@massu/core 1.10.1 → 1.10.3

package/dist/cli.js

@@ -796,7 +796,7 @@ function initMemorySchema(db) {
       response_tokens INTEGER,
       created_at TEXT DEFAULT (datetime('now')),
       created_at_epoch INTEGER DEFAULT (unixepoch()),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
 
     CREATE INDEX IF NOT EXISTS idx_ct_session ON conversation_turns(session_id);
@@ -817,7 +817,7 @@ function initMemorySchema(db) {
       files_involved TEXT,
       created_at TEXT DEFAULT (datetime('now')),
       created_at_epoch INTEGER DEFAULT (unixepoch()),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
 
     CREATE INDEX IF NOT EXISTS idx_tcd_session ON tool_call_details(session_id);
@@ -871,7 +871,7 @@ function initMemorySchema(db) {
       vr_checks_failed INTEGER NOT NULL DEFAULT 0,
       incidents_triggered INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_sqs_session ON session_quality_scores(session_id);
     CREATE INDEX IF NOT EXISTS idx_sqs_project ON session_quality_scores(project);
@@ -891,7 +891,7 @@ function initMemorySchema(db) {
       duration_minutes REAL NOT NULL DEFAULT 0.0,
       tool_calls INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_sc_session ON session_costs(session_id);
   `);
@@ -904,7 +904,7 @@ function initMemorySchema(db) {
       estimated_cost_usd REAL NOT NULL DEFAULT 0.0,
       commit_hash TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_fc_feature ON feature_costs(feature_key);
     CREATE INDEX IF NOT EXISTS idx_fc_session ON feature_costs(session_id);
@@ -921,7 +921,7 @@ function initMemorySchema(db) {
       corrections_needed INTEGER NOT NULL DEFAULT 0,
       follow_up_prompts INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_po_session ON prompt_outcomes(session_id);
     CREATE INDEX IF NOT EXISTS idx_po_category ON prompt_outcomes(prompt_category);
@@ -940,7 +940,7 @@ function initMemorySchema(db) {
       approval_status TEXT CHECK(approval_status IN ('auto_approved', 'human_approved', 'pending', 'denied')),
       evidence TEXT,
       metadata TEXT,
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_al_session ON audit_log(session_id);
     CREATE INDEX IF NOT EXISTS idx_al_file ON audit_log(file_path);
@@ -957,7 +957,7 @@ function initMemorySchema(db) {
       details TEXT,
       rules_violated TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_vr_session ON validation_results(session_id);
     CREATE INDEX IF NOT EXISTS idx_vr_file ON validation_results(file_path);
@@ -975,7 +975,7 @@ function initMemorySchema(db) {
       affected_files TEXT,
       commit_hash TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_ad_session ON architecture_decisions(session_id);
     CREATE INDEX IF NOT EXISTS idx_ad_status ON architecture_decisions(status);
@@ -988,7 +988,7 @@ function initMemorySchema(db) {
       risk_score INTEGER NOT NULL DEFAULT 0,
       findings TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_ss_session ON security_scores(session_id);
     CREATE INDEX IF NOT EXISTS idx_ss_file ON security_scores(file_path);
@@ -1141,11 +1141,29 @@ function enqueueSyncPayload(db, payload) {
 }
 function dequeuePendingSync(db, limit = 10) {
   const stale = db.prepare(
-    "SELECT id FROM pending_sync WHERE retry_count >= 10"
+    "SELECT id, retry_count, last_error FROM pending_sync WHERE retry_count >= 10"
   ).all();
   if (stale.length > 0) {
     const ids = stale.map((s) => s.id);
     db.prepare(`DELETE FROM pending_sync WHERE id IN (${ids.map(() => "?").join(",")})`).run(...ids);
+    const lastErrors = [...new Set(stale.map((s) => s.last_error).filter(Boolean))];
+    process.stderr.write(
+      `[massu] WARNING: ${stale.length} cloud-sync queue item(s) discarded after 10+ retries. Likely cause: invalid API key or unreachable endpoint. Recent errors: ${lastErrors.slice(0, 3).join("; ") || "(none recorded)"}
+`
+    );
+    try {
+      db.prepare(`
+        INSERT INTO analytics_events (event_type, event_data, created_at)
+        VALUES (?, ?, datetime('now'))
+      `).run(
+        "cloud_sync_giveup",
+        JSON.stringify({
+          discarded_count: stale.length,
+          recent_errors: lastErrors.slice(0, 3)
+        })
+      );
+    } catch {
+    }
   }
   return db.prepare(
     "SELECT id, payload, retry_count FROM pending_sync ORDER BY created_at ASC LIMIT ?"
@@ -25525,8 +25543,9 @@ function indexAllKnowledge(db) {
     "INSERT OR IGNORE INTO knowledge_incidents (incident_num, date, type, gap_found, prevention) VALUES (?, ?, ?, ?, ?)"
   );
   const insertMismatch = db.prepare(
-    "INSERT INTO knowledge_schema_mismatches (table_name, wrong_column, correct_column) VALUES (?, ?, ?)"
+    "INSERT INTO knowledge_schema_mismatches (table_name, wrong_column, correct_column, source) VALUES (?, ?, ?, ?)"
   );
+  const defaultSource = getConfig().conventions?.knowledgeSourceFiles?.[0] ?? "CLAUDE.md";
   const files = discoverMarkdownFiles(paths.claudeDir);
   try {
     const memFiles = discoverMarkdownFiles(paths.memoryDir);
@@ -25614,7 +25633,7 @@ function indexAllKnowledge(db) {
         }
         const mismatches = parseSchemaMismatches(content);
         for (const m3 of mismatches) {
-          insertMismatch.run(m3.table_name, m3.wrong_column, m3.correct_column);
+          insertMismatch.run(m3.table_name, m3.wrong_column, m3.correct_column, defaultSource);
           insertChunk.run(docId, "mismatch", m3.table_name, `${m3.table_name}: ${m3.wrong_column} -> ${m3.correct_column}`, null, null, JSON.stringify({ table: m3.table_name }));
           stats.chunksCreated++;
         }
@@ -26916,12 +26935,19 @@ function initKnowledgeSchema(db) {
     CREATE INDEX IF NOT EXISTS idx_ki_cr ON knowledge_incidents(cr_added);
 
