@massu/core 2.3.0 → 2.4.0

package/CHANGELOG.md

@@ -10,6 +10,95 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 > redistributed under the **Apache License 2.0**. Full license + NOTICE:
 > `packages/core/assets/embedder/MODEL-LICENSE`.
 
+## [2.4.0] - 2026-07-31
+
+### Fixed
+
+- **Hooks silently lost telemetry whenever two sessions wrote at once — `db-driver.ts` never
+  armed `PRAGMA busy_timeout`, so SQLite's default of 0ms made a blocked writer fail
+  INSTANTLY.** Both engine paths (`openNodeSqlite`, `openBetterSqlite3`) opened a connection
+  and handed it out without a busy-timeout, so a writer that met a competing writer's lock
+  got `SQLITE_BUSY` ("database is locked") with no wait at all. Every hook catches that,
+  appends to `.massu/hook-failures.jsonl`, and **exits 0** — so the observation, cost, or
+  session row was gone with no failing signal anywhere. Measured before the fix across two
+  active workspaces: **2,169 lost rows in one and 156 in the other**, still accruing. In one
+  of them the throw landed in `session-start`'s `createSession`, which also skipped
+  `pullTeamPromotions` further down the same `try` — so team/enterprise promotions silently
+  stopped pulling on any session that lost the race. Concurrency is the NORMAL state whenever
+  more than one agent session shares a repo, not an edge case.
+
+  `PRAGMA busy_timeout` is set — rather than the ctor `timeout` option — because it is
+  engine-agnostic across `node:sqlite` and better-sqlite3, connection-local, and needs no
+  lock of its own. It is applied in `db-driver.ts`, the CR-69 sole open chokepoint, so
+  **every** opener (hooks, MCP server, CLI) inherits it. Default **5000ms**, overridable via
+  `MASSU_DB_BUSY_TIMEOUT_MS`; `0` is legal and restores the old fail-instantly behaviour,
+  which is how the tests prove they can still go RED. A malformed value falls back to the
+  default rather than disabling the wait (fail-safe, not fail-open).
+
+  Semver MINOR, not PATCH: `resolveBusyTimeoutMs()`, `DEFAULT_BUSY_TIMEOUT_MS` and
+  `DB_BUSY_TIMEOUT_ENV` are new exports. This release also carries the unpublished 2.3.2.
+
+  Proof it can fail (CR-72, planted in the real tree, restored byte-identical by sha256):
+  removing the pragma from `openNodeSqlite` turns the behavioural test RED
+  (`db-busy-timeout.test.ts` — a `worker_threads` lock-holder, because the plan audit proved
+  a same-thread holder is impossible: SQLite's busy-wait blocks the event loop, so the
+  release timer never fires); removing it from `openBetterSqlite3` turns drift-guard clause
+  (e) RED; hard-coding the value turns clause (e2) RED.
+  New gate registered in `scripts/lib/gate-registry.json` (416 → 417).
+  Incident: `docs/incidents/2026-07-23-hook-db-busy-timeout-silent-loss.md`.
+  (plan-2026-07-23-hook-latency-silent-loss-fixes, P1)
+
+## [2.3.2] - 2026-07-24
+
+### Fixed
+
+- **`sync-public.sh` self-exempts its bulk `git rm -rf .` / `git clean -fd` from the machine
+  deletion circuit breaker.** The public-mirror sync wipes the mirror with `git rm -rf .` +
+  `git clean -fd` — hundreds of unlinks under `$HOME`, whose bulk-delete signature the breaker
+  SIGSTOPs — freezing the git child mid-sync on every run. Both bulk deletes now route through a
+  `cb_exempt_git` helper that registers each git child pid plus a start-time identity token in
+  `~/.claude/cb-exempt-pids.txt` for the duration of that one command, scoped to only the pids this
+  script adds, fail-open (the sync never depends on the breaker), with an `EXIT`/`INT`/`TERM`
+  cleanup trap that de-registers them even on interrupt. The start-time token pairs with the
+  breaker's identity-verifying exempt list so a reused pid cannot inherit a stale exemption.
+  Drift-guarded (`sync-public-cb-exempt-drift-guard.test.ts`, registered as a DEFEAT-proven G-6
+  anti-vacuity guard).
+
+### Changed
+
+- **Synced `packages/core/CHANGELOG.md` with the previously-missing `[2.3.1]` entry.** The 2.3.1
+  release added `[2.3.1]` to the root and website CHANGELOGs but omitted
+  `packages/core/CHANGELOG.md`, leaving the three copies out of sync. Parity restored.
+- **Trimmed `CLAUDE.md` back under its size budget**, relocating the removed detail into
+  `.claude/reference/patterns-quickref.md` so `.claude/CLAUDE.md` stays under its 55,000-character
+  cap.
+
+No runtime behaviour of `@massu/core` changes in this release; it is repo-tooling and documentation
+only. Published because CR-64 forbids commits sitting on top of a published, tagged release.
+
+## [2.3.1] - 2026-07-23
+
+### Fixed
+
+- **Anti-vacuity verification repairs — seven registered gates were listed as proven-can-fail
+  while exercising nothing.** A full DEFEAT sweep (the first to run to completion in some time)
+  found seven `gate-registry.json` plants whose patterns no longer matched their target source, so
+  the "planted defect" mutated nothing and the guarded test stayed green under it. Causes were
+  benign source edits the plants were never updated for: a retuned timeout constant, an engines
+  floor bump, an import gaining a symbol, a check being renamed, and a version pinned as a literal
+  (which rots every release by design). All seven re-derived as rot-proof patterns (character
+  classes, `\d` groups, `\g<0>` back-references) and individually DEFEAT-proven.
+- **New `gate-plant-liveness-drift-guard`** asserts every plant pattern still matches its target,
+  so this rot fails in `npm test` in ~23ms instead of an hour into CI — and only against
+  git-tracked targets, since build artifacts are legitimately absent on a fresh checkout.
+- **`.git/hooks/pre-push` now runs the 22-gate battery.** It was previously manual: `.git/hooks/`
+  held only `*.sample`, so nothing invoked `scripts/pre-push-light.sh` on `git push` and gate
+  `[20/22] Incident Coverage` (CR-62) never ran. Incident:
+  `docs/incidents/2026-07-23-unenforced-pre-push-gates-and-guard-validated-against-local-state.md`.
+
+No runtime behaviour of `@massu/core` changes in this release; it is verification-infrastructure
+only. Published because CR-64 forbids commits sitting on top of a published, tagged release.
+
 ## [2.3.0] - 2026-07-23
 
