@massu/core 2.5.5 → 2.5.7

package/CHANGELOG.md

@@ -10,6 +10,69 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 > redistributed under the **Apache License 2.0**. Full license + NOTICE:
 > `packages/core/assets/embedder/MODEL-LICENSE`.
 
+## [2.5.7] - 2026-11-10
+
+### Fixed
+
+- **Cloud sync no longer queues uploads the server refuses.** When the massu cloud refused an upload
+  for a reason that retrying cannot change (for example `403 Sync not available for current plan
+  status`), massu queued it and retried forever. One project's memory database grew to 8.5 GB this way,
+  7.6 GB of it refused uploads, and every reply re-sent a ~179 KB upload that was always refused. Now:
+  - a refusal that cannot succeed is never queued or retried;
+  - when the account itself is refused (401 or 403), massu records the server's reason, pauses sync,
+    clears the queue (learned rules are kept), and shows `MASSU CLOUD SYNC PAUSED` with that reason at
+    session start. It checks again once a day and resumes on its own when the account allows it;
+  - temporary failures (network, 5xx, 429) still queue, but the queue now holds at most 500 items and
+    nothing older than 30 days, and every item gets its turn.
+- **`massu install-hooks` now upgrades a project completely.** It also moves the massu MCP server in
+  `.mcp.json` to the same version as the hooks (it never did before, so every upgrade left the server
+  behind), and it replaces hook entries written by much older installers, which used to stay beside the
+  current ones and fail on every tool call. Your own hooks and any hand-written massu entry are left alone.
+- **A hook launched through a symlinked path now runs.** Started through a symlink, a hook decided it was
+  not the program being run and exited without doing anything; for the safety gate that meant allowing
+  the call. The commands `massu init` writes were not affected.
+
+### Added
+
+- **The first prompt of a session is faster.** Session start now loads the memory-search model in the
+  background, so the first prompt no longer pays for it (measured: about 1.5 s for the first search,
+  0.6 s after). Turn it off with `MASSU_RECALL_WARMUP=0`.
+- **`scripts/massu-db-size-audit.sh`** (in the repository) reports where a massu database's space goes:
+  live data, space freed but not yet returned to the disk, the largest tables, and the sync queue.
+
+## [2.5.6] - 2026-11-09
+
+### Security
+
+- **The safety gate blocks again.** In 2.5.2 through 2.5.5 the PreToolUse gate that `massu init`
+  installs warned about everything it should have blocked and then let the call run: commands
+  that read `.env` and other secret files, piping a download into a shell, `rm -rf /`, disk
+  formatting and writes to `/etc/passwd`. Claude Code blocks a tool call only when the hook exits
+  with code 2; the gate printed "BLOCKED" and exited 0. It now exits 2 for every blocking
+  finding. **Upgrade, then run `massu init` again** so your settings pick up the change below.
+- **A gate that fails now blocks.** `massu init` sets Claude Code's `"onFailure": "block"`
+  (Claude Code 2.1.295 or later) on the gate, so a gate that crashes, times out or prints invalid
+  output blocks the call instead of letting it through. On older Claude Code, the `massu-hook`
+  launcher and `hook-runner` turn a crashed gate into a block.
+- **The older hook names decide too.** Settings written before 1.12.0 may still name the
+  `security-gate` and `pre-delete-check` hooks. They used to warn only; they now make the same
+  decision as the gate.
+- **More secret files are recognised:** secrets data files under any name, such as
+  `config.secrets.yaml` or `app.secret.json`. Source files such as `secrets.ts` are still allowed.
+
+### Fixed
+
+- **The gate no longer refuses good calls under load.** A slow-arriving tool call could be
+  denied as "Unexpected end of JSON input" and pass on retry. The gate now reads its whole
+  input before deciding.
+
+### Added
+
+- **`massu_cost_feature` reports real data.** Each session's priced cost is split across the
+  registered features whose files it touched, in proportion to those touches; activity on files
+  that belong to no registered feature is shown as `(no registered feature)`, so the rows add up
+  to the sessions' total. Sessions whose cost is unknown are left out.
