tag (anti-slop/no-runtime-typeof); equivalent to
- *  `typeof value === 'string'` for every value JSON.parse can ever produce. */
-export declare function isJsonString(value: JsonValue | undefined): value is string;
-/** JSON-value plain-object check (excludes arrays and null), typeof-free for the same
- *  reason as isJsonString above. */
+import type { JsonObject } from '../working-memory.js';
+import type { JsonValue } from '../json.js';
+/** JSON-value plain-object check (excludes arrays and null); `constructor` avoids the `typeof` tag banned by anti-slop/no-runtime-typeof. */
 export declare function isJsonObject(value: JsonValue | undefined): value is JsonObject;
 export type JsonHookTarget = 'claude-code' | 'codex';
 export interface ToolDetection {

package/dist/hooks/shared.js

@@ -2,14 +2,7 @@ import { envHomeDir, processEnv } from '../env.js';
 import * as fs from 'fs';
 import * as os from 'os';
 import * as path from 'path';
-/** JSON-value string check. `constructor` narrows a primitive via its boxed wrapper
- *  instead of inspecting the `typeof` tag (anti-slop/no-runtime-typeof); equivalent to
- *  `typeof value === 'string'` for every value JSON.parse can ever produce. */
-export function isJsonString(value) {
-    return value !== undefined && value !== null && value.constructor === String;
-}
-/** JSON-value plain-object check (excludes arrays and null), typeof-free for the same
- *  reason as isJsonString above. */
+/** JSON-value plain-object check (excludes arrays and null); `constructor` avoids the `typeof` tag banned by anti-slop/no-runtime-typeof. */
 export function isJsonObject(value) {
     return value !== undefined && value !== null && !Array.isArray(value) && value.constructor === Object;
 }

package/dist/http-util.d.ts

@@ -1,9 +1,8 @@
 import type { IncomingMessage, ServerResponse } from 'node:http';
-export type JsonValue = string | number | boolean | null | JsonValue[] | {
-    [key: string]: JsonValue;
-};
+import type { JsonValue } from './json.js';
 export declare function isJsonObjectRecord(value: JsonValue | undefined): value is Record<string, JsonValue>;
 export declare function isHeaderString(value: string | string[] | undefined): value is string;
+export declare const MAX_ID_LEN = 256;
 export declare const JSON_HEADERS: {
     readonly 'content-type': "application/json";
 };

package/dist/http-util.js

@@ -1,4 +1,5 @@
 import { ApiError } from './api-errors.js';
+// Leaf module shared by server.ts and the connector webhook receivers; it must not import either.
 export function isJsonObjectRecord(value) {
     return value !== undefined && value !== null && typeof value === 'object' && !Array.isArray(value);
 }
@@ -10,6 +11,8 @@ export function isHeaderString(value) {
 // 1 MB body cap. The CLI never sends payloads near this; anything bigger is
 // almost certainly a misconfigured client or a deliberate memory-blowup attempt.
 const MAX_BODY_BYTES = 1024 * 1024;
+// Cap for id-shaped request fields (ids, tenant, session, scope, class): far above real values, small enough to bound logs and indexes.
+export const MAX_ID_LEN = 256;
 export const JSON_HEADERS = { 'content-type': 'application/json' };
 export class HttpError extends Error {
     status;

package/dist/importers/core.d.ts

@@ -3,6 +3,7 @@
  * Imports memories from ChatGPT, Claude, Cursor, generic files, and structured markdown.
  */
 import { MemoryEntry } from '../memory.js';
+import type { JsonValue } from '../json.js';
 export interface ImportResult {
     total: number;
     imported: number;
@@ -44,7 +45,7 @@ export interface ImportOptions {
      * sharing a basename would collide and clobber each other). importVault throws
      * if it is missing or blank. Optional in this shared type only because the
      * other importers ignore it. Operator-supplied, so the loader query LIKE-escapes
-     * it (see `escapeLike` below).
+     * it (`escapeLike` in src/escape.ts).
      */
     name?: string;
     /**
@@ -58,14 +59,6 @@ export interface ImportOptions {
  * create MemoryEntry objects, write them (unless dry-run), and return a result.
  */
 export declare function importEntries(chunks: string[], source: string, tags: string[], options: ImportOptions): ImportResult;
-/** The full value space `JSON.parse` can produce. Boundary-guard functions in
- *  this file accept `JsonValue` (never `unknown`) so a value's origin as
- *  unparsed external JSON stays visible in its type, then narrow it via the
- *  `isJson*` predicates below. */
-export type JsonValue = string | number | boolean | null | JsonValue[] | {
-    [key: string]: JsonValue;
-};
-export declare function isJsonString(x: JsonValue): x is string;
 export declare function isJsonPlainObject(x: JsonValue): x is {
     [key: string]: JsonValue;
 };