 ### Fixed

package/dist/cli.js

@@ -560,6 +560,12 @@ import { join as join2 } from "path";
 function resolveDbEngine() {
   return process.env[DB_ENGINE_ENV] === "better-sqlite3" ? "better-sqlite3" : DEFAULT_DB_ENGINE;
 }
+function resolveBusyTimeoutMs() {
+  const raw = process.env[DB_BUSY_TIMEOUT_ENV];
+  if (raw === void 0 || raw === "") return DEFAULT_BUSY_TIMEOUT_MS;
+  const n = Number(raw);
+  return Number.isFinite(n) && n >= 0 ? Math.floor(n) : DEFAULT_BUSY_TIMEOUT_MS;
+}
 function nodeSqliteCtor() {
   if (!_nodeCtor) _nodeCtor = req2("node:sqlite").DatabaseSync;
   return _nodeCtor;
@@ -581,6 +587,7 @@ function openNodeSqlite(dbPath, opts) {
     enableForeignKeyConstraints: true,
     allowExtension: false
   });
+  raw.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
   let savepointSeq = 0;
   const wrapStmt = (sql) => {
     const st = raw.prepare(sql);
@@ -664,7 +671,9 @@ function openNodeSqlite(dbPath, opts) {
   return handle;
 }
 function openBetterSqlite3(dbPath, opts) {
-  return openDatabase(dbPath, opts);
+  const db = openDatabase(dbPath, opts);
+  db.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
+  return db;
 }
 function openDatabase2(dbPath, opts = {}) {
   return resolveDbEngine() === "better-sqlite3" ? openBetterSqlite3(dbPath, opts) : openNodeSqlite(dbPath, opts);
@@ -708,7 +717,7 @@ function probeMemoryDbUsable2(opts = {}) {
   }
   return { ok: true };
 }
-var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, _nodeCtor, NODE_SQLITE_REMEDY;
+var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, DEFAULT_BUSY_TIMEOUT_MS, DB_BUSY_TIMEOUT_ENV, _nodeCtor, NODE_SQLITE_REMEDY;
 var init_db_driver = __esm({
   "src/db-driver.ts"() {
     "use strict";
@@ -717,6 +726,8 @@ var init_db_driver = __esm({
     req2 = createRequire2(import.meta.url);
     DEFAULT_DB_ENGINE = "node-sqlite";
     DB_ENGINE_ENV = "MASSU_DB_ENGINE";
+    DEFAULT_BUSY_TIMEOUT_MS = 5e3;
+    DB_BUSY_TIMEOUT_ENV = "MASSU_DB_BUSY_TIMEOUT_MS";
     _nodeCtor = null;
     NODE_SQLITE_REMEDY = "Node's built-in node:sqlite failed to open the database. Ensure Node >= 22.16.0 (`node --version`) and that this Node build includes SQLite, then restart your MCP client / Claude Code.";
   }
@@ -12946,23 +12957,23 @@ function introspectPython(detection, projectRoot) {
   for (const path of candidates) {
     const body = readSafe(path);
     if (body === null) continue;
-    const authRegex = /\bDepends\s*\(\s*([A-Za-z_][A-Za-z0-9_]*)\s*\)/gu;
+    const authRegex = new RegExp(PY_AUTH_DEP_PATTERN, "gu");
     forEachMatch(authRegex, body, (m3) => {
       const name = m3[1];
       if (!authDeps.has(name)) authDeps.set(name, path);
     });
-    const djangoAuthRegex = /^@\s*([a-z_][a-z0-9_]*(?:_required|_login))\b/gmu;
+    const djangoAuthRegex = new RegExp(PY_DJANGO_AUTH_PATTERN, "gmu");
     forEachMatch(djangoAuthRegex, body, (m3) => {
       const name = m3[1];
       if (!authDeps.has(name)) authDeps.set(name, path);
     });
-    const prefixRegex = /\bAPIRouter\s*\(\s*[^)]*?prefix\s*=\s*["']([^"']+)["']/gu;
+    const prefixRegex = new RegExp(PY_API_PREFIX_PATTERN, "gu");
     forEachMatch(prefixRegex, body, (m3) => {
       const fullPrefix = m3[1];
       const base = extractPrefixBase(fullPrefix);
       if (base && !prefixBases.has(base)) prefixBases.set(base, path);
     });
-    const asyncRegex = /^(@pytest\.mark\.asyncio(?:\s*\([^)]*\))?)/gmu;
+    const asyncRegex = new RegExp(PY_TEST_ASYNC_PATTERN, "gmu");
     forEachMatch(asyncRegex, body, (m3) => {
       const pat = m3[1].trim();
       if (!testAsyncPatterns.has(pat)) testAsyncPatterns.set(pat, path);
@@ -13167,10 +13178,14 @@ function relativeTo(projectRoot, absPath) {
   }
   return basename4(absPath);
 }
-var MAX_FILE_BYTES, MAX_SAMPLES_PER_ADAPTER, MAX_DIR_DEPTH;
+var PY_AUTH_DEP_PATTERN, PY_DJANGO_AUTH_PATTERN, PY_API_PREFIX_PATTERN, PY_TEST_ASYNC_PATTERN, MAX_FILE_BYTES, MAX_SAMPLES_PER_ADAPTER, MAX_DIR_DEPTH;
 var init_regex_fallback = __esm({
   "src/detect/regex-fallback.ts"() {
     "use strict";
+    PY_AUTH_DEP_PATTERN = String.raw`\bDepends\s*\(\s*([A-Za-z_][A-Za-z0-9_]*)\s*\)`;
+    PY_DJANGO_AUTH_PATTERN = String.raw`^@\s*([a-z_][a-z0-9_]*(?:_required|_login))\b`;
+    PY_API_PREFIX_PATTERN = String.raw`\bAPIRouter\s*\(\s*[^)]*?prefix\s*=\s*["']([^"']+)["']`;
+    PY_TEST_ASYNC_PATTERN = String.raw`^(@pytest\.mark\.asyncio(?:\s*\([^)]*\))?)`;
     MAX_FILE_BYTES = 256 * 1024;
     MAX_SAMPLES_PER_ADAPTER = 3;
     MAX_DIR_DEPTH = 6;

package/dist/hooks/auto-learning-pipeline.js

@@ -1187,6 +1187,12 @@ import { join as join2 } from "path";
 function resolveDbEngine() {
   return process.env[DB_ENGINE_ENV] === "better-sqlite3" ? "better-sqlite3" : DEFAULT_DB_ENGINE;
 }
+function resolveBusyTimeoutMs() {
+  const raw = process.env[DB_BUSY_TIMEOUT_ENV];
+  if (raw === void 0 || raw === "") return DEFAULT_BUSY_TIMEOUT_MS;
+  const n = Number(raw);
+  return Number.isFinite(n) && n >= 0 ? Math.floor(n) : DEFAULT_BUSY_TIMEOUT_MS;
+}
 function nodeSqliteCtor() {
   if (!_nodeCtor) _nodeCtor = req2("node:sqlite").DatabaseSync;
   return _nodeCtor;
@@ -1208,6 +1214,7 @@ function openNodeSqlite(dbPath, opts) {
     enableForeignKeyConstraints: true,
     allowExtension: false
   });
+  raw.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
   let savepointSeq = 0;
   const wrapStmt = (sql) => {
     const st = raw.prepare(sql);
@@ -1291,12 +1298,14 @@ function openNodeSqlite(dbPath, opts) {
   return handle;
 }
 function openBetterSqlite3(dbPath, opts) {
-  return openDatabase(dbPath, opts);
+  const db = openDatabase(dbPath, opts);
+  db.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
+  return db;
 }
 function openDatabase2(dbPath, opts = {}) {
   return resolveDbEngine() === "better-sqlite3" ? openBetterSqlite3(dbPath, opts) : openNodeSqlite(dbPath, opts);
 }
-var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, _nodeCtor;
+var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, DEFAULT_BUSY_TIMEOUT_MS, DB_BUSY_TIMEOUT_ENV, _nodeCtor;
 var init_db_driver = __esm({
   "src/db-driver.ts"() {
     "use strict";
@@ -1305,6 +1314,8 @@ var init_db_driver = __esm({
     req2 = createRequire2(import.meta.url);
     DEFAULT_DB_ENGINE = "node-sqlite";
     DB_ENGINE_ENV = "MASSU_DB_ENGINE";
+    DEFAULT_BUSY_TIMEOUT_MS = 5e3;
+    DB_BUSY_TIMEOUT_ENV = "MASSU_DB_BUSY_TIMEOUT_MS";
     _nodeCtor = null;
   }
 });
@@ -4132,3 +4143,6 @@ function readStdin() {
   });
 }
 main();
+export {
+  MAX_FULL_DIFF_BYTES
+};