+
 ## [2.5.5] - 2026-11-09
 
 ### Fixed

package/dist/cli.js

@@ -2490,6 +2490,8 @@ __export(memory_db_exports, {
   MEMORY_FILE_TITLE_LIKE: () => MEMORY_FILE_TITLE_LIKE,
   MEMORY_FILE_TITLE_PREFIX: () => MEMORY_FILE_TITLE_PREFIX,
   MEMORY_SCHEMA_VERSION: () => MEMORY_SCHEMA_VERSION,
+  PENDING_SYNC_MAX_AGE_DAYS: () => PENDING_SYNC_MAX_AGE_DAYS,
+  PENDING_SYNC_MAX_ITEMS: () => PENDING_SYNC_MAX_ITEMS,
   TOOL_COST_EVENTS_RETENTION_DAYS: () => TOOL_COST_EVENTS_RETENTION_DAYS,
   USAGE_COUNTER_ARMED_KEY: () => USAGE_COUNTER_ARMED_KEY,
   addConversationTurn: () => addConversationTurn,
@@ -2498,6 +2500,7 @@ __export(memory_db_exports, {
   addSummary: () => addSummary,
   addToolCallDetail: () => addToolCallDetail,
   addUserPrompt: () => addUserPrompt,
+  allPendingSync: () => allPendingSync,
   appendIncidentToFailureClass: () => appendIncidentToFailureClass,
   armUsageCounter: () => armUsageCounter,
   assignImportance: () => assignImportance,
@@ -2505,6 +2508,7 @@ __export(memory_db_exports, {
   createSession: () => createSession,
   deduplicateFailedAttempt: () => deduplicateFailedAttempt,
   dequeuePendingSync: () => dequeuePendingSync,
+  discardPendingSync: () => discardPendingSync,
   embedMissingObservations: () => embedMissingObservations,
   endSession: () => endSession,
   enqueueRulePromotionEvent: () => enqueueRulePromotionEvent,
@@ -3487,6 +3491,35 @@ function initMemorySchema(db) {
 }
 function enqueueSyncPayload(db, payload) {
   db.prepare("INSERT INTO pending_sync (payload) VALUES (?)").run(payload);
+  const overflow = db.prepare(
+    `SELECT id, retry_count, last_error, payload FROM pending_sync
+      WHERE created_at < datetime('now', ?)
+         OR id NOT IN (SELECT id FROM pending_sync ORDER BY created_at DESC, id DESC LIMIT ?)
+      LIMIT 10000`
+  ).all(`-${PENDING_SYNC_MAX_AGE_DAYS} days`, PENDING_SYNC_MAX_ITEMS);
+  if (overflow.length > 0) {
+    discardPendingSync(db, overflow, `over the queue limit (${PENDING_SYNC_MAX_ITEMS} items / ${PENDING_SYNC_MAX_AGE_DAYS} days)`);
+  }
+}
+function discardPendingSync(db, rows, why) {
+  if (rows.length === 0) return 0;
+  const rescued = rescueLearningFromStalePayloads(db, rows);
+  for (let i = 0; i < rows.length; i += 500) {
+    const ids = rows.slice(i, i + 500).map((r3) => r3.id);
+    db.prepare(`DELETE FROM pending_sync WHERE id IN (${ids.map(() => "?").join(",")})`).run(...ids);
+  }
+  if (rescued > 0) {
+    process.stderr.write(
+      `[massu] RESCUED ${rescued} learned rule(s) from ${rows.length} discarded payload(s) \u2014 they were re-queued for delivery, NOT discarded.
+`
+    );
+  }
+  process.stderr.write(`[massu] cloud sync: discarded ${rows.length} queued upload(s): ${why}.
