hippo-memory 1.55.0 → 1.57.0

package/dist/skills.js

@@ -22,7 +22,8 @@
  * closed (retired). Export renders ACTIVE skills only.
  */
 import { openHippoDb, closeHippoDb } from './db.js';
-import { writeEntry, assertTenantId } from './store.js';
+import { writeEntry } from './store.js';
+import { assertTenantId } from './tenant.js';
 import { createMemory, Layer } from './memory.js';
 import { appendAuditEvent } from './audit.js';
 import { objectHalfLifeDays } from './half-life-migration.js';

package/dist/store-cards.d.ts

@@ -0,0 +1,53 @@
+import { type DatabaseSyncLike } from './db.js';
+import { SessionHandoff, HandoffOutcome } from './handoff.js';
+import { Card, CardStatus, CardRun, CardComment } from './card.js';
+export declare function transitionCard(db: DatabaseSyncLike, tenantId: string, cardId: string, from: CardStatus[], to: CardStatus, extra?: {
+    setSql?: string;
+    whereSql?: string;
+    params?: unknown[];
+}): number;
+/** Creates a card; status is ready with no deps or once every dependsOn id is done, else backlog. An unknown dependsOn id throws and commits nothing. A repeated dependsOn id is recorded once. */
+export declare function createCard(hippoRoot: string, tenantId: string, input: {
+    title: string;
+    repo?: string;
+    contract?: string;
+    budget?: number;
+    dependsOn?: string[];
+}): Card;
+/** Returns the card row for id, or null if it does not exist under this tenant. */
+export declare function loadCard(hippoRoot: string, tenantId: string, id: string): Card | null;
+/** Lists cards for this tenant, optionally filtered to one status, newest-updated first. */
+export declare function listCards(hippoRoot: string, tenantId: string, opts?: {
+    status?: CardStatus;
+}): Card[];
+/** Returns this card's parent and child ids from card_deps. */
+export declare function loadCardDeps(hippoRoot: string, tenantId: string, id: string): {
+    parents: string[];
+    children: string[];
+};
+/** Returns this card's run history, most recent first. */
+export declare function loadCardRuns(hippoRoot: string, tenantId: string, id: string): CardRun[];
+/** Returns this card's comments, most recent first. */
+export declare function loadCardComments(hippoRoot: string, tenantId: string, id: string): CardComment[];
+/** Read side of the card <-> handoff round trip: the newest handoff filed against this card. */
+export declare function loadLatestHandoffForCard(hippoRoot: string, tenantId: string, cardId: string): SessionHandoff | null;
+/** Atomic claim: WHERE status IN (ready, blocked) AND assignee_runtime IS NULL decides the race. Throws on an unknown card id; returns null for a card not ready/blocked or already claimed. Sets a CARD_LEASE_MS lease and returns the new run's id as runId. */
+export declare function claimCard(hippoRoot: string, tenantId: string, id: string, runtime: string, sessionId?: string): (Card & {
+    runId: number;
+}) | null;
+/** Moves a running card's lease to CARD_LEASE_MS from now and records the heartbeat; updated_at is left alone. Throws on an unknown card id or a run id that is not a positive integer; returns null unless the card is running and runId is its live run. */
+export declare function heartbeatCard(hippoRoot: string, tenantId: string, id: string, runId: number): Card | null;
+/** Requires the card be running; closes the live run as blocked and files reason as a comment. Throws on an unknown card id; returns null for a card not running. When runId is given, returns null unless it is the card's live run. */
+export declare function blockCard(hippoRoot: string, tenantId: string, id: string, reason: string, runId?: number): Card | null;
+/** Requires the card be running; moves it to review, clearing its lease and heartbeat and keeping its live run. When runId is given, returns null unless it is the card's live run. Throws on an unknown card id; returns null for a card not running. */
+export declare function reviewCard(hippoRoot: string, tenantId: string, id: string, runId?: number): Card | null;
