hippo-memory 1.40.0 → 1.41.0

package/dist/src/index.js

@@ -5,11 +5,11 @@ export { Layer, calculateStrength, resolveConfidence, confidenceFacets, createMe
 export { search, hybridSearch, physicsSearch, markRetrieved, estimateTokens, textOverlap, tokenize, explainMatch, detectTemporalDirection, temporalBoost, computeTemporalRange } from './search.js';
 export { multihopSearch } from './multihop.js';
 export { graphExpandRecall, MAX_HOPS, DEFAULT_MAX_NEIGHBORS } from './graph-recall.js';
-export { initStore, loadAllEntries, loadSearchEntries, loadRecallSearchEntries, writeEntry, readEntry, deleteEntry, loadIndex, rebuildIndex, saveActiveTaskSnapshot, loadActiveTaskSnapshot, loadFreshActiveTaskSnapshot, SNAPSHOT_AMBIENT_MAX_AGE_MS, closeTaskSnapshotsForSession, clearActiveTaskSnapshot, appendSessionEvent, listSessionEvents, listMemoryConflicts, replaceDetectedConflicts, resolveConflict, saveSessionHandoff, loadLatestHandoff, loadHandoffById, stampHandoffOutcome, writeSessionEndHandoff, loadSessionDecayContext, createCard, loadCard, listCards, loadCardDeps, loadCardRuns, loadCardComments, claimCard, blockCard, reviewCard, completeCard, addCardComment, loadLatestHandoffForCard, } from './store.js';
+export { initStore, loadAllEntries, loadSearchEntries, loadRecallSearchEntries, writeEntry, readEntry, deleteEntry, loadIndex, rebuildIndex, saveActiveTaskSnapshot, loadActiveTaskSnapshot, loadFreshActiveTaskSnapshot, SNAPSHOT_AMBIENT_MAX_AGE_MS, closeTaskSnapshotsForSession, clearActiveTaskSnapshot, appendSessionEvent, listSessionEvents, listMemoryConflicts, replaceDetectedConflicts, resolveConflict, saveSessionHandoff, loadLatestHandoff, loadHandoffById, stampHandoffOutcome, writeSessionEndHandoff, loadSessionDecayContext, createCard, loadCard, listCards, loadCardDeps, loadCardRuns, loadCardComments, claimCard, heartbeatCard, blockCard, reviewCard, completeCard, reclaimExpiredCards, addCardComment, loadLatestHandoffForCard, } from './store.js';
 // Feature 5: Session handoff
 export { isHandoffOutcome } from './handoff.js';
 // W2a: work-queue cards
-export { isCardStatus, CARD_TRANSITIONS } from './card.js';
+export { isCardStatus, CARD_TRANSITIONS, CARD_LEASE_MS } from './card.js';
 export { consolidate } from './consolidate.js';
 // Announced public in CHANGELOG 1.26.3 but never re-exported; the rest of dedupe.js stays internal.