+`);
+  return rows.length;
+}
+function allPendingSync(db) {
+  return db.prepare("SELECT id, retry_count, last_error, payload FROM pending_sync").all();
 }
 function getMemoryMeta(db, key) {
   const row = db.prepare("SELECT value FROM memory_meta WHERE key = ?").get(key);
@@ -3689,7 +3722,9 @@ function dequeuePendingSync(db, limit = 10) {
     }
   }
   return db.prepare(
-    "SELECT id, payload, retry_count FROM pending_sync ORDER BY created_at ASC LIMIT ?"
+    // Least-retried first: oldest-first retried the same 10 items until they were discarded
+    // while every newer item waited at retry 0 (2026-11-09: 43,492 never attempted).
+    "SELECT id, payload, retry_count FROM pending_sync ORDER BY retry_count ASC, created_at ASC LIMIT ?"
   ).all(limit);
 }
 function removePendingSync(db, id) {
@@ -4362,7 +4397,7 @@ function scoreFailureClasses(db, matchText, filePath, promptContext, weights) {
   }
   return bestMatch;
 }
-var MEMORY_SCHEMA_VERSION, TOOL_COST_EVENTS_RETENTION_DAYS, MAX_DRAFT_TEXT_LEN, FUNNEL_EVENT_OUTBOX_CAP, _temporalColCache, CONSOLIDATION_LESSON_EVIDENCE, MEMORY_FILE_TITLE_PREFIX, MEMORY_FILE_TITLE_LIKE, USAGE_COUNTER_ARMED_KEY;
+var MEMORY_SCHEMA_VERSION, TOOL_COST_EVENTS_RETENTION_DAYS, PENDING_SYNC_MAX_ITEMS, PENDING_SYNC_MAX_AGE_DAYS, MAX_DRAFT_TEXT_LEN, FUNNEL_EVENT_OUTBOX_CAP, _temporalColCache, CONSOLIDATION_LESSON_EVIDENCE, MEMORY_FILE_TITLE_PREFIX, MEMORY_FILE_TITLE_LIKE, USAGE_COUNTER_ARMED_KEY;
 var init_memory_db = __esm({
   "src/memory-db.ts"() {
     "use strict";
@@ -4377,6 +4412,8 @@ var init_memory_db = __esm({
     init_memory_embed_sweep();
     MEMORY_SCHEMA_VERSION = 2;
     TOOL_COST_EVENTS_RETENTION_DAYS = 90;
+    PENDING_SYNC_MAX_ITEMS = 500;
+    PENDING_SYNC_MAX_AGE_DAYS = 30;
     MAX_DRAFT_TEXT_LEN = 16384;
     FUNNEL_EVENT_OUTBOX_CAP = 2e4;
     _temporalColCache = /* @__PURE__ */ new WeakMap();
@@ -5893,6 +5930,42 @@ var init_hook_timeouts = __esm({
   }
 });
 
+// src/lib/hook-registry.ts
+function getExpectedHookFiles() {
+  return REGISTERED_HOOKS.map((name) => `${name}.js`);
+}
+var REGISTERED_HOOKS, DECISION_HOOKS;
+var init_hook_registry = __esm({
+  "src/lib/hook-registry.ts"() {
+    "use strict";
+    REGISTERED_HOOKS = [
+      "auto-learning-pipeline",
+      "classify-failure",
+      "cost-tracker",
+      "fix-detector",
+      "incident-pipeline",
+      "intent-suggester",
+      "memory-recall",
+      "post-edit-context",
+      "post-tool-use",
+      "pre-compact",
+      // P-E-019 (1.12.0): security-gate + pre-delete-check are kept registered
+      // for back-compat (operator settings.json may still reference them
+      // individually), but new installs emit only `pre-tool-use-gate` —
+      // the consolidated single-spawn PreToolUse hook.
