hippo-memory 1.55.0 → 1.57.0

package/dist/store.d.ts

@@ -7,7 +7,6 @@
 import { MemoryEntry, Layer } from './memory.js';
 import { openHippoDb, getHippoDbPath, type DatabaseSyncLike } from './db.js';
 import { SessionHandoff, HandoffEvidence, HandoffOutcome } from './handoff.js';
-import { Card, CardStatus, CardRun, CardComment } from './card.js';
 import { type ResolveProjectIdentityOpts } from './project-identity.js';
 import { RejectedValueError } from './rejection.js';
 import { type DormantMove } from './dormant.js';
@@ -83,28 +82,6 @@ export interface SessionEvent {
  * this for `RecallResult.windowSize` reporting so the two cannot drift.
  */
 export declare const DEFAULT_SEARCH_CANDIDATE_LIMIT = 200;
-/**
- * v1.7.2 — literal scopes excluded from recall by default-deny when the
- * caller passes no `scope`. The SQL clause in `loadSearchRows` and the JS
- * helper `passesScopeFilterForRecall` (src/api.ts) both read from this
- * constant. Adding a deny scope is a one-place change.
- *
- * Regex-based denies (e.g. `<source>:private:*`) stay in
- * `passesScopeFilterForRecall` as a separate JS step — they don't translate
- * cleanly to SQL.
- *
- * Invariant: never empty. An empty array would silently allow quarantine
- * scopes through both paths (SQL clause omitted, JS check vacuous). The
- * module-load assertion below pins this loudly.
- */
-export declare const RECALL_DEFAULT_DENY_SCOPES: readonly ["unknown:legacy"];
-/**
- * @internal v1.7.3 — runtime guard against a future maintainer blanking a
- * load-bearing literal array. Extracted from the inline guard so the throw
- * path is directly testable. `as const` arrays widen via `readonly T[]` at
- * the call site so the empty case is reachable at runtime.
- */
-export declare function assertNonEmpty<T>(arr: readonly T[], name: string): void;
 /** Nearest ancestor store like git; the strict join is the fallback so `hippo init` still creates `<cwd>/.hippo`. */
 export declare function getHippoRoot(cwd?: string, opts?: ResolveProjectIdentityOpts): string;
 export declare function isInitialized(hippoRoot: string): boolean;
@@ -510,23 +487,6 @@ export declare function loadSessionDecayContext(hippoRoot: string): SessionDecay
  * Increment the sleep counter. Called after each consolidation run.
  */
 export declare function incrementSleepCount(hippoRoot: string): void;
-/**
- * Defensive runtime guard for tenant id arguments.
- *
- * The continuity helpers (saveActiveTaskSnapshot, listSessionEvents, etc.)
- * gained a required `tenantId` parameter in v0.41 / schema v22 to close a
- * cross-tenant data leak. TypeScript catches misbinding at compile time, but
- * JavaScript callers from older versions can silently pass a `sessionId`
- * where `tenantId` is now expected, e.g.
- *   loadLatestHandoff(root, 'sess-abc')   // WRONG: 'sess-abc' becomes the tenant
- * which would silently filter to a non-existent tenant and return null with
- * no error. This guard rejects the most common shape of that mistake (any
- * value beginning with the conventional `sess-` / `sess_` session prefix).
- *
- * False-positive cost: a tenant literally named `sess-...` will be rejected.
- * Acceptable tradeoff for catching the silent-leak class.
- */
-export declare function assertTenantId(fnName: string, value: JsonValue): asserts value is string;
 export declare function saveActiveTaskSnapshot(hippoRoot: string, tenantId: string, snapshot: {
     task: string;
     summary: string;
@@ -648,6 +608,8 @@ export declare function resolveConflict(hippoRoot: string, conflictId: number, k
     conflict: MemoryConflict;
     loserId: string;
 } | null;
+/** Column list shared by every session_handoffs SELECT; store-cards.ts reuses it for the card handoff lookup. */
+export declare const HANDOFF_COLUMNS = "id, session_id, repo_root, task_id, summary, next_action, artifacts_json, scope, created_at, constraints_json, evidence_json, outcome, target_runtime, card_id";
 /**
  * Save a session handoff record. Returns the persisted handoff.
  */
@@ -669,55 +631,6 @@ export declare function stampHandoffOutcome(hippoRoot: string, tenantId: string,
  * @param evidence best-effort git state; outcome comes from the newest session_complete event.