+/** Requires the card be in review; closes the live run with outcome. Outcome 'success' moves the card to done and, in the same transaction, promotes any child whose parents are now all done; 'failure' or 'partial' moves it to shelved and promotes nothing. Throws on an unknown card id; returns null for a card not in review. When runId is given, returns null unless it is the card's live run. */
+export declare function completeCard(hippoRoot: string, tenantId: string, id: string, outcome: HandoffOutcome, runId?: number): {
+    card: Card;
+    promotedChildren: string[];
+} | null;
+/** Returns to ready every running card of the tenant whose lease has expired or is missing: clears its assignee, closes its live run as 'reclaimed' and leaves its handoffs alone, all in one write transaction. Returns the reclaimed card ids in id order. */
+export declare function reclaimExpiredCards(hippoRoot: string, tenantId: string): string[];
+/** Appends a comment to cardId in any card status; throws if cardId is not a card of this tenant. */
+export declare function addCardComment(hippoRoot: string, tenantId: string, cardId: string, author: string, body: string): CardComment;
+//# sourceMappingURL=store-cards.d.ts.map

package/dist/store-cards.js

@@ -0,0 +1,512 @@
+import { generateId } from './memory.js';
+import { closeHippoDb } from './db.js';
+import { rowToSessionHandoff, isHandoffOutcome } from './handoff.js';
+import { CARD_TRANSITIONS, CARD_LEASE_MS } from './card.js';
+import { assertTenantId } from './tenant.js';
+import { openStore, HANDOFF_COLUMNS } from './store.js';
+const CARD_COLUMNS = 'id, title, status, assignee_runtime, repo, contract, budget, lease_until, heartbeat_at, created_at, updated_at, tenant_id, scope';
+function rowToCard(row) {
+    return {
+        id: row.id,
+        title: row.title,
+        status: row.status,
+        assigneeRuntime: row.assignee_runtime,
+        repo: row.repo,
+        contract: row.contract,
+        budget: row.budget,
+        leaseUntil: row.lease_until,
+        heartbeatAt: row.heartbeat_at,
+        createdAt: row.created_at,
+        updatedAt: row.updated_at,
+        tenantId: row.tenant_id,
+        scope: row.scope,
+    };
+}
+function loadCardRow(db, tenantId, id) {
+    // SAFETY: row's shape matches CARD_COLUMNS; status only ever holds a CardStatus value.
+    const row = db.prepare(`SELECT ${CARD_COLUMNS} FROM cards WHERE id = ? AND tenant_id = ?`).get(id, tenantId);
+    return row ? rowToCard(row) : null;
+}
+function rowToCardRun(row) {
+    return {
+        id: row.id,
+        card: row.card,
+        runtime: row.runtime,
+        sessionId: row.session_id,
+        started: row.started,
+        ended: row.ended,
+        outcome: row.outcome,
+    };
+}
+function rowToCardComment(row) {
+    return { id: row.id, cardId: row.card_id, author: row.author, body: row.body, createdAt: row.created_at };
+}
+function insertCardComment(db, tenantId, cardId, author, body) {
+    const now = new Date().toISOString();
+    const result = db.prepare(`
+    INSERT INTO card_comments (card_id, author, body, created_at, tenant_id)
+    SELECT ?, ?, ?, ?, ? WHERE EXISTS (SELECT 1 FROM cards WHERE id = ? AND tenant_id = ?)
+  `).run(cardId, author, body, now, tenantId, cardId, tenantId);
+    if (Number(result.changes ?? 0) === 0) {
+        throw new Error(`unknown card id: ${cardId}`);
+    }
+    const id = Number(result.lastInsertRowid ?? 0);
+    return { id, cardId, author, body, createdAt: now };
+}
+function leaseUntilFrom(now) {
+    return new Date(Date.parse(now) + CARD_LEASE_MS).toISOString();
+}
+function assertRunId(runId) {
+    if (!Number.isSafeInteger(runId) || runId <= 0) {
+        throw new Error(`Invalid run id: ${runId} (expected a positive integer)`);
+    }
+}
+// A second run that has not ended means a corrupt store; throw rather than guess which run the caller means.
+function isLiveRun(db, tenantId, cardId, runId) {
+    // SAFETY: rows' shape matches the single `id` column named in the SELECT below.