 export { strengthBucket } from './dedupe.js';

package/dist/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAe,KAAK,EAAmD,iBAAiB,EAAE,iBAAiB,EAAE,gBAAgB,EAAyB,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC3O,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,uBAAuB,EAAE,aAAa,EAAE,oBAAoB,EAAkC,MAAM,aAAa,CAAC;AACpO,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,qBAAqB,EAAwB,MAAM,mBAAmB,CAAC;AAC7G,OAAO,EACL,SAAS,EACT,cAAc,EACd,iBAAiB,EACjB,uBAAuB,EACvB,UAAU,EACV,SAAS,EACT,WAAW,EACX,SAAS,EACT,YAAY,EACZ,sBAAsB,EACtB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,4BAA4B,EAC5B,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,wBAAwB,EACxB,eAAe,EACf,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,mBAAmB,EACnB,sBAAsB,EACtB,uBAAuB,EAEvB,UAAU,EACV,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,SAAS,EACT,SAAS,EACT,UAAU,EACV,YAAY,EACZ,cAAc,EACd,wBAAwB,GACzB,MAAM,YAAY,CAAC;AAEpB,6BAA6B;AAC7B,OAAO,EAAmD,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACjG,wBAAwB;AACxB,OAAO,EAA2D,YAAY,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AACpH,OAAO,EAAE,WAAW,EAAuB,MAAM,kBAAkB,CAAC;AACpE,oGAAoG;AACpG,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,8BAA8B;AAC9B,OAAO,EACL,oBAAoB,EACpB,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,QAAQ,GACT,MAAM,iBAAiB,CAAC;AAEzB,oCAAoC;AACpC,OAAO,EACL,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,UAAU,EACV,WAAW,GACZ,MAAM,gBAAgB,CAAC;AAExB,uCAAuC;AACvC,OAAO,EACL,aAAa,EACb,UAAU,EACV,eAAe,EACf,UAAU,EACV,gBAAgB,EAChB,iBAAiB,EAEjB,aAAa,EACb,WAAW,EACX,SAAS,EACT,SAAS,GACV,MAAM,aAAa,CAAC;AAErB,4BAA4B;AAC5B,OAAO,EACL,MAAM,EACN,MAAM,EACN,OAAO,EACP,OAAO,EAEP,cAAc,GACf,MAAM,qBAAqB,CAAC;AAE7B,8BAA8B;AAC9B,OAAO,EACL,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,cAAc,EACd,WAAW,EACX,aAAa,GAGd,MAAM,gBAAgB,CAAC;AAExB,qBAAqB;AACrB,OAAO,EACL,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AAEzB,8BAA8B;AAC9B,OAAO,EACL,eAAe,GAIhB,MAAM,eAAe,CAAC;AAEvB,qCAAqC;AACrC,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,GAEpB,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAe,KAAK,EAAmD,iBAAiB,EAAE,iBAAiB,EAAE,gBAAgB,EAAyB,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC3O,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,uBAAuB,EAAE,aAAa,EAAE,oBAAoB,EAAkC,MAAM,aAAa,CAAC;AACpO,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,qBAAqB,EAAwB,MAAM,mBAAmB,CAAC;AAC7G,OAAO,EACL,SAAS,EACT,cAAc,EACd,iBAAiB,EACjB,uBAAuB,EACvB,UAAU,EACV,SAAS,EACT,WAAW,EACX,SAAS,EACT,YAAY,EACZ,sBAAsB,EACtB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,4BAA4B,EAC5B,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,wBAAwB,EACxB,eAAe,EACf,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,mBAAmB,EACnB,sBAAsB,EACtB,uBAAuB,EAEvB,UAAU,EACV,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,SAAS,EACT,aAAa,EACb,SAAS,EACT,UAAU,EACV,YAAY,EACZ,mBAAmB,EACnB,cAAc,EACd,wBAAwB,GACzB,MAAM,YAAY,CAAC;AAEpB,6BAA6B;AAC7B,OAAO,EAAmD,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACjG,wBAAwB;AACxB,OAAO,EAA2D,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AACnI,OAAO,EAAE,WAAW,EAAuB,MAAM,kBAAkB,CAAC;AACpE,oGAAoG;AACpG,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,8BAA8B;