  * @returns null when neither source is the session's, a newer handoff covers the snapshot, or the session's latest handoff was not read off its transcript. */
 export declare function writeSessionEndHandoff(hippoRoot: string, tenantId: string, sessionId: string, evidence: HandoffEvidence | null, derived?: Pick<TaskSnapshot, 'task' | 'summary' | 'next_step'> | null): SessionHandoff | null;
-export declare function transitionCard(db: DatabaseSyncLike, tenantId: string, cardId: string, from: CardStatus[], to: CardStatus, extra?: {
-    setSql?: string;
-    whereSql?: string;
-    params?: unknown[];
-}): number;
-/** Creates a card; status is ready with no deps or once every dependsOn id is done, else backlog. An unknown dependsOn id throws and commits nothing. A repeated dependsOn id is recorded once. */
-export declare function createCard(hippoRoot: string, tenantId: string, input: {
-    title: string;
-    repo?: string;
-    contract?: string;
-    budget?: number;
-    dependsOn?: string[];
-}): Card;
-/** Returns the card row for id, or null if it does not exist under this tenant. */
-export declare function loadCard(hippoRoot: string, tenantId: string, id: string): Card | null;
-/** Lists cards for this tenant, optionally filtered to one status, newest-updated first. */
-export declare function listCards(hippoRoot: string, tenantId: string, opts?: {
-    status?: CardStatus;
-}): Card[];
-/** Returns this card's parent and child ids from card_deps. */
-export declare function loadCardDeps(hippoRoot: string, tenantId: string, id: string): {
-    parents: string[];
-    children: string[];
-};
-/** Returns this card's run history, most recent first. */
-export declare function loadCardRuns(hippoRoot: string, tenantId: string, id: string): CardRun[];
-/** Returns this card's comments, most recent first. */
-export declare function loadCardComments(hippoRoot: string, tenantId: string, id: string): CardComment[];
-/** Read side of the card <-> handoff round trip: the newest handoff filed against this card. */
-export declare function loadLatestHandoffForCard(hippoRoot: string, tenantId: string, cardId: string): SessionHandoff | null;
-/** Atomic claim: WHERE status IN (ready, blocked) AND assignee_runtime IS NULL decides the race. Throws on an unknown card id; returns null for a card not ready/blocked or already claimed. Sets a CARD_LEASE_MS lease and returns the new run's id as runId. */
-export declare function claimCard(hippoRoot: string, tenantId: string, id: string, runtime: string, sessionId?: string): (Card & {
-    runId: number;
-}) | null;
-/** Moves a running card's lease to CARD_LEASE_MS from now and records the heartbeat; updated_at is left alone. Throws on an unknown card id or a run id that is not a positive integer; returns null unless the card is running and runId is its live run. */
-export declare function heartbeatCard(hippoRoot: string, tenantId: string, id: string, runId: number): Card | null;
-/** Requires the card be running; closes the live run as blocked and files reason as a comment. Throws on an unknown card id; returns null for a card not running. When runId is given, returns null unless it is the card's live run. */
-export declare function blockCard(hippoRoot: string, tenantId: string, id: string, reason: string, runId?: number): Card | null;
-/** Requires the card be running; moves it to review, clearing its lease and heartbeat and keeping its live run. When runId is given, returns null unless it is the card's live run. Throws on an unknown card id; returns null for a card not running. */
-export declare function reviewCard(hippoRoot: string, tenantId: string, id: string, runId?: number): Card | null;
-/** Requires the card be in review; closes the live run with outcome. Outcome 'success' moves the card to done and, in the same transaction, promotes any child whose parents are now all done; 'failure' or 'partial' moves it to shelved and promotes nothing. Throws on an unknown card id; returns null for a card not in review. When runId is given, returns null unless it is the card's live run. */
-export declare function completeCard(hippoRoot: string, tenantId: string, id: string, outcome: HandoffOutcome, runId?: number): {
-    card: Card;
-    promotedChildren: string[];
-} | null;
-/** Returns to ready every running card of the tenant whose lease has expired or is missing: clears its assignee, closes its live run as 'reclaimed' and leaves its handoffs alone, all in one write transaction. Returns the reclaimed card ids in id order. */
-export declare function reclaimExpiredCards(hippoRoot: string, tenantId: string): string[];
-/** Appends a comment to cardId in any card status; throws if cardId is not a card of this tenant. */
-export declare function addCardComment(hippoRoot: string, tenantId: string, cardId: string, author: string, body: string): CardComment;
 /**
  * Load summaries flagged dirty for the given tenant. Sorted by latest_at
  * DESC (NULLS LAST) so E3's rebuild cap (HIPPO_DAG_REBUILD_CAP, default 20)