+    const rows = db.prepare(`SELECT id FROM card_runs WHERE tenant_id = ? AND card = ? AND ended IS NULL`).all(tenantId, cardId);
+    if (rows.length > 1) {
+        throw new Error(`card ${cardId} has ${rows.length} runs that have not ended`);
+    }
+    return rows[0]?.id === runId;
+}
+function closeLiveRun(db, tenantId, cardId, outcome, now) {
+    db.prepare(`
+    UPDATE card_runs SET ended = ?, outcome = ?, updated_at = ?
+    WHERE card = ? AND tenant_id = ? AND ended IS NULL
+  `).run(now, outcome, now, cardId, tenantId);
+}
+// The single status-mutating seam (rule 15): CARD_TRANSITIONS is the one
+// runtime authority, so a hand-copied wrong `from` list fails fast here.
+export function transitionCard(db, tenantId, cardId, from, to, extra) {
+    for (const status of from) {
+        if (!CARD_TRANSITIONS[status].includes(to)) {
+            throw new Error(`illegal card transition: ${status} -> ${to}`);
+        }
+    }
+    const now = new Date().toISOString();
+    // Lease columns follow status: set on the move to running, cleared on every other move (rule 15).
+    const lease = to === 'running' ? [leaseUntilFrom(now), now] : [null, null];
+    const fromPlaceholders = from.map(() => '?').join(', ');
+    const sql = `
+    UPDATE cards SET status = ?, updated_at = ?, lease_until = ?, heartbeat_at = ?${extra?.setSql ? `, ${extra.setSql}` : ''}
+    WHERE id = ? AND tenant_id = ? AND status IN (${fromPlaceholders})${extra?.whereSql ? ` AND ${extra.whereSql}` : ''}
+  `;
+    const params = [to, now, ...lease, ...(extra?.params ?? []), cardId, tenantId, ...from];
+    const result = db.prepare(sql).run(...params);
+    return Number(result.changes ?? 0);
+}
+/** Creates a card; status is ready with no deps or once every dependsOn id is done, else backlog. An unknown dependsOn id throws and commits nothing. A repeated dependsOn id is recorded once. */
+export function createCard(hippoRoot, tenantId, input) {
+    assertTenantId('createCard', tenantId);
+    if (input.title.trim() === '') {
+        throw new Error('title must not be empty');
+    }
+    if (input.budget !== undefined && !(Number.isSafeInteger(input.budget) && input.budget > 0)) {
+        throw new Error(`Invalid budget: ${input.budget} (expected a positive integer)`);
+    }
+    const db = openStore(hippoRoot);
+    try {
+        const dependsOn = [...new Set(input.dependsOn ?? [])];
+        let id = '';
+        db.exec('BEGIN IMMEDIATE');
+        try {
+            // Probe runs inside the transaction (mirrors batchWriteAndDelete): a parent
+            // completing between an outside-the-lock read and the INSERT would strand the child.
+            let allParentsDone = true;
+            if (dependsOn.length > 0) {
+                const placeholders = dependsOn.map(() => '?').join(', ');
+                // SAFETY: rows' shape matches the two columns named in the SELECT below.
+                const rows = db.prepare(`SELECT id, status FROM cards WHERE tenant_id = ? AND id IN (${placeholders})`).all(tenantId, ...dependsOn);
+                const found = new Map(rows.map((r) => [r.id, r.status]));
+                // Pre-check before any write: a typo'd --depends-on can never commit a card row.
+                for (const parentId of dependsOn) {
+                    if (!found.has(parentId)) {
+                        throw new Error(`unknown parent card id: ${parentId}`);
+                    }
+                }
+                allParentsDone = dependsOn.every((pid) => found.get(pid) === 'done');
+            }
+            id = generateId('card');
+            const now = new Date().toISOString();
+            const status = dependsOn.length === 0 || allParentsDone ? 'ready' : 'backlog';
+            db.prepare(`
+        INSERT INTO cards (id, title, status, repo, contract, budget, created_at, updated_at, tenant_id)
+        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
+      `).run(id, input.title, status, input.repo ?? null, input.contract ?? null, input.budget ?? null, now, now, tenantId);
+            for (const parentId of dependsOn) {
+                db.prepare(`
+          INSERT INTO card_deps (parent, child, tenant_id, created_at) VALUES (?, ?, ?, ?)