     -- Schema mismatch quick lookup
+    -- P-H013 (plan-stage-c-high-batch): the source column no longer has a
+    -- SQL DEFAULT. Previously the value was a JS template-literal
+    -- interpolation baked into the customer SQLite at schema creation
+    -- time, so later config changes were ignored. Default is now applied
+    -- at INSERT time via getConfig().conventions.knowledgeSourceFiles[0]
+    -- in knowledge-indexer.ts -- a runtime config lookup that reflects
+    -- the customers current config.
     CREATE TABLE IF NOT EXISTS knowledge_schema_mismatches (
       id INTEGER PRIMARY KEY AUTOINCREMENT,
       table_name TEXT NOT NULL,
       wrong_column TEXT NOT NULL,
       correct_column TEXT NOT NULL,
-      source TEXT DEFAULT '${getConfig().conventions?.knowledgeSourceFiles?.[0] ?? "CLAUDE.md"}'
+      source TEXT NOT NULL
     );
 
     CREATE INDEX IF NOT EXISTS idx_ksm_table ON knowledge_schema_mismatches(table_name);

package/dist/hooks/classify-failure.js

@@ -701,7 +701,7 @@ function initMemorySchema(db) {
       response_tokens INTEGER,
       created_at TEXT DEFAULT (datetime('now')),
       created_at_epoch INTEGER DEFAULT (unixepoch()),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
 
     CREATE INDEX IF NOT EXISTS idx_ct_session ON conversation_turns(session_id);
@@ -722,7 +722,7 @@ function initMemorySchema(db) {
       files_involved TEXT,
       created_at TEXT DEFAULT (datetime('now')),
       created_at_epoch INTEGER DEFAULT (unixepoch()),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
 
     CREATE INDEX IF NOT EXISTS idx_tcd_session ON tool_call_details(session_id);
@@ -776,7 +776,7 @@ function initMemorySchema(db) {
       vr_checks_failed INTEGER NOT NULL DEFAULT 0,
       incidents_triggered INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_sqs_session ON session_quality_scores(session_id);
     CREATE INDEX IF NOT EXISTS idx_sqs_project ON session_quality_scores(project);
@@ -796,7 +796,7 @@ function initMemorySchema(db) {
       duration_minutes REAL NOT NULL DEFAULT 0.0,
       tool_calls INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_sc_session ON session_costs(session_id);
   `);
@@ -809,7 +809,7 @@ function initMemorySchema(db) {
       estimated_cost_usd REAL NOT NULL DEFAULT 0.0,
       commit_hash TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_fc_feature ON feature_costs(feature_key);
     CREATE INDEX IF NOT EXISTS idx_fc_session ON feature_costs(session_id);
@@ -826,7 +826,7 @@ function initMemorySchema(db) {
       corrections_needed INTEGER NOT NULL DEFAULT 0,
       follow_up_prompts INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_po_session ON prompt_outcomes(session_id);
     CREATE INDEX IF NOT EXISTS idx_po_category ON prompt_outcomes(prompt_category);
@@ -845,7 +845,7 @@ function initMemorySchema(db) {
       approval_status TEXT CHECK(approval_status IN ('auto_approved', 'human_approved', 'pending', 'denied')),
       evidence TEXT,
       metadata TEXT,
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_al_session ON audit_log(session_id);
     CREATE INDEX IF NOT EXISTS idx_al_file ON audit_log(file_path);
@@ -862,7 +862,7 @@ function initMemorySchema(db) {
       details TEXT,
       rules_violated TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_vr_session ON validation_results(session_id);
     CREATE INDEX IF NOT EXISTS idx_vr_file ON validation_results(file_path);
@@ -880,7 +880,7 @@ function initMemorySchema(db) {
       affected_files TEXT,
       commit_hash TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_ad_session ON architecture_decisions(session_id);
     CREATE INDEX IF NOT EXISTS idx_ad_status ON architecture_decisions(status);
@@ -893,7 +893,7 @@ function initMemorySchema(db) {
       risk_score INTEGER NOT NULL DEFAULT 0,
       findings TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_ss_session ON security_scores(session_id);
     CREATE INDEX IF NOT EXISTS idx_ss_file ON security_scores(file_path);

package/dist/hooks/cost-tracker.js

@@ -698,7 +698,7 @@ function initMemorySchema(db) {
       response_tokens INTEGER,
       created_at TEXT DEFAULT (datetime('now')),
       created_at_epoch INTEGER DEFAULT (unixepoch()),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
 
     CREATE INDEX IF NOT EXISTS idx_ct_session ON conversation_turns(session_id);
@@ -719,7 +719,7 @@ function initMemorySchema(db) {
       files_involved TEXT,
       created_at TEXT DEFAULT (datetime('now')),
       created_at_epoch INTEGER DEFAULT (unixepoch()),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
 
     CREATE INDEX IF NOT EXISTS idx_tcd_session ON tool_call_details(session_id);
@@ -773,7 +773,7 @@ function initMemorySchema(db) {
       vr_checks_failed INTEGER NOT NULL DEFAULT 0,
       incidents_triggered INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_sqs_session ON session_quality_scores(session_id);
     CREATE INDEX IF NOT EXISTS idx_sqs_project ON session_quality_scores(project);
@@ -793,7 +793,7 @@ function initMemorySchema(db) {
       duration_minutes REAL NOT NULL DEFAULT 0.0,
       tool_calls INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_sc_session ON session_costs(session_id);
   `);
@@ -806,7 +806,7 @@ function initMemorySchema(db) {
       estimated_cost_usd REAL NOT NULL DEFAULT 0.0,
       commit_hash TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_fc_feature ON feature_costs(feature_key);
     CREATE INDEX IF NOT EXISTS idx_fc_session ON feature_costs(session_id);
@@ -823,7 +823,7 @@ function initMemorySchema(db) {
       corrections_needed INTEGER NOT NULL DEFAULT 0,
       follow_up_prompts INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_po_session ON prompt_outcomes(session_id);
     CREATE INDEX IF NOT EXISTS idx_po_category ON prompt_outcomes(prompt_category);
@@ -842,7 +842,7 @@ function initMemorySchema(db) {
       approval_status TEXT CHECK(approval_status IN ('auto_approved', 'human_approved', 'pending', 'denied')),
       evidence TEXT,
       metadata TEXT,
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_al_session ON audit_log(session_id);
     CREATE INDEX IF NOT EXISTS idx_al_file ON audit_log(file_path);
@@ -859,7 +859,7 @@ function initMemorySchema(db) {
       details TEXT,
       rules_violated TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_vr_session ON validation_results(session_id);
     CREATE INDEX IF NOT EXISTS idx_vr_file ON validation_results(file_path);
@@ -877,7 +877,7 @@ function initMemorySchema(db) {
       affected_files TEXT,
       commit_hash TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_ad_session ON architecture_decisions(session_id);
     CREATE INDEX IF NOT EXISTS idx_ad_status ON architecture_decisions(status);
@@ -890,7 +890,7 @@ function initMemorySchema(db) {
       risk_score INTEGER NOT NULL DEFAULT 0,
       findings TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_ss_session ON security_scores(session_id);
     CREATE INDEX IF NOT EXISTS idx_ss_file ON security_scores(file_path);