+      "pre-delete-check",
+      "pre-tool-use-gate",
+      "quality-event",
+      "rule-enforcement-pipeline",
+      "security-gate",
+      "session-end",
+      "session-start",
+      "user-prompt"
+    ];
+    DECISION_HOOKS = ["pre-delete-check", "pre-tool-use-gate", "security-gate"];
+  }
+});
+
 // src/detect/manifest-registry.ts
 var manifest_registry_exports = {};
 __export(manifest_registry_exports, {
@@ -16410,6 +16483,7 @@ ${import_picocolors2.default.gray(m2)}  ${s}
 // src/commands/init.ts
 var init_exports = {};
 __export(init_exports, {
+  SUPERSEDED_MASSU_HOOKS: () => SUPERSEDED_MASSU_HOOKS,
   applyVariantTemplate: () => applyVariantTemplate,
   buildConfigFromDetection: () => buildConfigFromDetection,
   buildHooksConfig: () => buildHooksConfig,
@@ -16432,6 +16506,7 @@ __export(init_exports, {
   mergeHooksConfig: () => mergeHooksConfig,
   parseInitArgs: () => parseInitArgs,
   printInitHelp: () => printInitHelp,
+  refreshMcpServerPin: () => refreshMcpServerPin,
   registerMcpServer: () => registerMcpServer,
   renderConfigYaml: () => renderConfigYaml,
   resolveHooksDir: () => resolveHooksDir,
@@ -17016,6 +17091,32 @@ function getInstallerVersion() {
     "getInstallerVersion: could not resolve @massu/core package.json. This indicates a corrupt install. Re-install via `npx -y @massu/core init`."
   );
 }
+function refreshMcpServerPin(projectRoot) {
+  const mcpPath = resolve12(projectRoot, ".mcp.json");
+  if (!existsSync21(mcpPath)) return "absent";
+  let doc;
+  try {
+    doc = JSON.parse(readFileSync17(mcpPath, "utf-8"));
+  } catch {
+    return "custom";
+  }
+  const servers = doc.mcpServers ?? {};
+  const cur = servers.massu;
+  if (!cur) return "absent";
+  const args2 = Array.isArray(cur.args) ? cur.args.map(String) : [];
+  const SEMVER = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/;
+  const shimForm = typeof cur.command === "string" && /[/\\]massu-hook$/.test(cur.command) && args2.length === 1 && SEMVER.test(args2[0]);
+  const npxForm = cur.command === "npx" && args2.length === 2 && args2[0] === "-y" && /^@massu\/core@/.test(args2[1]);
+  if (!shimForm && !npxForm) return "custom";
+  const version = getInstallerVersion();
+  const shim = resolveMassuShim();
+  const next = shim !== null ? { type: "stdio", command: shim, args: [version] } : { type: "stdio", command: "npx", args: ["-y", `@massu/core@${version}`] };
+  if (JSON.stringify({ ...cur, ...next }) === JSON.stringify(cur)) return "current";
+  servers.massu = { ...cur, ...next };
+  doc.mcpServers = servers;
+  writeFileSync5(mcpPath, JSON.stringify(doc, null, 2) + "\n", "utf-8");
+  return "updated";
+}
 function registerMcpServer(projectRoot) {
   const mcpPath = resolve12(projectRoot, ".mcp.json");
   let existing = {};
@@ -17102,6 +17203,22 @@ fi
 MASSU_VERSION="$1"
 shift
 MASSU_CLI="\${HOME}/.massu/runtime/\${MASSU_VERSION}/node_modules/@massu/core/dist/cli.js"
+# A DECIDING hook's exit code is its verdict: 0 allows, 2 denies. If the launch itself fails
+# (a runtime that cannot load exits 1), Claude Code would RUN the call, so for these hooks
+# any other status becomes a deny. Every other subcommand keeps the exec path below.
+if [ "\${1:-}" = hook-runner ]; then
+  case "\${2:-}" in
+    ${DECISION_HOOKS.join("|")})
+      if [ -f "$MASSU_CLI" ]; then node "$MASSU_CLI" "$@"; else npx -y "@massu/core@\${MASSU_VERSION}" "$@"; fi
+      st=$?