+        `).run(parentId, id, tenantId, now);
+            }
+            db.exec('COMMIT');
+        }
+        catch (error) {
+            try {
+                db.exec('ROLLBACK');
+            }
+            catch { /* commit may have already rolled back */ }
+            throw error;
+        }
+        return loadCardRow(db, tenantId, id);
+    }
+    finally {
+        closeHippoDb(db);
+    }
+}
+/** Returns the card row for id, or null if it does not exist under this tenant. */
+export function loadCard(hippoRoot, tenantId, id) {
+    assertTenantId('loadCard', tenantId);
+    const db = openStore(hippoRoot);
+    try {
+        return loadCardRow(db, tenantId, id);
+    }
+    finally {
+        closeHippoDb(db);
+    }
+}
+/** Lists cards for this tenant, optionally filtered to one status, newest-updated first. */
+export function listCards(hippoRoot, tenantId, opts = {}) {
+    assertTenantId('listCards', tenantId);
+    const db = openStore(hippoRoot);
+    try {
+        const conditions = ['tenant_id = ?'];
+        const params = [tenantId];
+        if (opts.status) {
+            conditions.push('status = ?');
+            params.push(opts.status);
+        }
+        // SAFETY: rows' shape matches CARD_COLUMNS; status only ever holds a CardStatus value.
+        const rows = db.prepare(`
+      SELECT ${CARD_COLUMNS} FROM cards WHERE ${conditions.join(' AND ')} ORDER BY updated_at DESC, id DESC
+    `).all(...params);
+        return rows.map(rowToCard);
+    }
+    finally {
+        closeHippoDb(db);
+    }
+}
+/** Returns this card's parent and child ids from card_deps. */
+export function loadCardDeps(hippoRoot, tenantId, id) {
+    assertTenantId('loadCardDeps', tenantId);
+    const db = openStore(hippoRoot);
+    try {
+        // SAFETY: rows' shape matches the single `parent` column named in the SELECT below.
+        const parents = db.prepare(`SELECT parent FROM card_deps WHERE tenant_id = ? AND child = ?`).all(tenantId, id).map((r) => r.parent);
+        // SAFETY: rows' shape matches the single `child` column named in the SELECT below.
+        const children = db.prepare(`SELECT child FROM card_deps WHERE tenant_id = ? AND parent = ?`).all(tenantId, id).map((r) => r.child);
+        return { parents, children };
+    }
+    finally {
+        closeHippoDb(db);
+    }
+}
+/** Returns this card's run history, most recent first. */
+export function loadCardRuns(hippoRoot, tenantId, id) {
+    assertTenantId('loadCardRuns', tenantId);
+    const db = openStore(hippoRoot);
+    try {
+        // SAFETY: rows' shape matches CardRunRow.
+        const rows = db.prepare(`
+      SELECT id, card, runtime, session_id, started, ended, outcome
+      FROM card_runs WHERE tenant_id = ? AND card = ? ORDER BY started DESC, id DESC
+    `).all(tenantId, id);
+        return rows.map(rowToCardRun);
+    }
+    finally {
+        closeHippoDb(db);
+    }
+}
+/** Returns this card's comments, most recent first. */
+export function loadCardComments(hippoRoot, tenantId, id) {
+    assertTenantId('loadCardComments', tenantId);
+    const db = openStore(hippoRoot);
+    try {
+        // SAFETY: rows' shape matches CardCommentRow.