AAC9B,OAAO,EACL,oBAAoB,EACpB,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,QAAQ,GACT,MAAM,iBAAiB,CAAC;AAEzB,oCAAoC;AACpC,OAAO,EACL,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,UAAU,EACV,WAAW,GACZ,MAAM,gBAAgB,CAAC;AAExB,uCAAuC;AACvC,OAAO,EACL,aAAa,EACb,UAAU,EACV,eAAe,EACf,UAAU,EACV,gBAAgB,EAChB,iBAAiB,EAEjB,aAAa,EACb,WAAW,EACX,SAAS,EACT,SAAS,GACV,MAAM,aAAa,CAAC;AAErB,4BAA4B;AAC5B,OAAO,EACL,MAAM,EACN,MAAM,EACN,OAAO,EACP,OAAO,EAEP,cAAc,GACf,MAAM,qBAAqB,CAAC;AAE7B,8BAA8B;AAC9B,OAAO,EACL,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,cAAc,EACd,WAAW,EACX,aAAa,GAGd,MAAM,gBAAgB,CAAC;AAExB,qBAAqB;AACrB,OAAO,EACL,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AAEzB,8BAA8B;AAC9B,OAAO,EACL,eAAe,GAIhB,MAAM,eAAe,CAAC;AAEvB,qCAAqC;AACrC,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,GAEpB,MAAM,cAAc,CAAC"}

package/dist/src/store.js

@@ -10,7 +10,7 @@ import { Layer, generateId } from './memory.js';
 import { dumpFrontmatter, parseFrontmatter } from './yaml.js';
 import { openHippoDb, closeHippoDb, getMeta, setMeta, isFtsAvailable, pruneConsolidationRuns, getHippoDbPath, } from './db.js';
 import { rowToSessionHandoff, isHandoffOutcome } from './handoff.js';
-import { CARD_TRANSITIONS } from './card.js';
+import { CARD_TRANSITIONS, CARD_LEASE_MS } from './card.js';
 import { tokenize } from './search.js';
 import { appendAuditEvent } from './audit.js';
 import { resolveTenantId } from './tenant.js';
@@ -2868,6 +2868,29 @@ function insertCardComment(db, tenantId, cardId, author, body) {
     const id = Number(result.lastInsertRowid ?? 0);
     return { id, cardId, author, body, createdAt: now };
 }
+function leaseUntilFrom(now) {
+    return new Date(Date.parse(now) + CARD_LEASE_MS).toISOString();
+}
+function assertRunId(runId) {
+    if (!Number.isSafeInteger(runId) || runId <= 0) {
+        throw new Error(`Invalid run id: ${runId} (expected a positive integer)`);
+    }
+}
+// A second run that has not ended means a corrupt store; throw rather than guess which run the caller means.
+function isLiveRun(db, tenantId, cardId, runId) {
+    // SAFETY: rows' shape matches the single `id` column named in the SELECT below.
+    const rows = db.prepare(`SELECT id FROM card_runs WHERE tenant_id = ? AND card = ? AND ended IS NULL`).all(tenantId, cardId);
+    if (rows.length > 1) {
+        throw new Error(`card ${cardId} has ${rows.length} runs that have not ended`);
+    }
+    return rows[0]?.id === runId;
+}
+function closeLiveRun(db, tenantId, cardId, outcome, now) {
+    db.prepare(`
+    UPDATE card_runs SET ended = ?, outcome = ?, updated_at = ?
+    WHERE card = ? AND tenant_id = ? AND ended IS NULL
+  `).run(now, outcome, now, cardId, tenantId);
+}
 // The single status-mutating seam (rule 15): CARD_TRANSITIONS is the one
 // runtime authority, so a hand-copied wrong `from` list fails fast here.
 export function transitionCard(db, tenantId, cardId, from, to, extra) {
@@ -2877,12 +2900,14 @@ export function transitionCard(db, tenantId, cardId, from, to, extra) {
         }
     }
     const now = new Date().toISOString();
+    // Lease columns follow status: set on the move to running, cleared on every other move (rule 15).