package/dist/hooks/classify-failure.js

@@ -1187,6 +1187,12 @@ import { join as join2 } from "path";
 function resolveDbEngine() {
   return process.env[DB_ENGINE_ENV] === "better-sqlite3" ? "better-sqlite3" : DEFAULT_DB_ENGINE;
 }
+function resolveBusyTimeoutMs() {
+  const raw = process.env[DB_BUSY_TIMEOUT_ENV];
+  if (raw === void 0 || raw === "") return DEFAULT_BUSY_TIMEOUT_MS;
+  const n = Number(raw);
+  return Number.isFinite(n) && n >= 0 ? Math.floor(n) : DEFAULT_BUSY_TIMEOUT_MS;
+}
 function nodeSqliteCtor() {
   if (!_nodeCtor) _nodeCtor = req2("node:sqlite").DatabaseSync;
   return _nodeCtor;
@@ -1208,6 +1214,7 @@ function openNodeSqlite(dbPath, opts) {
     enableForeignKeyConstraints: true,
     allowExtension: false
   });
+  raw.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
   let savepointSeq = 0;
   const wrapStmt = (sql) => {
     const st = raw.prepare(sql);
@@ -1291,12 +1298,14 @@ function openNodeSqlite(dbPath, opts) {
   return handle;
 }
 function openBetterSqlite3(dbPath, opts) {
-  return openDatabase(dbPath, opts);
+  const db = openDatabase(dbPath, opts);
+  db.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
+  return db;
 }
 function openDatabase2(dbPath, opts = {}) {
   return resolveDbEngine() === "better-sqlite3" ? openBetterSqlite3(dbPath, opts) : openNodeSqlite(dbPath, opts);
 }
-var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, _nodeCtor;
+var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, DEFAULT_BUSY_TIMEOUT_MS, DB_BUSY_TIMEOUT_ENV, _nodeCtor;
 var init_db_driver = __esm({
   "src/db-driver.ts"() {
     "use strict";
@@ -1305,6 +1314,8 @@ var init_db_driver = __esm({
     req2 = createRequire2(import.meta.url);
     DEFAULT_DB_ENGINE = "node-sqlite";
     DB_ENGINE_ENV = "MASSU_DB_ENGINE";
+    DEFAULT_BUSY_TIMEOUT_MS = 5e3;
+    DB_BUSY_TIMEOUT_ENV = "MASSU_DB_BUSY_TIMEOUT_MS";
     _nodeCtor = null;
   }
 });

package/dist/hooks/cost-tracker.js

@@ -431,6 +431,12 @@ import { join as join2 } from "path";
 function resolveDbEngine() {
   return process.env[DB_ENGINE_ENV] === "better-sqlite3" ? "better-sqlite3" : DEFAULT_DB_ENGINE;
 }
+function resolveBusyTimeoutMs() {
+  const raw = process.env[DB_BUSY_TIMEOUT_ENV];
+  if (raw === void 0 || raw === "") return DEFAULT_BUSY_TIMEOUT_MS;
+  const n = Number(raw);
+  return Number.isFinite(n) && n >= 0 ? Math.floor(n) : DEFAULT_BUSY_TIMEOUT_MS;
+}
 function nodeSqliteCtor() {
   if (!_nodeCtor) _nodeCtor = req2("node:sqlite").DatabaseSync;
   return _nodeCtor;
@@ -452,6 +458,7 @@ function openNodeSqlite(dbPath, opts) {
     enableForeignKeyConstraints: true,
     allowExtension: false
   });
+  raw.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
   let savepointSeq = 0;
   const wrapStmt = (sql) => {
     const st = raw.prepare(sql);
@@ -535,12 +542,14 @@ function openNodeSqlite(dbPath, opts) {
   return handle;
 }
 function openBetterSqlite3(dbPath, opts) {
-  return openDatabase(dbPath, opts);
+  const db = openDatabase(dbPath, opts);
+  db.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
+  return db;
 }
 function openDatabase2(dbPath, opts = {}) {
   return resolveDbEngine() === "better-sqlite3" ? openBetterSqlite3(dbPath, opts) : openNodeSqlite(dbPath, opts);
 }
-var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, _nodeCtor;
+var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, DEFAULT_BUSY_TIMEOUT_MS, DB_BUSY_TIMEOUT_ENV, _nodeCtor;
 var init_db_driver = __esm({
   "src/db-driver.ts"() {
     "use strict";
@@ -549,6 +558,8 @@ var init_db_driver = __esm({
     req2 = createRequire2(import.meta.url);
     DEFAULT_DB_ENGINE = "node-sqlite";
     DB_ENGINE_ENV = "MASSU_DB_ENGINE";
+    DEFAULT_BUSY_TIMEOUT_MS = 5e3;
+    DB_BUSY_TIMEOUT_ENV = "MASSU_DB_BUSY_TIMEOUT_MS";
     _nodeCtor = null;
   }
 });

package/dist/hooks/fix-detector.js

@@ -1193,6 +1193,12 @@ import { join as join2 } from "path";
 function resolveDbEngine() {
   return process.env[DB_ENGINE_ENV] === "better-sqlite3" ? "better-sqlite3" : DEFAULT_DB_ENGINE;
 }
+function resolveBusyTimeoutMs() {
+  const raw = process.env[DB_BUSY_TIMEOUT_ENV];
+  if (raw === void 0 || raw === "") return DEFAULT_BUSY_TIMEOUT_MS;
+  const n = Number(raw);
+  return Number.isFinite(n) && n >= 0 ? Math.floor(n) : DEFAULT_BUSY_TIMEOUT_MS;
+}
 function nodeSqliteCtor() {
   if (!_nodeCtor) _nodeCtor = req2("node:sqlite").DatabaseSync;
   return _nodeCtor;
@@ -1214,6 +1220,7 @@ function openNodeSqlite(dbPath, opts) {
     enableForeignKeyConstraints: true,
     allowExtension: false
   });
+  raw.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
   let savepointSeq = 0;
   const wrapStmt = (sql) => {
     const st = raw.prepare(sql);
@@ -1297,12 +1304,14 @@ function openNodeSqlite(dbPath, opts) {
   return handle;
 }
 function openBetterSqlite3(dbPath, opts) {
-  return openDatabase(dbPath, opts);
+  const db = openDatabase(dbPath, opts);
+  db.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
+  return db;
 }
 function openDatabase2(dbPath, opts = {}) {
   return resolveDbEngine() === "better-sqlite3" ? openBetterSqlite3(dbPath, opts) : openNodeSqlite(dbPath, opts);
 }
-var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, _nodeCtor;
+var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, DEFAULT_BUSY_TIMEOUT_MS, DB_BUSY_TIMEOUT_ENV, _nodeCtor;
 var init_db_driver = __esm({
   "src/db-driver.ts"() {
     "use strict";
@@ -1311,6 +1320,8 @@ var init_db_driver = __esm({
     req2 = createRequire2(import.meta.url);
     DEFAULT_DB_ENGINE = "node-sqlite";
     DB_ENGINE_ENV = "MASSU_DB_ENGINE";
+    DEFAULT_BUSY_TIMEOUT_MS = 5e3;
+    DB_BUSY_TIMEOUT_ENV = "MASSU_DB_BUSY_TIMEOUT_MS";
     _nodeCtor = null;
   }
 });