package/dist/hooks/incident-pipeline.js

@@ -700,7 +700,7 @@ function initMemorySchema(db) {
       response_tokens INTEGER,
       created_at TEXT DEFAULT (datetime('now')),
       created_at_epoch INTEGER DEFAULT (unixepoch()),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
 
     CREATE INDEX IF NOT EXISTS idx_ct_session ON conversation_turns(session_id);
@@ -721,7 +721,7 @@ function initMemorySchema(db) {
       files_involved TEXT,
       created_at TEXT DEFAULT (datetime('now')),
       created_at_epoch INTEGER DEFAULT (unixepoch()),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
 
     CREATE INDEX IF NOT EXISTS idx_tcd_session ON tool_call_details(session_id);
@@ -775,7 +775,7 @@ function initMemorySchema(db) {
       vr_checks_failed INTEGER NOT NULL DEFAULT 0,
       incidents_triggered INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_sqs_session ON session_quality_scores(session_id);
     CREATE INDEX IF NOT EXISTS idx_sqs_project ON session_quality_scores(project);
@@ -795,7 +795,7 @@ function initMemorySchema(db) {
       duration_minutes REAL NOT NULL DEFAULT 0.0,
       tool_calls INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_sc_session ON session_costs(session_id);
   `);
@@ -808,7 +808,7 @@ function initMemorySchema(db) {
       estimated_cost_usd REAL NOT NULL DEFAULT 0.0,
       commit_hash TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_fc_feature ON feature_costs(feature_key);
     CREATE INDEX IF NOT EXISTS idx_fc_session ON feature_costs(session_id);
@@ -825,7 +825,7 @@ function initMemorySchema(db) {
       corrections_needed INTEGER NOT NULL DEFAULT 0,
       follow_up_prompts INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_po_session ON prompt_outcomes(session_id);
     CREATE INDEX IF NOT EXISTS idx_po_category ON prompt_outcomes(prompt_category);
@@ -844,7 +844,7 @@ function initMemorySchema(db) {
       approval_status TEXT CHECK(approval_status IN ('auto_approved', 'human_approved', 'pending', 'denied')),
       evidence TEXT,
       metadata TEXT,
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_al_session ON audit_log(session_id);
     CREATE INDEX IF NOT EXISTS idx_al_file ON audit_log(file_path);
@@ -861,7 +861,7 @@ function initMemorySchema(db) {
       details TEXT,
       rules_violated TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_vr_session ON validation_results(session_id);
     CREATE INDEX IF NOT EXISTS idx_vr_file ON validation_results(file_path);
@@ -879,7 +879,7 @@ function initMemorySchema(db) {
       affected_files TEXT,
       commit_hash TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_ad_session ON architecture_decisions(session_id);
     CREATE INDEX IF NOT EXISTS idx_ad_status ON architecture_decisions(status);
@@ -892,7 +892,7 @@ function initMemorySchema(db) {
       risk_score INTEGER NOT NULL DEFAULT 0,
       findings TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_ss_session ON security_scores(session_id);
     CREATE INDEX IF NOT EXISTS idx_ss_file ON security_scores(file_path);

package/dist/hooks/post-tool-use.js

@@ -698,7 +698,7 @@ function initMemorySchema(db) {
       response_tokens INTEGER,
       created_at TEXT DEFAULT (datetime('now')),
       created_at_epoch INTEGER DEFAULT (unixepoch()),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
 
     CREATE INDEX IF NOT EXISTS idx_ct_session ON conversation_turns(session_id);
@@ -719,7 +719,7 @@ function initMemorySchema(db) {
       files_involved TEXT,
       created_at TEXT DEFAULT (datetime('now')),
       created_at_epoch INTEGER DEFAULT (unixepoch()),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
 
     CREATE INDEX IF NOT EXISTS idx_tcd_session ON tool_call_details(session_id);
@@ -773,7 +773,7 @@ function initMemorySchema(db) {
       vr_checks_failed INTEGER NOT NULL DEFAULT 0,
       incidents_triggered INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_sqs_session ON session_quality_scores(session_id);
     CREATE INDEX IF NOT EXISTS idx_sqs_project ON session_quality_scores(project);
@@ -793,7 +793,7 @@ function initMemorySchema(db) {
       duration_minutes REAL NOT NULL DEFAULT 0.0,
       tool_calls INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_sc_session ON session_costs(session_id);
   `);
@@ -806,7 +806,7 @@ function initMemorySchema(db) {
       estimated_cost_usd REAL NOT NULL DEFAULT 0.0,
       commit_hash TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_fc_feature ON feature_costs(feature_key);
     CREATE INDEX IF NOT EXISTS idx_fc_session ON feature_costs(session_id);
@@ -823,7 +823,7 @@ function initMemorySchema(db) {
       corrections_needed INTEGER NOT NULL DEFAULT 0,
       follow_up_prompts INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_po_session ON prompt_outcomes(session_id);
     CREATE INDEX IF NOT EXISTS idx_po_category ON prompt_outcomes(prompt_category);
@@ -842,7 +842,7 @@ function initMemorySchema(db) {
       approval_status TEXT CHECK(approval_status IN ('auto_approved', 'human_approved', 'pending', 'denied')),
       evidence TEXT,
       metadata TEXT,
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_al_session ON audit_log(session_id);
     CREATE INDEX IF NOT EXISTS idx_al_file ON audit_log(file_path);
@@ -859,7 +859,7 @@ function initMemorySchema(db) {
       details TEXT,
       rules_violated TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_vr_session ON validation_results(session_id);
     CREATE INDEX IF NOT EXISTS idx_vr_file ON validation_results(file_path);
@@ -877,7 +877,7 @@ function initMemorySchema(db) {
       affected_files TEXT,
       commit_hash TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_ad_session ON architecture_decisions(session_id);
     CREATE INDEX IF NOT EXISTS idx_ad_status ON architecture_decisions(status);
@@ -890,7 +890,7 @@ function initMemorySchema(db) {
       risk_score INTEGER NOT NULL DEFAULT 0,
       findings TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_ss_session ON security_scores(session_id);
     CREATE INDEX IF NOT EXISTS idx_ss_file ON security_scores(file_path);

package/dist/hooks/pre-compact.js

@@ -698,7 +698,7 @@ function initMemorySchema(db) {
       response_tokens INTEGER,
       created_at TEXT DEFAULT (datetime('now')),
       created_at_epoch INTEGER DEFAULT (unixepoch()),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
 