+        const rows = db.prepare(`
+      SELECT id, card_id, author, body, created_at
+      FROM card_comments WHERE tenant_id = ? AND card_id = ? ORDER BY created_at DESC, id DESC
+    `).all(tenantId, id);
+        return rows.map(rowToCardComment);
+    }
+    finally {
+        closeHippoDb(db);
+    }
+}
+/** Read side of the card <-> handoff round trip: the newest handoff filed against this card. */
+export function loadLatestHandoffForCard(hippoRoot, tenantId, cardId) {
+    assertTenantId('loadLatestHandoffForCard', tenantId);
+    const db = openStore(hippoRoot);
+    try {
+        // SAFETY: row's shape matches HANDOFF_COLUMNS.
+        const row = db.prepare(`
+      SELECT ${HANDOFF_COLUMNS} FROM session_handoffs
+      WHERE tenant_id = ? AND card_id = ? ORDER BY created_at DESC, id DESC LIMIT 1
+    `).get(tenantId, cardId);
+        return row ? rowToSessionHandoff(row) : null;
+    }
+    finally {
+        closeHippoDb(db);
+    }
+}
+/** Atomic claim: WHERE status IN (ready, blocked) AND assignee_runtime IS NULL decides the race. Throws on an unknown card id; returns null for a card not ready/blocked or already claimed. Sets a CARD_LEASE_MS lease and returns the new run's id as runId. */
+export function claimCard(hippoRoot, tenantId, id, runtime, sessionId) {
+    assertTenantId('claimCard', tenantId);
+    if (runtime.trim() === '') {
+        throw new Error('runtime must not be empty');
+    }
+    const db = openStore(hippoRoot);
+    try {
+        db.exec('BEGIN IMMEDIATE');
+        let runId = 0;
+        try {
+            const changes = transitionCard(db, tenantId, id, ['ready', 'blocked'], 'running', {
+                setSql: 'assignee_runtime = ?',
+                whereSql: 'assignee_runtime IS NULL',
+                params: [runtime],
+            });
+            if (changes === 0) {
+                if (!loadCardRow(db, tenantId, id)) {
+                    throw new Error(`unknown card id: ${id}`);
+                }
+                db.exec('ROLLBACK');
+                return null;
+            }
+            const now = new Date().toISOString();
+            const insert = db.prepare(`
+        INSERT INTO card_runs (card, runtime, session_id, started, created_at, updated_at, tenant_id)
+        VALUES (?, ?, ?, ?, ?, ?, ?)
+      `).run(id, runtime, sessionId ?? null, now, now, now, tenantId);
+            runId = Number(insert.lastInsertRowid ?? 0);
+            db.exec('COMMIT');
+        }
+        catch (error) {
+            try {
+                db.exec('ROLLBACK');
+            }
+            catch { /* commit may have already rolled back */ }
+            throw error;
+        }
+        return { ...loadCardRow(db, tenantId, id), runId };
+    }
+    finally {
+        closeHippoDb(db);
+    }
+}
+/** Moves a running card's lease to CARD_LEASE_MS from now and records the heartbeat; updated_at is left alone. Throws on an unknown card id or a run id that is not a positive integer; returns null unless the card is running and runId is its live run. */
+export function heartbeatCard(hippoRoot, tenantId, id, runId) {
+    assertTenantId('heartbeatCard', tenantId);
+    assertRunId(runId);
+    const db = openStore(hippoRoot);
+    try {
+        db.exec('BEGIN IMMEDIATE');
+        try {
+            const card = loadCardRow(db, tenantId, id);
+            if (!card) {
+                throw new Error(`unknown card id: ${id}`);
+            }
+            if (card.status !== 'running' || !isLiveRun(db, tenantId, id, runId)) {
+                db.exec('ROLLBACK');
+                return null;
+            }
+            const now = new Date().toISOString();
+            db.prepare(`UPDATE cards SET lease_until = ?, heartbeat_at = ? WHERE id = ? AND tenant_id = ?`)
+                .run(leaseUntilFrom(now), now, id, tenantId);
+            db.exec('COMMIT');
+        }
+        catch (error) {
+            try {
+                db.exec('ROLLBACK');
+            }
+            catch { /* commit may have already rolled back */ }
+            throw error;
+        }
+        return loadCardRow(db, tenantId, id);
+    }
+    finally {
+        closeHippoDb(db);
+    }
+}
+/** Requires the card be running; closes the live run as blocked and files reason as a comment. Throws on an unknown card id; returns null for a card not running. When runId is given, returns null unless it is the card's live run. */
+export function blockCard(hippoRoot, tenantId, id, reason, runId) {
+    assertTenantId('blockCard', tenantId);
+    if (reason.trim() === '') {
+        throw new Error('reason must not be empty');
+    }
+    if (runId !== undefined)
+        assertRunId(runId);
+    const db = openStore(hippoRoot);
+    try {
+        db.exec('BEGIN IMMEDIATE');
+        try {
+            const allowed = runId === undefined || isLiveRun(db, tenantId, id, runId);
+            const changes = allowed ? transitionCard(db, tenantId, id, ['running'], 'blocked', { setSql: 'assignee_runtime = NULL' }) : 0;
+            if (changes === 0) {
+                if (!loadCardRow(db, tenantId, id)) {
+                    throw new Error(`unknown card id: ${id}`);
+                }
+                db.exec('ROLLBACK');
+                return null;
+            }
+            const now = new Date().toISOString();
+            // Close the interrupted run here so completeCard's ended IS NULL scope only ever matches the live run.