+    const lease = to === 'running' ? [leaseUntilFrom(now), now] : [null, null];
     const fromPlaceholders = from.map(() => '?').join(', ');
     const sql = `
-    UPDATE cards SET status = ?, updated_at = ?${extra?.setSql ? `, ${extra.setSql}` : ''}
+    UPDATE cards SET status = ?, updated_at = ?, lease_until = ?, heartbeat_at = ?${extra?.setSql ? `, ${extra.setSql}` : ''}
     WHERE id = ? AND tenant_id = ? AND status IN (${fromPlaceholders})${extra?.whereSql ? ` AND ${extra.whereSql}` : ''}
   `;
-    const params = [to, now, ...(extra?.params ?? []), cardId, tenantId, ...from];
+    const params = [to, now, ...lease, ...(extra?.params ?? []), cardId, tenantId, ...from];
     const result = db.prepare(sql).run(...params);
     return Number(result.changes ?? 0);
 }
@@ -3046,7 +3071,7 @@ export function loadLatestHandoffForCard(hippoRoot, tenantId, cardId) {
         closeHippoDb(db);
     }
 }
-/** Atomic claim: WHERE status IN (ready, blocked) AND assignee_runtime IS NULL decides the race. Throws on an unknown card id; returns null for a card not ready/blocked or already claimed. */
+/** Atomic claim: WHERE status IN (ready, blocked) AND assignee_runtime IS NULL decides the race. Throws on an unknown card id; returns null for a card not ready/blocked or already claimed. Sets a CARD_LEASE_MS lease and returns the new run's id as runId. */
 export function claimCard(hippoRoot, tenantId, id, runtime, sessionId) {
     assertTenantId('claimCard', tenantId);
     if (runtime.trim() === '') {
@@ -3056,6 +3081,7 @@ export function claimCard(hippoRoot, tenantId, id, runtime, sessionId) {
     const db = openHippoDb(hippoRoot);
     try {
         db.exec('BEGIN IMMEDIATE');
+        let runId = 0;
         try {
             const changes = transitionCard(db, tenantId, id, ['ready', 'blocked'], 'running', {
                 setSql: 'assignee_runtime = ?',
@@ -3070,10 +3096,46 @@ export function claimCard(hippoRoot, tenantId, id, runtime, sessionId) {
                 return null;
             }
             const now = new Date().toISOString();
-            db.prepare(`
+            const insert = db.prepare(`
         INSERT INTO card_runs (card, runtime, session_id, started, created_at, updated_at, tenant_id)
         VALUES (?, ?, ?, ?, ?, ?, ?)
       `).run(id, runtime, sessionId ?? null, now, now, now, tenantId);
+            runId = Number(insert.lastInsertRowid ?? 0);
+            db.exec('COMMIT');
+        }
+        catch (error) {
+            try {
+                db.exec('ROLLBACK');
+            }
+            catch { /* commit may have already rolled back */ }
+            throw error;
+        }
+        return { ...loadCardRow(db, tenantId, id), runId };
+    }
+    finally {
+        closeHippoDb(db);
+    }
+}
+/** Moves a running card's lease to CARD_LEASE_MS from now and records the heartbeat; updated_at is left alone. Throws on an unknown card id or a run id that is not a positive integer; returns null unless the card is running and runId is its live run. */
+export function heartbeatCard(hippoRoot, tenantId, id, runId) {
+    assertTenantId('heartbeatCard', tenantId);
+    assertRunId(runId);
+    initStore(hippoRoot);
+    const db = openHippoDb(hippoRoot);
+    try {
+        db.exec('BEGIN IMMEDIATE');
+        try {
+            const card = loadCardRow(db, tenantId, id);
+            if (!card) {
+                throw new Error(`unknown card id: ${id}`);
+            }
+            if (card.status !== 'running' || !isLiveRun(db, tenantId, id, runId)) {
+                db.exec('ROLLBACK');
+                return null;
+            }
+            const now = new Date().toISOString();
+            db.prepare(`UPDATE cards SET lease_until = ?, heartbeat_at = ? WHERE id = ? AND tenant_id = ?`)
+                .run(leaseUntilFrom(now), now, id, tenantId);
             db.exec('COMMIT');
         }
         catch (error) {