package/dist/hooks/incident-pipeline.js

@@ -1187,6 +1187,12 @@ import { join as join2 } from "path";
 function resolveDbEngine() {
   return process.env[DB_ENGINE_ENV] === "better-sqlite3" ? "better-sqlite3" : DEFAULT_DB_ENGINE;
 }
+function resolveBusyTimeoutMs() {
+  const raw = process.env[DB_BUSY_TIMEOUT_ENV];
+  if (raw === void 0 || raw === "") return DEFAULT_BUSY_TIMEOUT_MS;
+  const n = Number(raw);
+  return Number.isFinite(n) && n >= 0 ? Math.floor(n) : DEFAULT_BUSY_TIMEOUT_MS;
+}
 function nodeSqliteCtor() {
   if (!_nodeCtor) _nodeCtor = req2("node:sqlite").DatabaseSync;
   return _nodeCtor;
@@ -1208,6 +1214,7 @@ function openNodeSqlite(dbPath, opts) {
     enableForeignKeyConstraints: true,
     allowExtension: false
   });
+  raw.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
   let savepointSeq = 0;
   const wrapStmt = (sql) => {
     const st = raw.prepare(sql);
@@ -1291,12 +1298,14 @@ function openNodeSqlite(dbPath, opts) {
   return handle;
 }
 function openBetterSqlite3(dbPath, opts) {
-  return openDatabase(dbPath, opts);
+  const db = openDatabase(dbPath, opts);
+  db.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
+  return db;
 }
 function openDatabase2(dbPath, opts = {}) {
   return resolveDbEngine() === "better-sqlite3" ? openBetterSqlite3(dbPath, opts) : openNodeSqlite(dbPath, opts);
 }
-var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, _nodeCtor;
+var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, DEFAULT_BUSY_TIMEOUT_MS, DB_BUSY_TIMEOUT_ENV, _nodeCtor;
 var init_db_driver = __esm({
   "src/db-driver.ts"() {
     "use strict";
@@ -1305,6 +1314,8 @@ var init_db_driver = __esm({
     req2 = createRequire2(import.meta.url);
     DEFAULT_DB_ENGINE = "node-sqlite";
     DB_ENGINE_ENV = "MASSU_DB_ENGINE";
+    DEFAULT_BUSY_TIMEOUT_MS = 5e3;
+    DB_BUSY_TIMEOUT_ENV = "MASSU_DB_BUSY_TIMEOUT_MS";
     _nodeCtor = null;
   }
 });

package/dist/hooks/intent-suggester.js

@@ -431,6 +431,12 @@ import { join as join2 } from "path";
 function resolveDbEngine() {
   return process.env[DB_ENGINE_ENV] === "better-sqlite3" ? "better-sqlite3" : DEFAULT_DB_ENGINE;
 }
+function resolveBusyTimeoutMs() {
+  const raw = process.env[DB_BUSY_TIMEOUT_ENV];
+  if (raw === void 0 || raw === "") return DEFAULT_BUSY_TIMEOUT_MS;
+  const n = Number(raw);
+  return Number.isFinite(n) && n >= 0 ? Math.floor(n) : DEFAULT_BUSY_TIMEOUT_MS;
+}
 function nodeSqliteCtor() {
   if (!_nodeCtor) _nodeCtor = req2("node:sqlite").DatabaseSync;
   return _nodeCtor;
@@ -452,6 +458,7 @@ function openNodeSqlite(dbPath, opts) {
     enableForeignKeyConstraints: true,
     allowExtension: false
   });
+  raw.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
   let savepointSeq = 0;
   const wrapStmt = (sql) => {
     const st = raw.prepare(sql);
@@ -535,12 +542,14 @@ function openNodeSqlite(dbPath, opts) {
   return handle;
 }
 function openBetterSqlite3(dbPath, opts) {
-  return openDatabase(dbPath, opts);
+  const db = openDatabase(dbPath, opts);
+  db.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
+  return db;
 }
 function openDatabase2(dbPath, opts = {}) {
   return resolveDbEngine() === "better-sqlite3" ? openBetterSqlite3(dbPath, opts) : openNodeSqlite(dbPath, opts);
 }
-var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, _nodeCtor;
+var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, DEFAULT_BUSY_TIMEOUT_MS, DB_BUSY_TIMEOUT_ENV, _nodeCtor;
 var init_db_driver = __esm({
   "src/db-driver.ts"() {
     "use strict";
@@ -549,6 +558,8 @@ var init_db_driver = __esm({
     req2 = createRequire2(import.meta.url);
     DEFAULT_DB_ENGINE = "node-sqlite";
     DB_ENGINE_ENV = "MASSU_DB_ENGINE";
+    DEFAULT_BUSY_TIMEOUT_MS = 5e3;
+    DB_BUSY_TIMEOUT_ENV = "MASSU_DB_BUSY_TIMEOUT_MS";
     _nodeCtor = null;
   }
 });

package/dist/hooks/memory-recall.js

@@ -431,6 +431,12 @@ import { join as join2 } from "path";
 function resolveDbEngine() {
   return process.env[DB_ENGINE_ENV] === "better-sqlite3" ? "better-sqlite3" : DEFAULT_DB_ENGINE;
 }
+function resolveBusyTimeoutMs() {
+  const raw = process.env[DB_BUSY_TIMEOUT_ENV];
+  if (raw === void 0 || raw === "") return DEFAULT_BUSY_TIMEOUT_MS;
+  const n = Number(raw);
+  return Number.isFinite(n) && n >= 0 ? Math.floor(n) : DEFAULT_BUSY_TIMEOUT_MS;
+}
 function nodeSqliteCtor() {
   if (!_nodeCtor) _nodeCtor = req2("node:sqlite").DatabaseSync;
   return _nodeCtor;
@@ -452,6 +458,7 @@ function openNodeSqlite(dbPath, opts) {
     enableForeignKeyConstraints: true,
     allowExtension: false
   });
+  raw.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
   let savepointSeq = 0;
   const wrapStmt = (sql) => {
     const st = raw.prepare(sql);
@@ -535,12 +542,14 @@ function openNodeSqlite(dbPath, opts) {
   return handle;
 }
 function openBetterSqlite3(dbPath, opts) {
-  return openDatabase(dbPath, opts);
+  const db = openDatabase(dbPath, opts);
+  db.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
+  return db;
 }
 function openDatabase2(dbPath, opts = {}) {
   return resolveDbEngine() === "better-sqlite3" ? openBetterSqlite3(dbPath, opts) : openNodeSqlite(dbPath, opts);
 }
-var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, _nodeCtor;
+var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, DEFAULT_BUSY_TIMEOUT_MS, DB_BUSY_TIMEOUT_ENV, _nodeCtor;
 var init_db_driver = __esm({
   "src/db-driver.ts"() {
     "use strict";
@@ -549,6 +558,8 @@ var init_db_driver = __esm({
     req2 = createRequire2(import.meta.url);
     DEFAULT_DB_ENGINE = "node-sqlite";
     DB_ENGINE_ENV = "MASSU_DB_ENGINE";
+    DEFAULT_BUSY_TIMEOUT_MS = 5e3;
+    DB_BUSY_TIMEOUT_ENV = "MASSU_DB_BUSY_TIMEOUT_MS";
     _nodeCtor = null;
   }
 });

package/dist/hooks/post-edit-context.js

@@ -431,6 +431,12 @@ import { join as join2 } from "path";
 function resolveDbEngine() {
   return process.env[DB_ENGINE_ENV] === "better-sqlite3" ? "better-sqlite3" : DEFAULT_DB_ENGINE;
 }
+function resolveBusyTimeoutMs() {
+  const raw = process.env[DB_BUSY_TIMEOUT_ENV];
+  if (raw === void 0 || raw === "") return DEFAULT_BUSY_TIMEOUT_MS;
+  const n = Number(raw);
+  return Number.isFinite(n) && n >= 0 ? Math.floor(n) : DEFAULT_BUSY_TIMEOUT_MS;
+}
 function nodeSqliteCtor() {
   if (!_nodeCtor) _nodeCtor = req2("node:sqlite").DatabaseSync;
   return _nodeCtor;
@@ -452,6 +458,7 @@ function openNodeSqlite(dbPath, opts) {
     enableForeignKeyConstraints: true,
     allowExtension: false
   });
+  raw.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
   let savepointSeq = 0;
   const wrapStmt = (sql) => {
     const st = raw.prepare(sql);
@@ -535,12 +542,14 @@ function openNodeSqlite(dbPath, opts) {
   return handle;
 }
 function openBetterSqlite3(dbPath, opts) {
-  return openDatabase(dbPath, opts);
+  const db = openDatabase(dbPath, opts);
+  db.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
+  return db;
 }
 function openDatabase2(dbPath, opts = {}) {
   return resolveDbEngine() === "better-sqlite3" ? openBetterSqlite3(dbPath, opts) : openNodeSqlite(dbPath, opts);
 }
-var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, _nodeCtor;
+var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, DEFAULT_BUSY_TIMEOUT_MS, DB_BUSY_TIMEOUT_ENV, _nodeCtor;
 var init_db_driver = __esm({
   "src/db-driver.ts"() {
     "use strict";
@@ -549,6 +558,8 @@ var init_db_driver = __esm({
     req2 = createRequire2(import.meta.url);
     DEFAULT_DB_ENGINE = "node-sqlite";
     DB_ENGINE_ENV = "MASSU_DB_ENGINE";
+    DEFAULT_BUSY_TIMEOUT_MS = 5e3;
+    DB_BUSY_TIMEOUT_ENV = "MASSU_DB_BUSY_TIMEOUT_MS";
     _nodeCtor = null;
   }
 });

