feat(claims): bulk clear for auto-approved claims (#433)

[dripsmvcp]

what changed

adds a way to bulk-clear auto-saved claims while keeping human-reviewed knowledge intact. a new clear_claims() lifecycle op filters durable claims by auto-approval status and an optional --before date, then archives (never deletes) the matches under a single audit event. exposed on all three surfaces: vouch claims-clear (cli), kb.clear_claims (mcp + jsonl), and registered in capabilities.METHODS. two additive fields on the claim model — auto_approved and proposed_by — record provenance at approval time so the filter has something to key on (auto_approved is set when the approver equals the proposer, i.e. trusted-agent mode).

why

when review.approver_role: trusted-agent is enabled, an agent can approve its own proposals, so a bad calibration run can silently pile up low-quality claims the user never actually reviewed. today there's no way to walk that back short of hand-archiving each one. this gives users a reset button that is precise (only auto-approved claims by default), reversible (archive, not delete), previewable (--dry-run), and fully audited. closes #433.

proof

captured from a live run of the shipped cli against a fresh kb in trusted-agent mode — three auto-approved claims cleared, the human-reviewed claim left as working, one claim.bulk_clear audit event written:

what might break

• on-disk claim shape changes (additive). Claim gains auto_approved: bool = false and proposed_by: str | none = none. existing claims load fine — the defaults apply — so no migration is required.
• not retroactive. claims approved before this change carry auto_approved: false, so claims-clear --auto-only will not catch historical auto-approvals; only claims approved after upgrade are flagged. a backfill could be a follow-up.
• new kb.* method + new audit event. kb.clear_claims joins the method surface and claim.bulk_clear is a new audit-log event type. adapters that enumerate methods or parse the audit stream will see both.
• no files move; no existing field changes shape; no existing method changes behaviour.

vep

this touches the surface (new kb.* method, new on-disk fields, new audit event), which per the template needs an accepted vep first. flagging it — happy to write one up if this should be gated on that before review.

tests

• new behaviour has a test — tests/test_clear_claims.py, 6 cases: auto-only filter, --before date filter, dry-run makes no changes, already-archived skipped, auto_only=false clears all, audit event shape
• make check passes locally — the new suite is green, but test_capabilities fails in my env because the embeddings extras aren't installed (pre-existing surface-parity gaps), and mypy/ruff weren't runnable without the venv tooling. needs a clean run before merge.
• CHANGELOG.md updated under ## [Unreleased] — not done yet.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 74e83987-a7de-4964-b4f0-1b5602943c20

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[plind-junior]

Update the webapp as well and attach the screenshot of the webapp with cli