@@ -3089,18 +3151,21 @@ export function claimCard(hippoRoot, tenantId, id, runtime, sessionId) {
         closeHippoDb(db);
     }
 }
-/** Requires the card be running; closes the live run as blocked and files reason as a comment. Throws on an unknown card id; returns null for a card not running. */
-export function blockCard(hippoRoot, tenantId, id, reason) {
+/** Requires the card be running; closes the live run as blocked and files reason as a comment. Throws on an unknown card id; returns null for a card not running. When runId is given, returns null unless it is the card's live run. */
+export function blockCard(hippoRoot, tenantId, id, reason, runId) {
     assertTenantId('blockCard', tenantId);
     if (reason.trim() === '') {
         throw new Error('reason must not be empty');
     }
+    if (runId !== undefined)
+        assertRunId(runId);
     initStore(hippoRoot);
     const db = openHippoDb(hippoRoot);
     try {
         db.exec('BEGIN IMMEDIATE');
         try {
-            const changes = transitionCard(db, tenantId, id, ['running'], 'blocked', { setSql: 'assignee_runtime = NULL' });
+            const allowed = runId === undefined || isLiveRun(db, tenantId, id, runId);
+            const changes = allowed ? transitionCard(db, tenantId, id, ['running'], 'blocked', { setSql: 'assignee_runtime = NULL' }) : 0;
             if (changes === 0) {
                 if (!loadCardRow(db, tenantId, id)) {
                     throw new Error(`unknown card id: ${id}`);
@@ -3110,10 +3175,7 @@ export function blockCard(hippoRoot, tenantId, id, reason) {
             }
             const now = new Date().toISOString();
             // Close the interrupted run here so completeCard's ended IS NULL scope only ever matches the live run.
-            db.prepare(`
-        UPDATE card_runs SET ended = ?, outcome = 'blocked', updated_at = ?
-        WHERE card = ? AND tenant_id = ? AND ended IS NULL
-      `).run(now, now, id, tenantId);
+            closeLiveRun(db, tenantId, id, 'blocked', now);
             insertCardComment(db, tenantId, id, 'system', reason);
             db.exec('COMMIT');
         }
@@ -3130,15 +3192,18 @@ export function blockCard(hippoRoot, tenantId, id, reason) {
         closeHippoDb(db);
     }
 }
-/** Requires the card be running; moves it to review with no other side effects. Throws on an unknown card id; returns null for a card not running. */
-export function reviewCard(hippoRoot, tenantId, id) {
+/** Requires the card be running; moves it to review, clearing its lease and heartbeat and keeping its live run. When runId is given, returns null unless it is the card's live run. Throws on an unknown card id; returns null for a card not running. */
+export function reviewCard(hippoRoot, tenantId, id, runId) {
     assertTenantId('reviewCard', tenantId);
+    if (runId !== undefined)
+        assertRunId(runId);
     initStore(hippoRoot);
     const db = openHippoDb(hippoRoot);
     try {
         db.exec('BEGIN IMMEDIATE');
         try {
-            const changes = transitionCard(db, tenantId, id, ['running'], 'review');
+            const allowed = runId === undefined || isLiveRun(db, tenantId, id, runId);
+            const changes = allowed ? transitionCard(db, tenantId, id, ['running'], 'review') : 0;
             if (changes === 0) {
                 if (!loadCardRow(db, tenantId, id)) {
                     throw new Error(`unknown card id: ${id}`);
@@ -3161,12 +3226,14 @@ export function reviewCard(hippoRoot, tenantId, id) {
         closeHippoDb(db);
     }
 }
-/** Requires the card be in review; closes the live run with outcome. Outcome 'success' moves the card to done and, in the same transaction, promotes any child whose parents are now all done; 'failure' or 'partial' moves it to shelved and promotes nothing. Throws on an unknown card id; returns null for a card not in review. */
-export function completeCard(hippoRoot, tenantId, id, outcome) {