+      if [ "$st" -ne 0 ] && [ "$st" -ne 2 ]; then
+        echo "MASSU SECURITY GATE \u2014 BLOCKED: the $2 hook ended without a verdict (exit $st)" >&2
+        exit 2
+      fi
+      exit "$st"
+      ;;
+  esac
+fi
 if [ -f "$MASSU_CLI" ]; then
   exec node "$MASSU_CLI" "$@"
 fi
@@ -17149,6 +17266,7 @@ function getHookTimeout(name) {
 function hookEntry(version, name, shim) {
   const entry = { type: "command", command: hookCmd(version, name, shim), timeout: getHookTimeout(name) };
   if (BACKGROUND_HOOKS.has(name)) entry.async = true;
+  if (DECISION_HOOKS.includes(name)) entry.onFailure = "block";
   return entry;
 }
 function buildHooksConfig(_hooksDir, shim = resolveMassuShim()) {
@@ -17263,12 +17381,33 @@ function mergeHooksConfig(existing, additions) {
     }
     merged[event] = Array.from(byMatcher.values());
   }
+  const emitted = /* @__PURE__ */ new Set();
+  for (const groups of Object.values(additions ?? {})) {
+    for (const g2 of groups) {
+      for (const h2 of g2.hooks ?? []) {
+        const id = typeof h2?.command === "string" ? massuHookIdentity(h2.command) : null;
+        if (id) emitted.add(id);
+      }
+    }
+  }
+  for (const event of Object.keys(merged)) {
+    merged[event] = merged[event].map((g2) => ({
+      ...g2,
+      hooks: (g2.hooks ?? []).filter((h2) => {
+        const id = typeof h2?.command === "string" ? massuHookIdentity(h2.command) : null;
+        const by = id ? SUPERSEDED_MASSU_HOOKS[id] : void 0;
+        return !(by && emitted.has(by));
+      })
+    })).filter((g2) => (g2.hooks ?? []).length > 0);
+  }
   return merged;
 }
 function massuHookIdentity(command) {
   if (!/@massu\/core|[/\\]\.?massu[/\\]/.test(command)) return null;
   const m3 = /\bhook-runner\s+([A-Za-z0-9._-]+)/.exec(command);
-  return m3 ? m3[1] : null;
+  if (m3) return m3[1];
+  const legacy = /@massu[/\\]core[/\\]dist[/\\]hooks[/\\]([a-z0-9-]+)\.js/.exec(command);
+  return legacy ? legacy[1] : null;
 }
 function mergeHookEntries(existing, additions) {
   const seenCommands = /* @__PURE__ */ new Set();
@@ -17694,7 +17833,7 @@ async function promptStackConfirm() {
 function capitalize(str) {
   return str.charAt(0).toUpperCase() + str.slice(1);
 }
-var __filename2, __dirname2, FRAMEWORK_TO_TEMPLATE_ID, TEMPLATE_NAMES;
+var __filename2, __dirname2, FRAMEWORK_TO_TEMPLATE_ID, TEMPLATE_NAMES, SUPERSEDED_MASSU_HOOKS;
 var init_init = __esm({
   "src/commands/init.ts"() {
     "use strict";
@@ -17705,6 +17844,7 @@ var init_init = __esm({
     init_settings_local();
     init_memory_path();
     init_hook_timeouts();
+    init_hook_registry();
     init_detect();
     init_drift();
     __filename2 = fileURLToPath3(import.meta.url);
@@ -17726,6 +17866,10 @@ var init_init = __esm({
       "swift-ios",
       "multi-runtime"
     ];
+    SUPERSEDED_MASSU_HOOKS = Object.freeze({
+      "security-gate": "pre-tool-use-gate",
+      "pre-delete-check": "pre-tool-use-gate"
+    });
   }
 });
 
@@ -18291,41 +18435,6 @@ var init_license = __esm({
   }
 });
 
-// src/lib/hook-registry.ts
-function getExpectedHookFiles() {
-  return REGISTERED_HOOKS.map((name) => `${name}.js`);
-}
-var REGISTERED_HOOKS;
-var init_hook_registry = __esm({
-  "src/lib/hook-registry.ts"() {
-    "use strict";
-    REGISTERED_HOOKS = [
-      "auto-learning-pipeline",
-      "classify-failure",
-      "cost-tracker",
-      "fix-detector",
-      "incident-pipeline",
-      "intent-suggester",
-      "memory-recall",
-      "post-edit-context",
-      "post-tool-use",
-      "pre-compact",
-      // P-E-019 (1.12.0): security-gate + pre-delete-check are kept registered
-      // for back-compat (operator settings.json may still reference them
-      // individually), but new installs emit only `pre-tool-use-gate` —
-      // the consolidated single-spawn PreToolUse hook.