package/dist/hooks/post-tool-use.js

@@ -437,6 +437,12 @@ import { join as join2 } from "path";
 function resolveDbEngine() {
   return process.env[DB_ENGINE_ENV] === "better-sqlite3" ? "better-sqlite3" : DEFAULT_DB_ENGINE;
 }
+function resolveBusyTimeoutMs() {
+  const raw = process.env[DB_BUSY_TIMEOUT_ENV];
+  if (raw === void 0 || raw === "") return DEFAULT_BUSY_TIMEOUT_MS;
+  const n = Number(raw);
+  return Number.isFinite(n) && n >= 0 ? Math.floor(n) : DEFAULT_BUSY_TIMEOUT_MS;
+}
 function nodeSqliteCtor() {
   if (!_nodeCtor) _nodeCtor = req2("node:sqlite").DatabaseSync;
   return _nodeCtor;
@@ -458,6 +464,7 @@ function openNodeSqlite(dbPath, opts) {
     enableForeignKeyConstraints: true,
     allowExtension: false
   });
+  raw.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
   let savepointSeq = 0;
   const wrapStmt = (sql) => {
     const st = raw.prepare(sql);
@@ -541,12 +548,14 @@ function openNodeSqlite(dbPath, opts) {
   return handle;
 }
 function openBetterSqlite3(dbPath, opts) {
-  return openDatabase(dbPath, opts);
+  const db = openDatabase(dbPath, opts);
+  db.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
+  return db;
 }
 function openDatabase2(dbPath, opts = {}) {
   return resolveDbEngine() === "better-sqlite3" ? openBetterSqlite3(dbPath, opts) : openNodeSqlite(dbPath, opts);
 }
-var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, _nodeCtor;
+var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, DEFAULT_BUSY_TIMEOUT_MS, DB_BUSY_TIMEOUT_ENV, _nodeCtor;
 var init_db_driver = __esm({
   "src/db-driver.ts"() {
     "use strict";
@@ -555,6 +564,8 @@ var init_db_driver = __esm({
     req2 = createRequire2(import.meta.url);
     DEFAULT_DB_ENGINE = "node-sqlite";
     DB_ENGINE_ENV = "MASSU_DB_ENGINE";
+    DEFAULT_BUSY_TIMEOUT_MS = 5e3;
+    DB_BUSY_TIMEOUT_ENV = "MASSU_DB_BUSY_TIMEOUT_MS";
     _nodeCtor = null;
   }
 });

package/dist/hooks/pre-compact.js

@@ -431,6 +431,12 @@ import { join as join2 } from "path";
 function resolveDbEngine() {
   return process.env[DB_ENGINE_ENV] === "better-sqlite3" ? "better-sqlite3" : DEFAULT_DB_ENGINE;
 }
+function resolveBusyTimeoutMs() {
+  const raw = process.env[DB_BUSY_TIMEOUT_ENV];
+  if (raw === void 0 || raw === "") return DEFAULT_BUSY_TIMEOUT_MS;
+  const n = Number(raw);
+  return Number.isFinite(n) && n >= 0 ? Math.floor(n) : DEFAULT_BUSY_TIMEOUT_MS;
+}
 function nodeSqliteCtor() {
   if (!_nodeCtor) _nodeCtor = req2("node:sqlite").DatabaseSync;
   return _nodeCtor;
@@ -452,6 +458,7 @@ function openNodeSqlite(dbPath, opts) {
     enableForeignKeyConstraints: true,
     allowExtension: false
   });
+  raw.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
   let savepointSeq = 0;
   const wrapStmt = (sql) => {
     const st = raw.prepare(sql);
@@ -535,12 +542,14 @@ function openNodeSqlite(dbPath, opts) {
   return handle;
 }
 function openBetterSqlite3(dbPath, opts) {
-  return openDatabase(dbPath, opts);
+  const db = openDatabase(dbPath, opts);
+  db.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
+  return db;
 }
 function openDatabase2(dbPath, opts = {}) {
   return resolveDbEngine() === "better-sqlite3" ? openBetterSqlite3(dbPath, opts) : openNodeSqlite(dbPath, opts);
 }
-var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, _nodeCtor;
+var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, DEFAULT_BUSY_TIMEOUT_MS, DB_BUSY_TIMEOUT_ENV, _nodeCtor;
 var init_db_driver = __esm({
   "src/db-driver.ts"() {
     "use strict";
@@ -549,6 +558,8 @@ var init_db_driver = __esm({
     req2 = createRequire2(import.meta.url);
     DEFAULT_DB_ENGINE = "node-sqlite";
     DB_ENGINE_ENV = "MASSU_DB_ENGINE";
+    DEFAULT_BUSY_TIMEOUT_MS = 5e3;
+    DB_BUSY_TIMEOUT_ENV = "MASSU_DB_BUSY_TIMEOUT_MS";
     _nodeCtor = null;
   }
 });

package/dist/hooks/pre-delete-check.js

@@ -431,6 +431,12 @@ import { join as join2 } from "path";
 function resolveDbEngine() {
   return process.env[DB_ENGINE_ENV] === "better-sqlite3" ? "better-sqlite3" : DEFAULT_DB_ENGINE;
 }
+function resolveBusyTimeoutMs() {
+  const raw = process.env[DB_BUSY_TIMEOUT_ENV];
+  if (raw === void 0 || raw === "") return DEFAULT_BUSY_TIMEOUT_MS;
+  const n = Number(raw);
+  return Number.isFinite(n) && n >= 0 ? Math.floor(n) : DEFAULT_BUSY_TIMEOUT_MS;
+}
 function nodeSqliteCtor() {
   if (!_nodeCtor) _nodeCtor = req2("node:sqlite").DatabaseSync;
   return _nodeCtor;
@@ -452,6 +458,7 @@ function openNodeSqlite(dbPath, opts) {
     enableForeignKeyConstraints: true,
     allowExtension: false
   });
+  raw.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
   let savepointSeq = 0;
   const wrapStmt = (sql) => {
     const st = raw.prepare(sql);
@@ -535,12 +542,14 @@ function openNodeSqlite(dbPath, opts) {
   return handle;
 }
 function openBetterSqlite3(dbPath, opts) {
-  return openDatabase(dbPath, opts);
+  const db = openDatabase(dbPath, opts);
+  db.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
+  return db;
 }
 function openDatabase2(dbPath, opts = {}) {
   return resolveDbEngine() === "better-sqlite3" ? openBetterSqlite3(dbPath, opts) : openNodeSqlite(dbPath, opts);
 }
-var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, _nodeCtor;
+var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, DEFAULT_BUSY_TIMEOUT_MS, DB_BUSY_TIMEOUT_ENV, _nodeCtor;
 var init_db_driver = __esm({
   "src/db-driver.ts"() {
     "use strict";
@@ -549,6 +558,8 @@ var init_db_driver = __esm({
     req2 = createRequire2(import.meta.url);
     DEFAULT_DB_ENGINE = "node-sqlite";
     DB_ENGINE_ENV = "MASSU_DB_ENGINE";
+    DEFAULT_BUSY_TIMEOUT_MS = 5e3;
+    DB_BUSY_TIMEOUT_ENV = "MASSU_DB_BUSY_TIMEOUT_MS";
     _nodeCtor = null;
   }
 });