     CREATE INDEX IF NOT EXISTS idx_ct_session ON conversation_turns(session_id);
@@ -719,7 +719,7 @@ function initMemorySchema(db) {
       files_involved TEXT,
       created_at TEXT DEFAULT (datetime('now')),
       created_at_epoch INTEGER DEFAULT (unixepoch()),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
 
     CREATE INDEX IF NOT EXISTS idx_tcd_session ON tool_call_details(session_id);
@@ -773,7 +773,7 @@ function initMemorySchema(db) {
       vr_checks_failed INTEGER NOT NULL DEFAULT 0,
       incidents_triggered INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_sqs_session ON session_quality_scores(session_id);
     CREATE INDEX IF NOT EXISTS idx_sqs_project ON session_quality_scores(project);
@@ -793,7 +793,7 @@ function initMemorySchema(db) {
       duration_minutes REAL NOT NULL DEFAULT 0.0,
       tool_calls INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_sc_session ON session_costs(session_id);
   `);
@@ -806,7 +806,7 @@ function initMemorySchema(db) {
       estimated_cost_usd REAL NOT NULL DEFAULT 0.0,
       commit_hash TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_fc_feature ON feature_costs(feature_key);
     CREATE INDEX IF NOT EXISTS idx_fc_session ON feature_costs(session_id);
@@ -823,7 +823,7 @@ function initMemorySchema(db) {
       corrections_needed INTEGER NOT NULL DEFAULT 0,
       follow_up_prompts INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_po_session ON prompt_outcomes(session_id);
     CREATE INDEX IF NOT EXISTS idx_po_category ON prompt_outcomes(prompt_category);
@@ -842,7 +842,7 @@ function initMemorySchema(db) {
       approval_status TEXT CHECK(approval_status IN ('auto_approved', 'human_approved', 'pending', 'denied')),
       evidence TEXT,
       metadata TEXT,
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_al_session ON audit_log(session_id);
     CREATE INDEX IF NOT EXISTS idx_al_file ON audit_log(file_path);
@@ -859,7 +859,7 @@ function initMemorySchema(db) {
       details TEXT,
       rules_violated TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_vr_session ON validation_results(session_id);
     CREATE INDEX IF NOT EXISTS idx_vr_file ON validation_results(file_path);
@@ -877,7 +877,7 @@ function initMemorySchema(db) {
       affected_files TEXT,
       commit_hash TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_ad_session ON architecture_decisions(session_id);
     CREATE INDEX IF NOT EXISTS idx_ad_status ON architecture_decisions(status);
@@ -890,7 +890,7 @@ function initMemorySchema(db) {
       risk_score INTEGER NOT NULL DEFAULT 0,
       findings TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_ss_session ON security_scores(session_id);
     CREATE INDEX IF NOT EXISTS idx_ss_file ON security_scores(file_path);

package/dist/hooks/quality-event.js

@@ -698,7 +698,7 @@ function initMemorySchema(db) {
       response_tokens INTEGER,
       created_at TEXT DEFAULT (datetime('now')),
       created_at_epoch INTEGER DEFAULT (unixepoch()),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
 
     CREATE INDEX IF NOT EXISTS idx_ct_session ON conversation_turns(session_id);
@@ -719,7 +719,7 @@ function initMemorySchema(db) {
       files_involved TEXT,
       created_at TEXT DEFAULT (datetime('now')),
       created_at_epoch INTEGER DEFAULT (unixepoch()),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
 
     CREATE INDEX IF NOT EXISTS idx_tcd_session ON tool_call_details(session_id);
@@ -773,7 +773,7 @@ function initMemorySchema(db) {
       vr_checks_failed INTEGER NOT NULL DEFAULT 0,
       incidents_triggered INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_sqs_session ON session_quality_scores(session_id);
     CREATE INDEX IF NOT EXISTS idx_sqs_project ON session_quality_scores(project);
@@ -793,7 +793,7 @@ function initMemorySchema(db) {
       duration_minutes REAL NOT NULL DEFAULT 0.0,
       tool_calls INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_sc_session ON session_costs(session_id);
   `);
@@ -806,7 +806,7 @@ function initMemorySchema(db) {
       estimated_cost_usd REAL NOT NULL DEFAULT 0.0,
       commit_hash TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_fc_feature ON feature_costs(feature_key);
     CREATE INDEX IF NOT EXISTS idx_fc_session ON feature_costs(session_id);
@@ -823,7 +823,7 @@ function initMemorySchema(db) {
       corrections_needed INTEGER NOT NULL DEFAULT 0,
       follow_up_prompts INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_po_session ON prompt_outcomes(session_id);
     CREATE INDEX IF NOT EXISTS idx_po_category ON prompt_outcomes(prompt_category);
@@ -842,7 +842,7 @@ function initMemorySchema(db) {
       approval_status TEXT CHECK(approval_status IN ('auto_approved', 'human_approved', 'pending', 'denied')),
       evidence TEXT,
       metadata TEXT,
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_al_session ON audit_log(session_id);
     CREATE INDEX IF NOT EXISTS idx_al_file ON audit_log(file_path);
@@ -859,7 +859,7 @@ function initMemorySchema(db) {
       details TEXT,
       rules_violated TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_vr_session ON validation_results(session_id);
     CREATE INDEX IF NOT EXISTS idx_vr_file ON validation_results(file_path);
@@ -877,7 +877,7 @@ function initMemorySchema(db) {
       affected_files TEXT,
       commit_hash TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_ad_session ON architecture_decisions(session_id);
     CREATE INDEX IF NOT EXISTS idx_ad_status ON architecture_decisions(status);
@@ -890,7 +890,7 @@ function initMemorySchema(db) {
       risk_score INTEGER NOT NULL DEFAULT 0,
       findings TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_ss_session ON security_scores(session_id);
     CREATE INDEX IF NOT EXISTS idx_ss_file ON security_scores(file_path);

package/dist/hooks/session-end.js

@@ -698,7 +698,7 @@ function initMemorySchema(db) {
       response_tokens INTEGER,
       created_at TEXT DEFAULT (datetime('now')),
       created_at_epoch INTEGER DEFAULT (unixepoch()),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
 