-      "pre-delete-check",
-      "pre-tool-use-gate",
-      "quality-event",
-      "rule-enforcement-pipeline",
-      "security-gate",
-      "session-end",
-      "session-start",
-      "user-prompt"
-    ];
-  }
-});
-
 // src/preflight.ts
 import { existsSync as existsSync22 } from "fs";
 function assertCodegraphUsable(dbPath) {
@@ -18412,6 +18521,7 @@ var init_preflight = __esm({
 var hook_runner_exports = {};
 __export(hook_runner_exports, {
   HOOK_NAME_TO_FILE: () => HOOK_NAME_TO_FILE,
+  decisionExitCode: () => decisionExitCode,
   resolveHookFile: () => resolveHookFile,
   runHookRunner: () => runHookRunner
 });
@@ -18443,6 +18553,16 @@ function resolveHookFile(hookName) {
     `Hook file not found for "${hookName}". Searched: ${candidates.join(", ")}. This indicates a broken @massu/core install. Re-run \`npx -y @massu/core init\`.`
   );
 }
+function decisionExitCode(hookName, code) {
+  if (!DECISION_HOOKS.includes(hookName) || code === 0 || code === 2) return code;
+  process.stderr.write(
+    `MASSU SECURITY GATE \u2014 BLOCKED
+
+The ${hookName} hook ended without a verdict (exit ${code}). A gate that did not decide has not approved this call.
+`
+  );
+  return 2;
+}
 async function runHookRunner(args2) {
   const hookName = args2[0];
   if (!hookName) {
@@ -18471,11 +18591,7 @@ Recognized: ${Object.keys(HOOK_NAME_TO_FILE).join(", ")}
       env: { ...process.env, MASSU_HOOK_RUNTIME: "1" }
     });
     child.on("exit", (code, signal) => {
-      if (signal) {
-        resolvePromise({ exitCode: 128 });
-        return;
-      }
-      resolvePromise({ exitCode: code ?? 0 });
+      resolvePromise({ exitCode: decisionExitCode(hookName, signal ? 128 : code ?? 0) });
     });
     child.on("error", (err) => {
       process.stderr.write(`massu hook-runner: failed to spawn hook "${hookName}": ${err.message}
@@ -19293,6 +19409,10 @@ async function runInstallHooks() {
   }
   const { count } = installHooks(projectRoot);
   console.log(`  Installed ${count} hooks in .claude/settings.local.json`);
+  const mcp = refreshMcpServerPin(projectRoot);
+  if (mcp === "updated") console.log(`  Updated the massu MCP server in .mcp.json to ${version} (commit this file)`);
+  else if (mcp === "current") console.log(`  .mcp.json already runs massu ${version}`);
+  else if (mcp === "custom") console.log("  .mcp.json has a hand-written massu entry \u2014 left unchanged; check its version");
   console.log("");
   console.log("Hooks will activate on your next Claude Code session.");
   console.log("");
@@ -33605,12 +33725,13 @@ function handleCostFeature(args2, db) {
     ORDER BY total_cost DESC
   `).all(`-${days} days`);
   if (rows.length === 0) {
-    return text7(`No feature cost data found in the last ${days} days. Feature costs are attributed automatically when sessions work on registered features. Ensure features are registered, then costs are tracked per-session. Try: ${p8("cost_trend")} { days: 30 } for session-level cost trends instead.`);