package/dist/importers/core.js

@@ -3,7 +3,8 @@
  * Imports memories from ChatGPT, Claude, Cursor, generic files, and structured markdown.
  */
 import { createMemory, Layer } from '../memory.js';
-import { writeEntry } from '../store/entry-writes.js';
+import { writeEntryOn } from '../store/entry-writes.js';
+import { openStore } from '../store/open.js';
 import { loadAllEntries } from '../store/entry-reads.js';
 import { duplicateKey, storedTextKeys } from '../same-text.js';
 import { getGlobalRoot, initGlobal } from '../shared.js';
@@ -34,12 +35,8 @@ export function importEntries(chunks, source, tags, options) {
     let rejected = 0;
     let redacted = 0;
     const entries = [];
-    // AT1 P2 fix: a dry-run preview never called writeEntry, so it never
-    // checked tombstones either — every non-duplicate chunk counted as
-    // `imported` even when a real run would refuse it, making the preview's
-    // `rejected` count silently 0. Probe (read-only) via the same guard
-    // writeEntry uses internally, without ever writing.
-    const dryRunDb = options.dryRun ? openHippoDb(targetRoot) : null;
+    // A dry run probes the rejection guard read-only; a real run writes every chunk on this one handle.
+    const db = options.dryRun ? openHippoDb(targetRoot) : openStore(targetRoot);
     try {
         for (const raw of chunks) {
             const { chunk, wasRedacted } = prepareImportChunk(raw, allTags);
@@ -55,7 +52,7 @@ export function importEntries(chunks, source, tags, options) {
                 continue;
             }
             const entry = createImportEntry(chunk, source, allTags, options, baseHalfLifeDays);
-            if (!writeOrProbeImport(targetRoot, entry, options, dryRunDb)) {
+            if (!writeOrProbeImport(db, targetRoot, entry, options)) {
                 rejected++;
                 continue;
             }
@@ -70,8 +67,7 @@ export function importEntries(chunks, source, tags, options) {
         return { total, imported, skipped, rejected, redacted, entries };
     }
     finally {
-        if (dryRunDb)
-            closeHippoDb(dryRunDb);
+        closeHippoDb(db);
     }
 }
 /** The secret-vetted chunk capped at 1000 chars, and whether vetting changed it. */
@@ -106,24 +102,13 @@ function createImportEntry(chunk, source, allTags, options, baseHalfLifeDays) {
     });
 }
 /** Writes the entry, or on a dry run only probes the guard; false when a rejected value refuses it. */
-function writeOrProbeImport(targetRoot, entry, options, dryRunDb) {
-    if (options.dryRun) {
-        if (dryRunDb) {
-            try {
-                checkRejectionGuard(dryRunDb, entry.tenantId ?? 'default', entry.id, entry.content);
-            }
-            catch (err) {
-                if (err instanceof RejectedValueError)
-                    return false;
-                throw err;
-            }
-        }
-        return true;
-    }
-    // AT1 (plan §3 containment): a rejection refuses one CHUNK, not the
-    // whole import batch. Caught per-item so siblings still land.
+function writeOrProbeImport(db, targetRoot, entry, options) {
+    // A rejection refuses one chunk, not the whole import, so siblings still land.
     try {
-        writeEntry(targetRoot, entry);
+        if (options.dryRun)
+            checkRejectionGuard(db, entry.tenantId ?? 'default', entry.id, entry.content);
+        else
+            writeEntryOn(db, targetRoot, entry);
     }
     catch (err) {
         if (err instanceof RejectedValueError)
@@ -132,9 +117,9 @@ function writeOrProbeImport(targetRoot, entry, options, dryRunDb) {
     }
     return true;
 }
-export function isJsonString(x) {
-    return typeof x === 'string';
-}
+// ---------------------------------------------------------------------------
+// ChatGPT importer
+// ---------------------------------------------------------------------------
 export function isJsonPlainObject(x) {
     return x !== null && !Array.isArray(x) && typeof x === 'object';
 }

package/dist/importers/sources.js

@@ -1,7 +1,8 @@
 import * as fs from 'fs';
 import * as path from 'path';
-import { importEntries, isJsonString, isJsonPlainObject } from './core.js';
+import { importEntries, isJsonPlainObject } from './core.js';
 import { parseFrontmatter, collectMarkdownFiles } from './markdown-parse.js';
+import { isJsonString } from '../json.js';
 /** Coerce one imported record (string, `{content|text: ...}` object, or
  *  anything else) into the plain-text memory chunk it represents. */
 function extractMemoryText(candidate) {