+            closeLiveRun(db, tenantId, id, 'blocked', now);
+            insertCardComment(db, tenantId, id, 'system', reason);
+            db.exec('COMMIT');
+        }
+        catch (error) {
+            try {
+                db.exec('ROLLBACK');
+            }
+            catch { /* commit may have already rolled back */ }
+            throw error;
+        }
+        return loadCardRow(db, tenantId, id);
+    }
+    finally {
+        closeHippoDb(db);
+    }
+}
+/** Requires the card be running; moves it to review, clearing its lease and heartbeat and keeping its live run. When runId is given, returns null unless it is the card's live run. Throws on an unknown card id; returns null for a card not running. */
+export function reviewCard(hippoRoot, tenantId, id, runId) {
+    assertTenantId('reviewCard', tenantId);
+    if (runId !== undefined)
+        assertRunId(runId);
+    const db = openStore(hippoRoot);
+    try {
+        db.exec('BEGIN IMMEDIATE');
+        try {
+            const allowed = runId === undefined || isLiveRun(db, tenantId, id, runId);
+            const changes = allowed ? transitionCard(db, tenantId, id, ['running'], 'review') : 0;
+            if (changes === 0) {
+                if (!loadCardRow(db, tenantId, id)) {
+                    throw new Error(`unknown card id: ${id}`);
+                }
+                db.exec('ROLLBACK');
+                return null;
+            }
+            db.exec('COMMIT');
+        }
+        catch (error) {
+            try {
+                db.exec('ROLLBACK');
+            }
+            catch { /* commit may have already rolled back */ }
+            throw error;
+        }
+        return loadCardRow(db, tenantId, id);
+    }
+    finally {
+        closeHippoDb(db);
+    }
+}
+/** Requires the card be in review; closes the live run with outcome. Outcome 'success' moves the card to done and, in the same transaction, promotes any child whose parents are now all done; 'failure' or 'partial' moves it to shelved and promotes nothing. Throws on an unknown card id; returns null for a card not in review. When runId is given, returns null unless it is the card's live run. */
+export function completeCard(hippoRoot, tenantId, id, outcome, runId) {
+    assertTenantId('completeCard', tenantId);
+    if (!isHandoffOutcome(outcome)) {
+        throw new Error(`invalid card outcome: ${String(outcome)}`);
+    }
+    if (runId !== undefined)
+        assertRunId(runId);
+    const db = openStore(hippoRoot);
+    try {
+        db.exec('BEGIN IMMEDIATE');
+        let promotedChildren = [];
+        try {
+            const target = outcome === 'success' ? 'done' : 'shelved';
+            const allowed = runId === undefined || isLiveRun(db, tenantId, id, runId);
+            const changes = allowed ? transitionCard(db, tenantId, id, ['review'], target) : 0;
+            if (changes === 0) {
+                if (!loadCardRow(db, tenantId, id)) {
+                    throw new Error(`unknown card id: ${id}`);
+                }
+                db.exec('ROLLBACK');
+                return null;
+            }
+            const now = new Date().toISOString();
+            closeLiveRun(db, tenantId, id, outcome, now);
+            // Not best-effort (rule 12): promotion runs in this same transaction, so a
+            // card can never be `done` with an un-evaluated child.