package/dist/hooks/pre-tool-use-gate.js

@@ -431,6 +431,12 @@ import { join as join2 } from "path";
 function resolveDbEngine() {
   return process.env[DB_ENGINE_ENV] === "better-sqlite3" ? "better-sqlite3" : DEFAULT_DB_ENGINE;
 }
+function resolveBusyTimeoutMs() {
+  const raw = process.env[DB_BUSY_TIMEOUT_ENV];
+  if (raw === void 0 || raw === "") return DEFAULT_BUSY_TIMEOUT_MS;
+  const n = Number(raw);
+  return Number.isFinite(n) && n >= 0 ? Math.floor(n) : DEFAULT_BUSY_TIMEOUT_MS;
+}
 function nodeSqliteCtor() {
   if (!_nodeCtor) _nodeCtor = req2("node:sqlite").DatabaseSync;
   return _nodeCtor;
@@ -452,6 +458,7 @@ function openNodeSqlite(dbPath, opts) {
     enableForeignKeyConstraints: true,
     allowExtension: false
   });
+  raw.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
   let savepointSeq = 0;
   const wrapStmt = (sql) => {
     const st = raw.prepare(sql);
@@ -535,12 +542,14 @@ function openNodeSqlite(dbPath, opts) {
   return handle;
 }
 function openBetterSqlite3(dbPath, opts) {
-  return openDatabase(dbPath, opts);
+  const db = openDatabase(dbPath, opts);
+  db.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
+  return db;
 }
 function openDatabase2(dbPath, opts = {}) {
   return resolveDbEngine() === "better-sqlite3" ? openBetterSqlite3(dbPath, opts) : openNodeSqlite(dbPath, opts);
 }
-var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, _nodeCtor;
+var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, DEFAULT_BUSY_TIMEOUT_MS, DB_BUSY_TIMEOUT_ENV, _nodeCtor;
 var init_db_driver = __esm({
   "src/db-driver.ts"() {
     "use strict";
@@ -549,6 +558,8 @@ var init_db_driver = __esm({
     req2 = createRequire2(import.meta.url);
     DEFAULT_DB_ENGINE = "node-sqlite";
     DB_ENGINE_ENV = "MASSU_DB_ENGINE";
+    DEFAULT_BUSY_TIMEOUT_MS = 5e3;
+    DB_BUSY_TIMEOUT_ENV = "MASSU_DB_BUSY_TIMEOUT_MS";
     _nodeCtor = null;
   }
 });

package/dist/hooks/quality-event.js

@@ -431,6 +431,12 @@ import { join as join2 } from "path";
 function resolveDbEngine() {
   return process.env[DB_ENGINE_ENV] === "better-sqlite3" ? "better-sqlite3" : DEFAULT_DB_ENGINE;
 }
+function resolveBusyTimeoutMs() {
+  const raw = process.env[DB_BUSY_TIMEOUT_ENV];
+  if (raw === void 0 || raw === "") return DEFAULT_BUSY_TIMEOUT_MS;
+  const n = Number(raw);
+  return Number.isFinite(n) && n >= 0 ? Math.floor(n) : DEFAULT_BUSY_TIMEOUT_MS;
+}
 function nodeSqliteCtor() {
   if (!_nodeCtor) _nodeCtor = req2("node:sqlite").DatabaseSync;
   return _nodeCtor;
@@ -452,6 +458,7 @@ function openNodeSqlite(dbPath, opts) {
     enableForeignKeyConstraints: true,
     allowExtension: false
   });
+  raw.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
   let savepointSeq = 0;
   const wrapStmt = (sql) => {
     const st = raw.prepare(sql);
@@ -535,12 +542,14 @@ function openNodeSqlite(dbPath, opts) {
   return handle;
 }
 function openBetterSqlite3(dbPath, opts) {
-  return openDatabase(dbPath, opts);
+  const db = openDatabase(dbPath, opts);
+  db.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
+  return db;
 }
 function openDatabase2(dbPath, opts = {}) {
   return resolveDbEngine() === "better-sqlite3" ? openBetterSqlite3(dbPath, opts) : openNodeSqlite(dbPath, opts);
 }
-var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, _nodeCtor;
+var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, DEFAULT_BUSY_TIMEOUT_MS, DB_BUSY_TIMEOUT_ENV, _nodeCtor;
 var init_db_driver = __esm({
   "src/db-driver.ts"() {
     "use strict";
@@ -549,6 +558,8 @@ var init_db_driver = __esm({
     req2 = createRequire2(import.meta.url);
     DEFAULT_DB_ENGINE = "node-sqlite";
     DB_ENGINE_ENV = "MASSU_DB_ENGINE";
+    DEFAULT_BUSY_TIMEOUT_MS = 5e3;
+    DB_BUSY_TIMEOUT_ENV = "MASSU_DB_BUSY_TIMEOUT_MS";
     _nodeCtor = null;
   }
 });

package/dist/hooks/rule-enforcement-pipeline.js

@@ -1187,6 +1187,12 @@ import { join as join2 } from "path";
 function resolveDbEngine() {
   return process.env[DB_ENGINE_ENV] === "better-sqlite3" ? "better-sqlite3" : DEFAULT_DB_ENGINE;
 }
+function resolveBusyTimeoutMs() {
+  const raw = process.env[DB_BUSY_TIMEOUT_ENV];
+  if (raw === void 0 || raw === "") return DEFAULT_BUSY_TIMEOUT_MS;
+  const n = Number(raw);
+  return Number.isFinite(n) && n >= 0 ? Math.floor(n) : DEFAULT_BUSY_TIMEOUT_MS;
+}
 function nodeSqliteCtor() {
   if (!_nodeCtor) _nodeCtor = req2("node:sqlite").DatabaseSync;
   return _nodeCtor;
@@ -1208,6 +1214,7 @@ function openNodeSqlite(dbPath, opts) {
     enableForeignKeyConstraints: true,
     allowExtension: false
   });
+  raw.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
   let savepointSeq = 0;
   const wrapStmt = (sql) => {
     const st = raw.prepare(sql);
@@ -1291,12 +1298,14 @@ function openNodeSqlite(dbPath, opts) {
   return handle;
 }
 function openBetterSqlite3(dbPath, opts) {
-  return openDatabase(dbPath, opts);
+  const db = openDatabase(dbPath, opts);
+  db.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
+  return db;
 }
 function openDatabase2(dbPath, opts = {}) {
   return resolveDbEngine() === "better-sqlite3" ? openBetterSqlite3(dbPath, opts) : openNodeSqlite(dbPath, opts);
 }
-var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, _nodeCtor;
+var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, DEFAULT_BUSY_TIMEOUT_MS, DB_BUSY_TIMEOUT_ENV, _nodeCtor;
 var init_db_driver = __esm({
   "src/db-driver.ts"() {
     "use strict";
@@ -1305,6 +1314,8 @@ var init_db_driver = __esm({
     req2 = createRequire2(import.meta.url);
     DEFAULT_DB_ENGINE = "node-sqlite";
     DB_ENGINE_ENV = "MASSU_DB_ENGINE";
+    DEFAULT_BUSY_TIMEOUT_MS = 5e3;
+    DB_BUSY_TIMEOUT_ENV = "MASSU_DB_BUSY_TIMEOUT_MS";
     _nodeCtor = null;
   }
 });