package/dist/importers/vault.js

@@ -9,27 +9,9 @@ import { RejectedValueError, checkRejectionGuard } from '../rejection.js';
 import { loadConfig } from '../config.js';
 import { vetSecrets } from '../secret-detect.js';
 import { log } from '../log.js';
-import { isJsonString } from './core.js';
 import { parseFrontmatter, frontmatterList, parseWikilinks, collectMarkdownFiles, realpathOrResolve } from './markdown-parse.js';
-// ---------------------------------------------------------------------------
-// K1 vault importer (markdown-vault FOLDER → kind='raw' memories)
-//
-// MIRRORS THE CONNECTOR PATTERN (src/connectors/slack|github), NOT the
-// single-file importers above. Each note becomes a single kind='raw' row with
-// provenance in TAGS (`source:vault` + `vault:<name>`), an artifactRef cursor
-// key, and a content-hash tag. Changes APPEND a new raw row after archiveRaw of
-// the old one; deletions archiveRaw the orphaned rows. We NEVER `supersede` a
-// raw row (supersede yields kind='distilled', losing raw-append-only protection
-// and escaping the kind='raw' deletion rescan) — all raw deletions route through
-// `archiveRaw` (the only trigger-legit raw delete).
-// ---------------------------------------------------------------------------
-/** Escape LIKE wildcards in operator-supplied text (mirror of
- *  src/project-briefs.ts:477 / src/store/search-rows.ts, kept local since neither is
- *  exported). Used so a `%`/`_`/`\` in the vault name cannot over-match the
- *  loader prefix and archive another vault's rows. */
-function escapeLike(term) {
-    return term.replace(/[%_\\]/g, '\\$&');
-}
+import { isJsonString } from '../json.js';
+import { escapeLike } from '../escape.js';
 /**
  * Import a markdown vault FOLDER as `kind='raw'` memories.
  *

package/dist/incidents.d.ts

@@ -1,5 +1,5 @@
 /**
- * E2 incident first-class object (docs/plans/2026-05-29-e2-incident-object.md).
+ * Incident first-class object.
  *
  * An incident is a postmortem capsule: a recorded operational event with a
  * lifecycle and optional linked receipts (the memories that are its evidence).