+    return text7(`No feature cost data found in the last ${days} days. Each session's priced cost is allocated across registered features (massu_sentinel_register) by the files it touched; sessions with unknown cost are skipped. Try: ${p8("cost_trend")} { days: 30 } for session-level cost trends instead.`);
   }
   const totalCost = rows.reduce((sum, r3) => sum + r3.total_cost, 0);
   const lines = [
     `## Feature Cost Attribution (${days} days)`,
-    `Total: $${totalCost.toFixed(2)} across ${rows.length} features`,
+    `Total: $${totalCost.toFixed(2)} across ${rows.length} feature row(s)`,
+    "Each session's priced cost is ALLOCATED across the registered features whose files it touched, in proportion to those touches. It is an allocation by activity, not a measured per-feature cost. Sessions with unknown cost are not included.",
     "",
     "| Feature | Cost | Tokens | Sessions | % of Total |",
     "|---------|------|--------|----------|------------|"

package/dist/hooks/auto-learning-pipeline.js

@@ -2086,6 +2086,8 @@ __export(memory_db_exports, {
   MEMORY_FILE_TITLE_LIKE: () => MEMORY_FILE_TITLE_LIKE,
   MEMORY_FILE_TITLE_PREFIX: () => MEMORY_FILE_TITLE_PREFIX,
   MEMORY_SCHEMA_VERSION: () => MEMORY_SCHEMA_VERSION,
+  PENDING_SYNC_MAX_AGE_DAYS: () => PENDING_SYNC_MAX_AGE_DAYS,
+  PENDING_SYNC_MAX_ITEMS: () => PENDING_SYNC_MAX_ITEMS,
   TOOL_COST_EVENTS_RETENTION_DAYS: () => TOOL_COST_EVENTS_RETENTION_DAYS,
   USAGE_COUNTER_ARMED_KEY: () => USAGE_COUNTER_ARMED_KEY,
   addConversationTurn: () => addConversationTurn,
@@ -2094,6 +2096,7 @@ __export(memory_db_exports, {
   addSummary: () => addSummary,
   addToolCallDetail: () => addToolCallDetail,
   addUserPrompt: () => addUserPrompt,
+  allPendingSync: () => allPendingSync,
   appendIncidentToFailureClass: () => appendIncidentToFailureClass,
   armUsageCounter: () => armUsageCounter,
   assignImportance: () => assignImportance,
@@ -2101,6 +2104,7 @@ __export(memory_db_exports, {
   createSession: () => createSession,
   deduplicateFailedAttempt: () => deduplicateFailedAttempt,
   dequeuePendingSync: () => dequeuePendingSync,
+  discardPendingSync: () => discardPendingSync,
   embedMissingObservations: () => embedMissingObservations,
   endSession: () => endSession,
   enqueueRulePromotionEvent: () => enqueueRulePromotionEvent,
@@ -3083,6 +3087,35 @@ function initMemorySchema(db) {
 }
 function enqueueSyncPayload(db, payload) {
   db.prepare("INSERT INTO pending_sync (payload) VALUES (?)").run(payload);
+  const overflow = db.prepare(
+    `SELECT id, retry_count, last_error, payload FROM pending_sync
+      WHERE created_at < datetime('now', ?)
+         OR id NOT IN (SELECT id FROM pending_sync ORDER BY created_at DESC, id DESC LIMIT ?)