+            if (target === 'done') {
+                // SAFETY: rows' shape matches the single `child` column named in the SELECT below.
+                const children = db.prepare(`SELECT child FROM card_deps WHERE tenant_id = ? AND parent = ?`).all(tenantId, id).map((r) => r.child);
+                for (const childId of children) {
+                    // SAFETY: row's shape matches the single `status` column named in the SELECT below.
+                    const child = db.prepare(`SELECT status FROM cards WHERE tenant_id = ? AND id = ?`).get(tenantId, childId);
+                    if (!child || child.status !== 'backlog')
+                        continue;
+                    // SAFETY: rows' shape matches the single `parent` column named in the SELECT below.
+                    const parents = db.prepare(`SELECT parent FROM card_deps WHERE tenant_id = ? AND child = ?`).all(tenantId, childId).map((r) => r.parent);
+                    const placeholders = parents.map(() => '?').join(', ');
+                    // SAFETY: row's shape matches the single `c` column named in the SELECT below.
+                    const doneCount = db.prepare(`SELECT COUNT(*) as c FROM cards WHERE tenant_id = ? AND id IN (${placeholders}) AND status = 'done'`).get(tenantId, ...parents).c;
+                    if (doneCount === parents.length) {
+                        transitionCard(db, tenantId, childId, ['backlog'], 'ready');
+                        promotedChildren.push(childId);
+                    }
+                }
+            }
+            db.exec('COMMIT');
+        }
+        catch (error) {
+            try {
+                db.exec('ROLLBACK');
+            }
+            catch { /* commit may have already rolled back */ }
+            throw error;
+        }
+        return { card: loadCardRow(db, tenantId, id), promotedChildren };
+    }
+    finally {
+        closeHippoDb(db);
+    }
+}
+/** Returns to ready every running card of the tenant whose lease has expired or is missing: clears its assignee, closes its live run as 'reclaimed' and leaves its handoffs alone, all in one write transaction. Returns the reclaimed card ids in id order. */
+export function reclaimExpiredCards(hippoRoot, tenantId) {
+    assertTenantId('reclaimExpiredCards', tenantId);
+    const db = openStore(hippoRoot);
+    try {
+        db.exec('BEGIN IMMEDIATE');
+        try {
+            // Read lease times under the write lock, so a heartbeat that committed while we waited wins.
+            const now = new Date().toISOString();
+            // SAFETY: rows' shape matches the single `id` column named in the SELECT below.
+            const ids = db.prepare(`
+        SELECT id FROM cards
+        WHERE tenant_id = ? AND status = 'running' AND (lease_until IS NULL OR lease_until < ?)
+        ORDER BY id
+      `).all(tenantId, now).map((r) => r.id);
+            for (const id of ids) {
+                transitionCard(db, tenantId, id, ['running'], 'ready', { setSql: 'assignee_runtime = NULL' });
+                closeLiveRun(db, tenantId, id, 'reclaimed', now);
+            }
+            db.exec('COMMIT');
+            return ids;
+        }
+        catch (error) {
+            try {
+                db.exec('ROLLBACK');
+            }
+            catch { /* commit may have already rolled back */ }
+            throw error;
+        }
+    }
+    finally {
+        closeHippoDb(db);
+    }
+}
+/** Appends a comment to cardId in any card status; throws if cardId is not a card of this tenant. */
+export function addCardComment(hippoRoot, tenantId, cardId, author, body) {
+    assertTenantId('addCardComment', tenantId);
+    if (body.trim() === '') {
+        throw new Error('body must not be empty');
+    }
+    const db = openStore(hippoRoot);
+    try {
+        return insertCardComment(db, tenantId, cardId, author, body);
+    }
+    finally {
+        closeHippoDb(db);
+    }
+}
+//# sourceMappingURL=store-cards.js.map