package/dist/hooks/security-gate.js

@@ -431,6 +431,12 @@ import { join as join2 } from "path";
 function resolveDbEngine() {
   return process.env[DB_ENGINE_ENV] === "better-sqlite3" ? "better-sqlite3" : DEFAULT_DB_ENGINE;
 }
+function resolveBusyTimeoutMs() {
+  const raw = process.env[DB_BUSY_TIMEOUT_ENV];
+  if (raw === void 0 || raw === "") return DEFAULT_BUSY_TIMEOUT_MS;
+  const n = Number(raw);
+  return Number.isFinite(n) && n >= 0 ? Math.floor(n) : DEFAULT_BUSY_TIMEOUT_MS;
+}
 function nodeSqliteCtor() {
   if (!_nodeCtor) _nodeCtor = req2("node:sqlite").DatabaseSync;
   return _nodeCtor;
@@ -452,6 +458,7 @@ function openNodeSqlite(dbPath, opts) {
     enableForeignKeyConstraints: true,
     allowExtension: false
   });
+  raw.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
   let savepointSeq = 0;
   const wrapStmt = (sql) => {
     const st = raw.prepare(sql);
@@ -535,12 +542,14 @@ function openNodeSqlite(dbPath, opts) {
   return handle;
 }
 function openBetterSqlite3(dbPath, opts) {
-  return openDatabase(dbPath, opts);
+  const db = openDatabase(dbPath, opts);
+  db.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
+  return db;
 }
 function openDatabase2(dbPath, opts = {}) {
   return resolveDbEngine() === "better-sqlite3" ? openBetterSqlite3(dbPath, opts) : openNodeSqlite(dbPath, opts);
 }
-var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, _nodeCtor;
+var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, DEFAULT_BUSY_TIMEOUT_MS, DB_BUSY_TIMEOUT_ENV, _nodeCtor;
 var init_db_driver = __esm({
   "src/db-driver.ts"() {
     "use strict";
@@ -549,6 +558,8 @@ var init_db_driver = __esm({
     req2 = createRequire2(import.meta.url);
     DEFAULT_DB_ENGINE = "node-sqlite";
     DB_ENGINE_ENV = "MASSU_DB_ENGINE";
+    DEFAULT_BUSY_TIMEOUT_MS = 5e3;
+    DB_BUSY_TIMEOUT_ENV = "MASSU_DB_BUSY_TIMEOUT_MS";
     _nodeCtor = null;
   }
 });

package/dist/hooks/session-end.js

@@ -431,6 +431,12 @@ import { join as join2 } from "path";
 function resolveDbEngine() {
   return process.env[DB_ENGINE_ENV] === "better-sqlite3" ? "better-sqlite3" : DEFAULT_DB_ENGINE;
 }
+function resolveBusyTimeoutMs() {
+  const raw = process.env[DB_BUSY_TIMEOUT_ENV];
+  if (raw === void 0 || raw === "") return DEFAULT_BUSY_TIMEOUT_MS;
+  const n = Number(raw);
+  return Number.isFinite(n) && n >= 0 ? Math.floor(n) : DEFAULT_BUSY_TIMEOUT_MS;
+}
 function nodeSqliteCtor() {
   if (!_nodeCtor) _nodeCtor = req2("node:sqlite").DatabaseSync;
   return _nodeCtor;
@@ -452,6 +458,7 @@ function openNodeSqlite(dbPath, opts) {
     enableForeignKeyConstraints: true,
     allowExtension: false
   });
+  raw.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
   let savepointSeq = 0;
   const wrapStmt = (sql) => {
     const st = raw.prepare(sql);
@@ -535,12 +542,14 @@ function openNodeSqlite(dbPath, opts) {
   return handle;
 }
 function openBetterSqlite3(dbPath, opts) {
-  return openDatabase(dbPath, opts);
+  const db = openDatabase(dbPath, opts);
+  db.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
+  return db;
 }
 function openDatabase2(dbPath, opts = {}) {
   return resolveDbEngine() === "better-sqlite3" ? openBetterSqlite3(dbPath, opts) : openNodeSqlite(dbPath, opts);
 }
-var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, _nodeCtor;
+var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, DEFAULT_BUSY_TIMEOUT_MS, DB_BUSY_TIMEOUT_ENV, _nodeCtor;
 var init_db_driver = __esm({
   "src/db-driver.ts"() {
     "use strict";
@@ -549,6 +558,8 @@ var init_db_driver = __esm({
     req2 = createRequire2(import.meta.url);
     DEFAULT_DB_ENGINE = "node-sqlite";
     DB_ENGINE_ENV = "MASSU_DB_ENGINE";
+    DEFAULT_BUSY_TIMEOUT_MS = 5e3;
+    DB_BUSY_TIMEOUT_ENV = "MASSU_DB_BUSY_TIMEOUT_MS";
     _nodeCtor = null;
   }
 });

package/dist/hooks/session-start.js

@@ -454,6 +454,12 @@ import { join as join2 } from "path";
 function resolveDbEngine() {
   return process.env[DB_ENGINE_ENV] === "better-sqlite3" ? "better-sqlite3" : DEFAULT_DB_ENGINE;
 }
+function resolveBusyTimeoutMs() {
+  const raw = process.env[DB_BUSY_TIMEOUT_ENV];
+  if (raw === void 0 || raw === "") return DEFAULT_BUSY_TIMEOUT_MS;
+  const n = Number(raw);
+  return Number.isFinite(n) && n >= 0 ? Math.floor(n) : DEFAULT_BUSY_TIMEOUT_MS;
+}
 function nodeSqliteCtor() {
   if (!_nodeCtor) _nodeCtor = req2("node:sqlite").DatabaseSync;
   return _nodeCtor;
@@ -475,6 +481,7 @@ function openNodeSqlite(dbPath, opts) {
     enableForeignKeyConstraints: true,
     allowExtension: false
   });
+  raw.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
   let savepointSeq = 0;
   const wrapStmt = (sql) => {
     const st = raw.prepare(sql);
@@ -558,12 +565,14 @@ function openNodeSqlite(dbPath, opts) {
   return handle;
 }
 function openBetterSqlite3(dbPath, opts) {
-  return openDatabase(dbPath, opts);
+  const db = openDatabase(dbPath, opts);
+  db.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
+  return db;
 }
 function openDatabase2(dbPath, opts = {}) {
   return resolveDbEngine() === "better-sqlite3" ? openBetterSqlite3(dbPath, opts) : openNodeSqlite(dbPath, opts);
 }
-var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, _nodeCtor;
+var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, DEFAULT_BUSY_TIMEOUT_MS, DB_BUSY_TIMEOUT_ENV, _nodeCtor;
 var init_db_driver = __esm({
   "src/db-driver.ts"() {
     "use strict";
@@ -572,6 +581,8 @@ var init_db_driver = __esm({
     req2 = createRequire2(import.meta.url);
     DEFAULT_DB_ENGINE = "node-sqlite";
     DB_ENGINE_ENV = "MASSU_DB_ENGINE";
+    DEFAULT_BUSY_TIMEOUT_MS = 5e3;
+    DB_BUSY_TIMEOUT_ENV = "MASSU_DB_BUSY_TIMEOUT_MS";
     _nodeCtor = null;
   }
 });
@@ -12646,23 +12657,23 @@ function introspectPython(detection, projectRoot) {
   for (const path of candidates) {
     const body = readSafe(path);
     if (body === null) continue;
-    const authRegex = /\bDepends\s*\(\s*([A-Za-z_][A-Za-z0-9_]*)\s*\)/gu;
+    const authRegex = new RegExp(PY_AUTH_DEP_PATTERN, "gu");
     forEachMatch(authRegex, body, (m) => {
       const name = m[1];
       if (!authDeps.has(name)) authDeps.set(name, path);
     });
-    const djangoAuthRegex = /^@\s*([a-z_][a-z0-9_]*(?:_required|_login))\b/gmu;
+    const djangoAuthRegex = new RegExp(PY_DJANGO_AUTH_PATTERN, "gmu");
     forEachMatch(djangoAuthRegex, body, (m) => {
       const name = m[1];
       if (!authDeps.has(name)) authDeps.set(name, path);
     });
-    const prefixRegex = /\bAPIRouter\s*\(\s*[^)]*?prefix\s*=\s*["']([^"']+)["']/gu;
+    const prefixRegex = new RegExp(PY_API_PREFIX_PATTERN, "gu");
     forEachMatch(prefixRegex, body, (m) => {
       const fullPrefix = m[1];
       const base = extractPrefixBase(fullPrefix);
       if (base && !prefixBases.has(base)) prefixBases.set(base, path);
     });
-    const asyncRegex = /^(@pytest\.mark\.asyncio(?:\s*\([^)]*\))?)/gmu;
+    const asyncRegex = new RegExp(PY_TEST_ASYNC_PATTERN, "gmu");
     forEachMatch(asyncRegex, body, (m) => {
       const pat = m[1].trim();
       if (!testAsyncPatterns.has(pat)) testAsyncPatterns.set(pat, path);
@@ -12867,10 +12878,14 @@ function relativeTo(projectRoot, absPath) {
   }
   return basename4(absPath);
 }
-var MAX_FILE_BYTES, MAX_SAMPLES_PER_ADAPTER, MAX_DIR_DEPTH;
+var PY_AUTH_DEP_PATTERN, PY_DJANGO_AUTH_PATTERN, PY_API_PREFIX_PATTERN, PY_TEST_ASYNC_PATTERN, MAX_FILE_BYTES, MAX_SAMPLES_PER_ADAPTER, MAX_DIR_DEPTH;
 var init_regex_fallback = __esm({
   "src/detect/regex-fallback.ts"() {
     "use strict";
+    PY_AUTH_DEP_PATTERN = String.raw`\bDepends\s*\(\s*([A-Za-z_][A-Za-z0-9_]*)\s*\)`;
+    PY_DJANGO_AUTH_PATTERN = String.raw`^@\s*([a-z_][a-z0-9_]*(?:_required|_login))\b`;
+    PY_API_PREFIX_PATTERN = String.raw`\bAPIRouter\s*\(\s*[^)]*?prefix\s*=\s*["']([^"']+)["']`;
+    PY_TEST_ASYNC_PATTERN = String.raw`^(@pytest\.mark\.asyncio(?:\s*\([^)]*\))?)`;
     MAX_FILE_BYTES = 256 * 1024;
     MAX_SAMPLES_PER_ADAPTER = 3;
     MAX_DIR_DEPTH = 6;