+/** Requires the card be in review; closes the live run with outcome. Outcome 'success' moves the card to done and, in the same transaction, promotes any child whose parents are now all done; 'failure' or 'partial' moves it to shelved and promotes nothing. Throws on an unknown card id; returns null for a card not in review. When runId is given, returns null unless it is the card's live run. */
+export function completeCard(hippoRoot, tenantId, id, outcome, runId) {
     assertTenantId('completeCard', tenantId);
     if (!isHandoffOutcome(outcome)) {
         throw new Error(`invalid card outcome: ${String(outcome)}`);
     }
+    if (runId !== undefined)
+        assertRunId(runId);
     initStore(hippoRoot);
     const db = openHippoDb(hippoRoot);
     try {
@@ -3174,7 +3241,8 @@ export function completeCard(hippoRoot, tenantId, id, outcome) {
         let promotedChildren = [];
         try {
             const target = outcome === 'success' ? 'done' : 'shelved';
-            const changes = transitionCard(db, tenantId, id, ['review'], target);
+            const allowed = runId === undefined || isLiveRun(db, tenantId, id, runId);
+            const changes = allowed ? transitionCard(db, tenantId, id, ['review'], target) : 0;
             if (changes === 0) {
                 if (!loadCardRow(db, tenantId, id)) {
                     throw new Error(`unknown card id: ${id}`);
@@ -3183,10 +3251,7 @@ export function completeCard(hippoRoot, tenantId, id, outcome) {
                 return null;
             }
             const now = new Date().toISOString();
-            db.prepare(`
-        UPDATE card_runs SET ended = ?, outcome = ?, updated_at = ?
-        WHERE card = ? AND tenant_id = ? AND ended IS NULL
-      `).run(now, outcome, now, id, tenantId);
+            closeLiveRun(db, tenantId, id, outcome, now);
             // Not best-effort (rule 12): promotion runs in this same transaction, so a
             // card can never be `done` with an un-evaluated child.
             if (target === 'done') {
@@ -3223,6 +3288,41 @@ export function completeCard(hippoRoot, tenantId, id, outcome) {
         closeHippoDb(db);
     }
 }
+/** Returns to ready every running card of the tenant whose lease has expired or is missing: clears its assignee, closes its live run as 'reclaimed' and leaves its handoffs alone, all in one write transaction. Returns the reclaimed card ids in id order. */
+export function reclaimExpiredCards(hippoRoot, tenantId) {
+    assertTenantId('reclaimExpiredCards', tenantId);
+    initStore(hippoRoot);
+    const db = openHippoDb(hippoRoot);
+    try {
+        db.exec('BEGIN IMMEDIATE');
+        try {
+            // Read lease times under the write lock, so a heartbeat that committed while we waited wins.
+            const now = new Date().toISOString();
+            // SAFETY: rows' shape matches the single `id` column named in the SELECT below.
+            const ids = db.prepare(`
+        SELECT id FROM cards
+        WHERE tenant_id = ? AND status = 'running' AND (lease_until IS NULL OR lease_until < ?)
+        ORDER BY id
+      `).all(tenantId, now).map((r) => r.id);
+            for (const id of ids) {
+                transitionCard(db, tenantId, id, ['running'], 'ready', { setSql: 'assignee_runtime = NULL' });
+                closeLiveRun(db, tenantId, id, 'reclaimed', now);
+            }
+            db.exec('COMMIT');
+            return ids;
+        }
+        catch (error) {
+            try {
+                db.exec('ROLLBACK');
+            }
+            catch { /* commit may have already rolled back */ }
+            throw error;
+        }
+    }
+    finally {
+        closeHippoDb(db);
+    }
+}
 /** Appends a comment to cardId in any card status; throws if cardId is not a card of this tenant. */
 export function addCardComment(hippoRoot, tenantId, cardId, author, body) {
     assertTenantId('addCardComment', tenantId);