     CREATE INDEX IF NOT EXISTS idx_ct_session ON conversation_turns(session_id);
@@ -719,7 +719,7 @@ function initMemorySchema(db) {
       files_involved TEXT,
       created_at TEXT DEFAULT (datetime('now')),
       created_at_epoch INTEGER DEFAULT (unixepoch()),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
 
     CREATE INDEX IF NOT EXISTS idx_tcd_session ON tool_call_details(session_id);
@@ -773,7 +773,7 @@ function initMemorySchema(db) {
       vr_checks_failed INTEGER NOT NULL DEFAULT 0,
       incidents_triggered INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_sqs_session ON session_quality_scores(session_id);
     CREATE INDEX IF NOT EXISTS idx_sqs_project ON session_quality_scores(project);
@@ -793,7 +793,7 @@ function initMemorySchema(db) {
       duration_minutes REAL NOT NULL DEFAULT 0.0,
       tool_calls INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_sc_session ON session_costs(session_id);
   `);
@@ -806,7 +806,7 @@ function initMemorySchema(db) {
       estimated_cost_usd REAL NOT NULL DEFAULT 0.0,
       commit_hash TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_fc_feature ON feature_costs(feature_key);
     CREATE INDEX IF NOT EXISTS idx_fc_session ON feature_costs(session_id);
@@ -823,7 +823,7 @@ function initMemorySchema(db) {
       corrections_needed INTEGER NOT NULL DEFAULT 0,
       follow_up_prompts INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_po_session ON prompt_outcomes(session_id);
     CREATE INDEX IF NOT EXISTS idx_po_category ON prompt_outcomes(prompt_category);
@@ -842,7 +842,7 @@ function initMemorySchema(db) {
       approval_status TEXT CHECK(approval_status IN ('auto_approved', 'human_approved', 'pending', 'denied')),
       evidence TEXT,
       metadata TEXT,
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_al_session ON audit_log(session_id);
     CREATE INDEX IF NOT EXISTS idx_al_file ON audit_log(file_path);
@@ -859,7 +859,7 @@ function initMemorySchema(db) {
       details TEXT,
       rules_violated TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_vr_session ON validation_results(session_id);
     CREATE INDEX IF NOT EXISTS idx_vr_file ON validation_results(file_path);
@@ -877,7 +877,7 @@ function initMemorySchema(db) {
       affected_files TEXT,
       commit_hash TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_ad_session ON architecture_decisions(session_id);
     CREATE INDEX IF NOT EXISTS idx_ad_status ON architecture_decisions(status);
@@ -890,7 +890,7 @@ function initMemorySchema(db) {
       risk_score INTEGER NOT NULL DEFAULT 0,
       findings TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_ss_session ON security_scores(session_id);
     CREATE INDEX IF NOT EXISTS idx_ss_file ON security_scores(file_path);
@@ -1043,11 +1043,29 @@ function enqueueSyncPayload(db, payload) {
 }
 function dequeuePendingSync(db, limit = 10) {
   const stale = db.prepare(
-    "SELECT id FROM pending_sync WHERE retry_count >= 10"
+    "SELECT id, retry_count, last_error FROM pending_sync WHERE retry_count >= 10"
   ).all();
   if (stale.length > 0) {
     const ids = stale.map((s) => s.id);
     db.prepare(`DELETE FROM pending_sync WHERE id IN (${ids.map(() => "?").join(",")})`).run(...ids);
+    const lastErrors = [...new Set(stale.map((s) => s.last_error).filter(Boolean))];
+    process.stderr.write(
+      `[massu] WARNING: ${stale.length} cloud-sync queue item(s) discarded after 10+ retries. Likely cause: invalid API key or unreachable endpoint. Recent errors: ${lastErrors.slice(0, 3).join("; ") || "(none recorded)"}
+`
+    );
+    try {
+      db.prepare(`
+        INSERT INTO analytics_events (event_type, event_data, created_at)
+        VALUES (?, ?, datetime('now'))
+      `).run(
+        "cloud_sync_giveup",
+        JSON.stringify({
+          discarded_count: stale.length,
+          recent_errors: lastErrors.slice(0, 3)
+        })
+      );
+    } catch {
+    }
   }
   return db.prepare(
     "SELECT id, payload, retry_count FROM pending_sync ORDER BY created_at ASC LIMIT ?"
@@ -1415,6 +1433,33 @@ function estimateTokens(text) {
   return Math.ceil(text.length / 4);
 }
 
+// src/observation-extractor.ts
+var PRIVATE_PATTERNS = [
+  /\/Users\/\w+/,
+  // Absolute macOS paths
+  /\/home\/\w+/,
+  // Absolute Linux paths
+  /[A-Z]:\\/,
+  // Windows paths
+  /\b(api[_-]?key|secret|token|password|credential|dsn)\b/i,
+  // Secrets
+  /\b(STRIPE_|SUPABASE_|SENTRY_|AWS_|DATABASE_URL)\b/,
+  // Env var names
+  /\.(env|pem|key|cert)\b/,
+  // Sensitive file extensions
+  /Bearer\s+\S+/,
+  // Auth tokens
+  /sk_live_|sk_test_|whsec_/
+  // Stripe keys
+];
+function classifyVisibility(title, detail) {
+  const text = `${title} ${detail ?? ""}`;
+  for (const pattern of PRIVATE_PATTERNS) {
+    if (pattern.test(text)) return "private";
+  }
+  return "public";
+}
+
 // src/cloud-sync.ts
 var MAX_RETRIES = 3;
 var RETRY_DELAYS = [1e3, 2e3, 4e3];
@@ -1435,7 +1480,26 @@ async function syncToCloud(db, payload) {
   const filteredPayload = {};
   if (cloud.sync?.memory !== false) {
     filteredPayload.sessions = payload.sessions;
-    filteredPayload.observations = payload.observations;
+    if (payload.observations) {
+      let droppedPrivate = 0;
+      filteredPayload.observations = payload.observations.filter((obs) => {
+        if (classifyVisibility(obs.content ?? "", obs.content ?? "") === "private") {
+          droppedPrivate += 1;
+          return false;
+        }
+        if (obs.file_path && classifyVisibility(obs.file_path, obs.file_path) === "private") {
+          droppedPrivate += 1;
+          return false;
+        }
+        return true;
+      });
+      if (droppedPrivate > 0) {
+        process.stderr.write(
+          `[massu] cloud-sync: dropped ${droppedPrivate} private observation(s) (PRIVATE_PATTERNS match)
+`
+        );
+      }
+    }
   }
   if (cloud.sync?.analytics !== false) {
     filteredPayload.analytics = payload.analytics;