package/dist/hooks/user-prompt.js

@@ -431,6 +431,12 @@ import { join as join2 } from "path";
 function resolveDbEngine() {
   return process.env[DB_ENGINE_ENV] === "better-sqlite3" ? "better-sqlite3" : DEFAULT_DB_ENGINE;
 }
+function resolveBusyTimeoutMs() {
+  const raw = process.env[DB_BUSY_TIMEOUT_ENV];
+  if (raw === void 0 || raw === "") return DEFAULT_BUSY_TIMEOUT_MS;
+  const n = Number(raw);
+  return Number.isFinite(n) && n >= 0 ? Math.floor(n) : DEFAULT_BUSY_TIMEOUT_MS;
+}
 function nodeSqliteCtor() {
   if (!_nodeCtor) _nodeCtor = req2("node:sqlite").DatabaseSync;
   return _nodeCtor;
@@ -452,6 +458,7 @@ function openNodeSqlite(dbPath, opts) {
     enableForeignKeyConstraints: true,
     allowExtension: false
   });
+  raw.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
   let savepointSeq = 0;
   const wrapStmt = (sql) => {
     const st = raw.prepare(sql);
@@ -535,12 +542,14 @@ function openNodeSqlite(dbPath, opts) {
   return handle;
 }
 function openBetterSqlite3(dbPath, opts) {
-  return openDatabase(dbPath, opts);
+  const db = openDatabase(dbPath, opts);
+  db.exec(`PRAGMA busy_timeout = ${resolveBusyTimeoutMs()}`);
+  return db;
 }
 function openDatabase2(dbPath, opts = {}) {
   return resolveDbEngine() === "better-sqlite3" ? openBetterSqlite3(dbPath, opts) : openNodeSqlite(dbPath, opts);
 }
-var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, _nodeCtor;
+var req2, DEFAULT_DB_ENGINE, DB_ENGINE_ENV, DEFAULT_BUSY_TIMEOUT_MS, DB_BUSY_TIMEOUT_ENV, _nodeCtor;
 var init_db_driver = __esm({
   "src/db-driver.ts"() {
     "use strict";
@@ -549,6 +558,8 @@ var init_db_driver = __esm({
     req2 = createRequire2(import.meta.url);
     DEFAULT_DB_ENGINE = "node-sqlite";
     DB_ENGINE_ENV = "MASSU_DB_ENGINE";
+    DEFAULT_BUSY_TIMEOUT_MS = 5e3;
+    DB_BUSY_TIMEOUT_ENV = "MASSU_DB_BUSY_TIMEOUT_MS";
     _nodeCtor = null;
   }
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@massu/core",
-  "version": "2.3.0",
+  "version": "2.4.0",
   "type": "module",
   "description": "AI Engineering Governance MCP Server - Session memory, knowledge system, feature registry, code intelligence, rule enforcement, tiered tooling (12 free / 73 total), 56 workflow commands, 11 agents, 20+ patterns",
   "main": "./dist/cli.js",
@@ -28,8 +28,8 @@
     "build:adapter-types": "tsc -p tsconfig.adapter-types.json",
     "build:adapter-subpath": "tsx scripts/bundle-adapters.ts --subpath-only",
     "build:bundle-adapters": "tsx scripts/bundle-adapters.ts",
-    "build:cli": "esbuild --bundle --platform=node --format=esm --outfile=dist/cli.js src/cli.ts --external:better-sqlite3 --external:yaml --external:zod --external:chokidar --external:proper-lockfile --external:fsevents --external:web-tree-sitter --external:tweetnacl --external:tar --external:smol-toml --external:vscode-languageserver-protocol --external:onnxruntime-web --external:@massu/adapter-rails --external:@massu/adapter-spring --banner:js='#!/usr/bin/env node\nimport{createRequire as __cr}from\"module\";const require=__cr(import.meta.url);'",
-    "build:hooks": "esbuild --bundle --platform=node --format=esm --outdir=dist/hooks src/hooks/*.ts --external:better-sqlite3 --external:yaml --external:zod --external:chokidar --external:proper-lockfile --external:fsevents --external:web-tree-sitter --external:tweetnacl --external:tar --external:smol-toml --external:vscode-languageserver-protocol --external:onnxruntime-web --external:@massu/adapter-rails --external:@massu/adapter-spring --banner:js='import{createRequire as __cr}from\"module\";const require=__cr(import.meta.url);'",
+    "build:cli": "node scripts/build-bundles.mjs --cli",
+    "build:hooks": "node scripts/build-bundles.mjs --hooks",
     "prepublishOnly": "bash ../../scripts/prepublish-check.sh && node ../../scripts/bundle-pubkey.mjs && node ../../scripts/bundle-license-pubkey.mjs && node ../../scripts/bundle-promotion-pubkey.mjs && node ../../scripts/bundle-audit-export-pubkey.mjs && cp ../../CHANGELOG.md ./CHANGELOG.md && npm run build && bash ../../scripts/npm-publish-guard.sh",
     "bench:watch": "tsx test/perf/watch-benchmark.ts",
     "build:owned-sidecars": "node scripts/gen-owned-sidecars.mjs"