package/dist/incidents.js

@@ -1,5 +1,5 @@
 /**
- * E2 incident first-class object (docs/plans/2026-05-29-e2-incident-object.md).
+ * Incident first-class object.
  *
  * An incident is a postmortem capsule: a recorded operational event with a
  * lifecycle and optional linked receipts (the memories that are its evidence).
@@ -77,6 +77,50 @@ const INCIDENT_COLS = `
 // ---------------------------------------------------------------------------
 // Public API
 // ---------------------------------------------------------------------------
+// Validate every linked receipt BEFORE inserting the row. Each must be a
+// memory in the SAME tenant; a cross-tenant or nonexistent id rejects the
+// whole write rather than recording an unverifiable receipt.
+function validateLinkedMemoryIds(db, tenantId, linkInput) {
+    const validated = [];
+    for (const linkId of linkInput) {
+        // SAFETY: row shape matches the single `id` column named in the SELECT above.
+        const exists = db.prepare(`SELECT id FROM memories WHERE id = ? AND tenant_id = ?`).get(linkId, tenantId);
+        if (!exists) {
+            throw new NotFoundError(`saveIncident: linked memory ${linkId} not found for tenant ${tenantId}`);
+        }
+        validated.push(linkId);
+    }
+    return validated;
+}
+/** The afterWrite body: link validation, INSERT, reload, open audit, all in one SAVEPOINT. */
+function writeIncidentRow(db, memoryId, tenantId, opts, actor, now) {
+    const validated = validateLinkedMemoryIds(db, tenantId, opts.linkedMemoryIds ?? []);
+    const result = db.prepare(`
+    INSERT INTO incidents(
+      memory_id, tenant_id, incident_text, context,
+      status, resolution_text, resolved_at, closed_at, linked_memory_ids, created_at
+    ) VALUES (?, ?, ?, ?, 'open', NULL, NULL, NULL, ?, ?)
+  `).run(memoryId, tenantId, opts.incidentText, opts.context ?? null, JSON.stringify(validated), now);
+    const incidentId = Number(result.lastInsertRowid ?? 0);
+    // SAFETY: row's shape matches the columns named in INCIDENT_COLS above.
+    const row = db.prepare(`SELECT ${INCIDENT_COLS} FROM incidents WHERE id = ?`)
+        .get(incidentId);
+    if (!row)
+        throw new Error('saveIncident: failed to reload saved incident row');
+    // GDPR-light metadata: id + flag only, no incident_text.
+    appendAuditEvent(db, {
+        tenantId,
+        actor,
+        op: 'incident_open',
+        targetId: String(incidentId),
+        metadata: {
+            incident_id: incidentId,
+            has_context: opts.context !== undefined && opts.context !== null && opts.context !== '',
+            linked_memory_count: validated.length,
+        },
+    });
+    return row;
+}
 /**
  * Create an incident. Writes the memory mirror + the incidents row atomically
  * inside writeEntry's SAVEPOINT 'write_entry'.
@@ -106,50 +150,13 @@ export function saveIncident(hippoRoot, tenantId, opts, actor = 'cli') {
         baseHalfLifeDays: objectHalfLifeDays(hippoRoot),
         tenantId,
     });
-    const linkInput = opts.linkedMemoryIds ?? [];
     // Populated inside afterWrite so the linked-id validation, the INSERT, and the
     // memory write all share one SAVEPOINT.
     let savedRow;
     writeEntry(hippoRoot, mem, {
         actor,
         afterWrite: (db, memoryId) => {
-            // Validate every linked receipt BEFORE inserting the row. Each must be a
-            // memory in the SAME tenant; a cross-tenant or nonexistent id rejects the
-            // whole write rather than recording an unverifiable receipt.
-            const validated = [];
-            for (const linkId of linkInput) {
-                // SAFETY: row shape matches the single `id` column named in the SELECT above.
-                const exists = db.prepare(`SELECT id FROM memories WHERE id = ? AND tenant_id = ?`).get(linkId, tenantId);
-                if (!exists) {
-                    throw new NotFoundError(`saveIncident: linked memory ${linkId} not found for tenant ${tenantId}`);
-                }
-                validated.push(linkId);
-            }
-            const result = db.prepare(`
-        INSERT INTO incidents(
-          memory_id, tenant_id, incident_text, context,
-          status, resolution_text, resolved_at, closed_at, linked_memory_ids, created_at
-        ) VALUES (?, ?, ?, ?, 'open', NULL, NULL, NULL, ?, ?)
-      `).run(memoryId, tenantId, opts.incidentText, opts.context ?? null, JSON.stringify(validated), now);
-            const incidentId = Number(result.lastInsertRowid ?? 0);
-            // SAFETY: row's shape matches the columns named in INCIDENT_COLS above.
-            const row = db.prepare(`SELECT ${INCIDENT_COLS} FROM incidents WHERE id = ?`)
-                .get(incidentId);
-            if (!row)
-                throw new Error('saveIncident: failed to reload saved incident row');
-            savedRow = row;
-            // GDPR-light metadata: id + flag only, no incident_text.
-            appendAuditEvent(db, {
-                tenantId,
-                actor,
-                op: 'incident_open',
-                targetId: String(incidentId),
-                metadata: {
-                    incident_id: incidentId,
-                    has_context: opts.context !== undefined && opts.context !== null && opts.context !== '',
-                    linked_memory_count: validated.length,
-                },
-            });
+            savedRow = writeIncidentRow(db, memoryId, tenantId, opts, actor, now);
         },
     });
     if (!savedRow) {

package/dist/instruction-detect.d.ts

@@ -1,4 +1,4 @@
-/** Prompt-injection detection for untrusted memory content (CD5). Same shape as secret-detect.ts; leaf module, no store/api/shared imports. */
+/** Prompt-injection detection for untrusted memory content. Same shape as secret-detect.ts; leaf module, no store/api/shared imports. */
 export interface InstructionDetection {
     flagged: boolean;
     reason: string | null;

package/dist/instruction-detect.js

@@ -1,4 +1,4 @@
-/** Prompt-injection detection for untrusted memory content (CD5). Same shape as secret-detect.ts; leaf module, no store/api/shared imports. */
+/** Prompt-injection detection for untrusted memory content. Same shape as secret-detect.ts; leaf module, no store/api/shared imports. */
 const INSTRUCTION_PATTERNS = [
     { name: 'override-instructions', re: /\b(?:ignore|disregard|forget)\b[^.\n]{0,40}\b(?:previous|prior|above)\b[^.\n]{0,40}\binstructions?\b/i },
     { name: 'role-reassignment', re: /\b(?:you are now|act as|pretend to be)\b[^.\n]{0,40}\b(?:an?\s+)?(?:ai|assistant|agent|system)\b/i },

package/dist/invalidation.d.ts

@@ -47,7 +47,10 @@ export interface ChurnRefs {
 export declare function extractChurnRefs(content: string): ChurnRefs;
 export interface DetectChurnStaleOptions {
     tenantId: string;
+    /** The project id; rows under it or legacyName are checked. */
     projectName: string;
+    /** The folder name older rows carry, and the repo folder a memory's paths may start with. */
+    legacyName?: string;
     /** Evaluate matches but write nothing. */
     dryRun?: boolean;
 }