package/dist/hooks/session-start.js

@@ -6496,7 +6496,7 @@ function initMemorySchema(db) {
       response_tokens INTEGER,
       created_at TEXT DEFAULT (datetime('now')),
       created_at_epoch INTEGER DEFAULT (unixepoch()),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
 
     CREATE INDEX IF NOT EXISTS idx_ct_session ON conversation_turns(session_id);
@@ -6517,7 +6517,7 @@ function initMemorySchema(db) {
       files_involved TEXT,
       created_at TEXT DEFAULT (datetime('now')),
       created_at_epoch INTEGER DEFAULT (unixepoch()),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
 
     CREATE INDEX IF NOT EXISTS idx_tcd_session ON tool_call_details(session_id);
@@ -6571,7 +6571,7 @@ function initMemorySchema(db) {
       vr_checks_failed INTEGER NOT NULL DEFAULT 0,
       incidents_triggered INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_sqs_session ON session_quality_scores(session_id);
     CREATE INDEX IF NOT EXISTS idx_sqs_project ON session_quality_scores(project);
@@ -6591,7 +6591,7 @@ function initMemorySchema(db) {
       duration_minutes REAL NOT NULL DEFAULT 0.0,
       tool_calls INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_sc_session ON session_costs(session_id);
   `);
@@ -6604,7 +6604,7 @@ function initMemorySchema(db) {
       estimated_cost_usd REAL NOT NULL DEFAULT 0.0,
       commit_hash TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_fc_feature ON feature_costs(feature_key);
     CREATE INDEX IF NOT EXISTS idx_fc_session ON feature_costs(session_id);
@@ -6621,7 +6621,7 @@ function initMemorySchema(db) {
       corrections_needed INTEGER NOT NULL DEFAULT 0,
       follow_up_prompts INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_po_session ON prompt_outcomes(session_id);
     CREATE INDEX IF NOT EXISTS idx_po_category ON prompt_outcomes(prompt_category);
@@ -6640,7 +6640,7 @@ function initMemorySchema(db) {
       approval_status TEXT CHECK(approval_status IN ('auto_approved', 'human_approved', 'pending', 'denied')),
       evidence TEXT,
       metadata TEXT,
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_al_session ON audit_log(session_id);
     CREATE INDEX IF NOT EXISTS idx_al_file ON audit_log(file_path);
@@ -6657,7 +6657,7 @@ function initMemorySchema(db) {
       details TEXT,
       rules_violated TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_vr_session ON validation_results(session_id);
     CREATE INDEX IF NOT EXISTS idx_vr_file ON validation_results(file_path);
@@ -6675,7 +6675,7 @@ function initMemorySchema(db) {
       affected_files TEXT,
       commit_hash TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_ad_session ON architecture_decisions(session_id);
     CREATE INDEX IF NOT EXISTS idx_ad_status ON architecture_decisions(status);
@@ -6688,7 +6688,7 @@ function initMemorySchema(db) {
       risk_score INTEGER NOT NULL DEFAULT 0,
       findings TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_ss_session ON security_scores(session_id);
     CREATE INDEX IF NOT EXISTS idx_ss_file ON security_scores(file_path);

package/dist/hooks/user-prompt.js

@@ -698,7 +698,7 @@ function initMemorySchema(db) {
       response_tokens INTEGER,
       created_at TEXT DEFAULT (datetime('now')),
       created_at_epoch INTEGER DEFAULT (unixepoch()),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
 
     CREATE INDEX IF NOT EXISTS idx_ct_session ON conversation_turns(session_id);
@@ -719,7 +719,7 @@ function initMemorySchema(db) {
       files_involved TEXT,
       created_at TEXT DEFAULT (datetime('now')),
       created_at_epoch INTEGER DEFAULT (unixepoch()),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
 
     CREATE INDEX IF NOT EXISTS idx_tcd_session ON tool_call_details(session_id);
@@ -773,7 +773,7 @@ function initMemorySchema(db) {
       vr_checks_failed INTEGER NOT NULL DEFAULT 0,
       incidents_triggered INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_sqs_session ON session_quality_scores(session_id);
     CREATE INDEX IF NOT EXISTS idx_sqs_project ON session_quality_scores(project);
@@ -793,7 +793,7 @@ function initMemorySchema(db) {
       duration_minutes REAL NOT NULL DEFAULT 0.0,
       tool_calls INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_sc_session ON session_costs(session_id);
   `);
@@ -806,7 +806,7 @@ function initMemorySchema(db) {
       estimated_cost_usd REAL NOT NULL DEFAULT 0.0,
       commit_hash TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_fc_feature ON feature_costs(feature_key);
     CREATE INDEX IF NOT EXISTS idx_fc_session ON feature_costs(session_id);
@@ -823,7 +823,7 @@ function initMemorySchema(db) {
       corrections_needed INTEGER NOT NULL DEFAULT 0,
       follow_up_prompts INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_po_session ON prompt_outcomes(session_id);
     CREATE INDEX IF NOT EXISTS idx_po_category ON prompt_outcomes(prompt_category);
@@ -842,7 +842,7 @@ function initMemorySchema(db) {
       approval_status TEXT CHECK(approval_status IN ('auto_approved', 'human_approved', 'pending', 'denied')),
       evidence TEXT,
       metadata TEXT,
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_al_session ON audit_log(session_id);
     CREATE INDEX IF NOT EXISTS idx_al_file ON audit_log(file_path);
@@ -859,7 +859,7 @@ function initMemorySchema(db) {
       details TEXT,
       rules_violated TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_vr_session ON validation_results(session_id);
     CREATE INDEX IF NOT EXISTS idx_vr_file ON validation_results(file_path);
@@ -877,7 +877,7 @@ function initMemorySchema(db) {
       affected_files TEXT,
       commit_hash TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_ad_session ON architecture_decisions(session_id);
     CREATE INDEX IF NOT EXISTS idx_ad_status ON architecture_decisions(status);
@@ -890,7 +890,7 @@ function initMemorySchema(db) {
       risk_score INTEGER NOT NULL DEFAULT 0,
       findings TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_ss_session ON security_scores(session_id);
     CREATE INDEX IF NOT EXISTS idx_ss_file ON security_scores(file_path);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@massu/core",
-  "version": "1.10.1",
+  "version": "1.10.3",
   "type": "module",
   "description": "AI Engineering Governance MCP Server - Session memory, knowledge system, feature registry, code intelligence, rule enforcement, tiered tooling (12 free / 73 total), 59 workflow commands, 11 agents, 20+ patterns",
   "main": "src/server.ts",

package/src/cloud-sync.ts

@@ -9,6 +9,7 @@ import {
   removePendingSync,
   incrementRetryCount,
 } from './memory-db.ts';
+import { classifyVisibility } from './observation-extractor.ts';
 
 // ============================================================
 // Cloud Sync Module
@@ -98,7 +99,32 @@ export async function syncToCloud(
   const filteredPayload: SyncPayload = {};
   if (cloud.sync?.memory !== false) {
     filteredPayload.sessions = payload.sessions;
-    filteredPayload.observations = payload.observations;
+    // P-H020 (plan-stage-c-high-batch): consume classifyVisibility() to drop
+    // observations whose title/detail matches PRIVATE_PATTERNS (Stripe keys,
+    // env var names, file paths, Bearer tokens, etc.). Pre-fix: cloud-sync
+    // transmitted EVERY observation to Massu's Supabase, leaking customer
+    // secrets and absolute file paths.
+    if (payload.observations) {
+      let droppedPrivate = 0;
+      filteredPayload.observations = payload.observations.filter((obs) => {
+        if (classifyVisibility(obs.content ?? '', obs.content ?? '') === 'private') {
+          droppedPrivate += 1;
+          return false;
+        }
+        // Belt-and-suspenders: also drop if file_path matches private patterns.
+        if (obs.file_path && classifyVisibility(obs.file_path, obs.file_path) === 'private') {
+          droppedPrivate += 1;
+          return false;
+        }
+        return true;
+      });
+      if (droppedPrivate > 0) {
+        // Surface to the customer's stderr so they can audit what got filtered.
+        process.stderr.write(
+          `[massu] cloud-sync: dropped ${droppedPrivate} private observation(s) (PRIVATE_PATTERNS match)\n`,
+        );
+      }
+    }
   }
   if (cloud.sync?.analytics !== false) {
     filteredPayload.analytics = payload.analytics;

package/src/knowledge-db.ts

@@ -104,12 +104,19 @@ export function initKnowledgeSchema(db: Database.Database): void {
     CREATE INDEX IF NOT EXISTS idx_ki_cr ON knowledge_incidents(cr_added);
 
     -- Schema mismatch quick lookup
+    -- P-H013 (plan-stage-c-high-batch): the source column no longer has a
+    -- SQL DEFAULT. Previously the value was a JS template-literal
+    -- interpolation baked into the customer SQLite at schema creation
+    -- time, so later config changes were ignored. Default is now applied
+    -- at INSERT time via getConfig().conventions.knowledgeSourceFiles[0]
+    -- in knowledge-indexer.ts -- a runtime config lookup that reflects
+    -- the customers current config.
     CREATE TABLE IF NOT EXISTS knowledge_schema_mismatches (
       id INTEGER PRIMARY KEY AUTOINCREMENT,
       table_name TEXT NOT NULL,
       wrong_column TEXT NOT NULL,
       correct_column TEXT NOT NULL,
-      source TEXT DEFAULT '${getConfig().conventions?.knowledgeSourceFiles?.[0] ?? 'CLAUDE.md'}'
+      source TEXT NOT NULL
     );
 
     CREATE INDEX IF NOT EXISTS idx_ksm_table ON knowledge_schema_mismatches(table_name);

package/src/knowledge-indexer.ts

@@ -440,9 +440,13 @@ export function indexAllKnowledge(db: Database.Database): IndexStats {
   const insertIncident = db.prepare(
     'INSERT OR IGNORE INTO knowledge_incidents (incident_num, date, type, gap_found, prevention) VALUES (?, ?, ?, ?, ?)'
   );
+  // P-H013 (plan-stage-c-high-batch): source column now bound at insert time
+  // (was a SQL-DEFAULT template-literal interpolation baked into the customer's
+  // SQLite at schema creation time, ignoring later config changes).
   const insertMismatch = db.prepare(
-    'INSERT INTO knowledge_schema_mismatches (table_name, wrong_column, correct_column) VALUES (?, ?, ?)'
+    'INSERT INTO knowledge_schema_mismatches (table_name, wrong_column, correct_column, source) VALUES (?, ?, ?, ?)'
   );
+  const defaultSource = getConfig().conventions?.knowledgeSourceFiles?.[0] ?? 'CLAUDE.md';
 
   // Discover all .claude/ markdown files
   const files = discoverMarkdownFiles(paths.claudeDir);
@@ -567,7 +571,7 @@ export function indexAllKnowledge(db: Database.Database): IndexStats {
         // Extract schema mismatches
         const mismatches = parseSchemaMismatches(content);
         for (const m of mismatches) {
-          insertMismatch.run(m.table_name, m.wrong_column, m.correct_column);
+          insertMismatch.run(m.table_name, m.wrong_column, m.correct_column, defaultSource);
           insertChunk.run(docId, 'mismatch', m.table_name, `${m.table_name}: ${m.wrong_column} -> ${m.correct_column}`, null, null, JSON.stringify({ table: m.table_name }));
           stats.chunksCreated++;
         }

package/src/memory-db.ts

@@ -214,7 +214,7 @@ export function initMemorySchema(db: Database.Database): void {
       response_tokens INTEGER,
       created_at TEXT DEFAULT (datetime('now')),
       created_at_epoch INTEGER DEFAULT (unixepoch()),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
 
     CREATE INDEX IF NOT EXISTS idx_ct_session ON conversation_turns(session_id);
@@ -237,7 +237,7 @@ export function initMemorySchema(db: Database.Database): void {
       files_involved TEXT,
       created_at TEXT DEFAULT (datetime('now')),
       created_at_epoch INTEGER DEFAULT (unixepoch()),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
 
     CREATE INDEX IF NOT EXISTS idx_tcd_session ON tool_call_details(session_id);
@@ -302,7 +302,7 @@ export function initMemorySchema(db: Database.Database): void {
       vr_checks_failed INTEGER NOT NULL DEFAULT 0,
       incidents_triggered INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_sqs_session ON session_quality_scores(session_id);
     CREATE INDEX IF NOT EXISTS idx_sqs_project ON session_quality_scores(project);
@@ -324,7 +324,7 @@ export function initMemorySchema(db: Database.Database): void {
       duration_minutes REAL NOT NULL DEFAULT 0.0,
       tool_calls INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_sc_session ON session_costs(session_id);
   `);
@@ -339,7 +339,7 @@ export function initMemorySchema(db: Database.Database): void {
       estimated_cost_usd REAL NOT NULL DEFAULT 0.0,
       commit_hash TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_fc_feature ON feature_costs(feature_key);
     CREATE INDEX IF NOT EXISTS idx_fc_session ON feature_costs(session_id);
@@ -358,7 +358,7 @@ export function initMemorySchema(db: Database.Database): void {
       corrections_needed INTEGER NOT NULL DEFAULT 0,
       follow_up_prompts INTEGER NOT NULL DEFAULT 0,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_po_session ON prompt_outcomes(session_id);
     CREATE INDEX IF NOT EXISTS idx_po_category ON prompt_outcomes(prompt_category);
@@ -379,7 +379,7 @@ export function initMemorySchema(db: Database.Database): void {
       approval_status TEXT CHECK(approval_status IN ('auto_approved', 'human_approved', 'pending', 'denied')),
       evidence TEXT,
       metadata TEXT,
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_al_session ON audit_log(session_id);
     CREATE INDEX IF NOT EXISTS idx_al_file ON audit_log(file_path);
@@ -398,7 +398,7 @@ export function initMemorySchema(db: Database.Database): void {
       details TEXT,
       rules_violated TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_vr_session ON validation_results(session_id);
     CREATE INDEX IF NOT EXISTS idx_vr_file ON validation_results(file_path);
@@ -418,7 +418,7 @@ export function initMemorySchema(db: Database.Database): void {
       affected_files TEXT,
       commit_hash TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_ad_session ON architecture_decisions(session_id);
     CREATE INDEX IF NOT EXISTS idx_ad_status ON architecture_decisions(status);
@@ -433,7 +433,7 @@ export function initMemorySchema(db: Database.Database): void {
       risk_score INTEGER NOT NULL DEFAULT 0,
       findings TEXT,
       created_at TEXT DEFAULT (datetime('now')),
-      FOREIGN KEY (session_id) REFERENCES sessions(session_id)
+      FOREIGN KEY (session_id) REFERENCES sessions(session_id) ON DELETE CASCADE
     );
     CREATE INDEX IF NOT EXISTS idx_ss_session ON security_scores(session_id);
     CREATE INDEX IF NOT EXISTS idx_ss_file ON security_scores(file_path);
@@ -625,7 +625,13 @@ export function enqueueSyncPayload(db: Database.Database, payload: string): void
 
 /**
  * Dequeue pending sync items (oldest first).
- * Items with retry_count >= 10 are silently discarded to prevent infinite accumulation.
+ *
+ * P-H012 (plan-stage-c-high-batch): when items exceed retry_count >= 10
+ * they are discarded — but the discard now emits a stderr warning AND
+ * inserts an analytics_events telemetry row so the customer can detect
+ * silent cloud-sync failure (e.g., invalid API key for >10 sync cycles).
+ * Previously this was a silent DELETE; customers lost all queued
+ * observations with no visibility.
  */
 export function dequeuePendingSync(
   db: Database.Database,
@@ -633,11 +639,34 @@ export function dequeuePendingSync(
 ): Array<{ id: number; payload: string; retry_count: number }> {
   // First, discard items that have exceeded max retries
   const stale = db.prepare(
-    'SELECT id FROM pending_sync WHERE retry_count >= 10'
-  ).all() as Array<{ id: number }>;
+    'SELECT id, retry_count, last_error FROM pending_sync WHERE retry_count >= 10'
+  ).all() as Array<{ id: number; retry_count: number; last_error: string | null }>;
   if (stale.length > 0) {
     const ids = stale.map(s => s.id);
     db.prepare(`DELETE FROM pending_sync WHERE id IN (${ids.map(() => '?').join(',')})`).run(...ids);
+    // P-H012: stderr warning so the customer's terminal sees what happened.
+    const lastErrors = [...new Set(stale.map(s => s.last_error).filter(Boolean))];
+    process.stderr.write(
+      `[massu] WARNING: ${stale.length} cloud-sync queue item(s) discarded after 10+ retries. ` +
+      `Likely cause: invalid API key or unreachable endpoint. ` +
+      `Recent errors: ${lastErrors.slice(0, 3).join('; ') || '(none recorded)'}\n`,
+    );
+    // P-H012: telemetry event for dashboard surfacing. Use the analytics_events
+    // sink that already exists in memory-db (see addObservation pattern).
+    try {
+      db.prepare(`
+        INSERT INTO analytics_events (event_type, event_data, created_at)
+        VALUES (?, ?, datetime('now'))
+      `).run(
+        'cloud_sync_giveup',
+        JSON.stringify({
+          discarded_count: stale.length,
+          recent_errors: lastErrors.slice(0, 3),
+        }),
+      );
+    } catch {
+      // analytics_events may not exist in older schemas — best-effort.
+    }
   }
 
   return db.prepare(

package/src/security/registry-pubkey.generated.ts

@@ -1,4 +1,4 @@
-// AUTO-GENERATED by scripts/bundle-pubkey.mjs at 2026-05-17T05:11:08.118Z.
+// AUTO-GENERATED by scripts/bundle-pubkey.mjs at 2026-05-17T05:43:58.152Z.
 // Source pem: packages/core/security/registry-pubkey.pem
 // RAW-bytes sha256: 3b6226d036c472e533110d11a7d0cd2773ce1d7d4f1003517d5bd69c5418ed4c
 // DO NOT EDIT — regenerate via `node scripts/bundle-pubkey.mjs` or