+      LIMIT 10000`
+  ).all(`-${PENDING_SYNC_MAX_AGE_DAYS} days`, PENDING_SYNC_MAX_ITEMS);
+  if (overflow.length > 0) {
+    discardPendingSync(db, overflow, `over the queue limit (${PENDING_SYNC_MAX_ITEMS} items / ${PENDING_SYNC_MAX_AGE_DAYS} days)`);
+  }
+}
+function discardPendingSync(db, rows, why) {
+  if (rows.length === 0) return 0;
+  const rescued = rescueLearningFromStalePayloads(db, rows);
+  for (let i = 0; i < rows.length; i += 500) {
+    const ids = rows.slice(i, i + 500).map((r) => r.id);
+    db.prepare(`DELETE FROM pending_sync WHERE id IN (${ids.map(() => "?").join(",")})`).run(...ids);
+  }
+  if (rescued > 0) {
+    process.stderr.write(
+      `[massu] RESCUED ${rescued} learned rule(s) from ${rows.length} discarded payload(s) \u2014 they were re-queued for delivery, NOT discarded.
+`
+    );
+  }
+  process.stderr.write(`[massu] cloud sync: discarded ${rows.length} queued upload(s): ${why}.
+`);
+  return rows.length;
+}
+function allPendingSync(db) {
+  return db.prepare("SELECT id, retry_count, last_error, payload FROM pending_sync").all();
 }
 function getMemoryMeta(db, key) {
   const row = db.prepare("SELECT value FROM memory_meta WHERE key = ?").get(key);
@@ -3285,7 +3318,9 @@ function dequeuePendingSync(db, limit = 10) {
     }
   }
   return db.prepare(
-    "SELECT id, payload, retry_count FROM pending_sync ORDER BY created_at ASC LIMIT ?"
+    // Least-retried first: oldest-first retried the same 10 items until they were discarded
+    // while every newer item waited at retry 0 (2026-11-09: 43,492 never attempted).
+    "SELECT id, payload, retry_count FROM pending_sync ORDER BY retry_count ASC, created_at ASC LIMIT ?"
   ).all(limit);
 }
 function removePendingSync(db, id) {
@@ -3958,7 +3993,7 @@ function scoreFailureClasses(db, matchText, filePath, promptContext, weights) {
   }
   return bestMatch;
 }
-var MEMORY_SCHEMA_VERSION, TOOL_COST_EVENTS_RETENTION_DAYS, MAX_DRAFT_TEXT_LEN, FUNNEL_EVENT_OUTBOX_CAP, _temporalColCache, CONSOLIDATION_LESSON_EVIDENCE, MEMORY_FILE_TITLE_PREFIX, MEMORY_FILE_TITLE_LIKE, USAGE_COUNTER_ARMED_KEY;
+var MEMORY_SCHEMA_VERSION, TOOL_COST_EVENTS_RETENTION_DAYS, PENDING_SYNC_MAX_ITEMS, PENDING_SYNC_MAX_AGE_DAYS, MAX_DRAFT_TEXT_LEN, FUNNEL_EVENT_OUTBOX_CAP, _temporalColCache, CONSOLIDATION_LESSON_EVIDENCE, MEMORY_FILE_TITLE_PREFIX, MEMORY_FILE_TITLE_LIKE, USAGE_COUNTER_ARMED_KEY;
 var init_memory_db = __esm({
   "src/memory-db.ts"() {
     "use strict";
@@ -3973,6 +4008,8 @@ var init_memory_db = __esm({
     init_memory_embed_sweep();
     MEMORY_SCHEMA_VERSION = 2;
     TOOL_COST_EVENTS_RETENTION_DAYS = 90;
+    PENDING_SYNC_MAX_ITEMS = 500;
+    PENDING_SYNC_MAX_AGE_DAYS = 30;
     MAX_DRAFT_TEXT_LEN = 16384;
     FUNNEL_EVENT_OUTBOX_CAP = 2e4;
     _temporalColCache = /* @__PURE__ */ new WeakMap();
@@ -4058,7 +4095,7 @@ var init_hook_failure_signal = __esm({
 init_config();
 import { execFileSync } from "child_process";
 import { createHash } from "crypto";
-import { existsSync as existsSync10, readFileSync as readFileSync7, unlinkSync as unlinkSync2, readdirSync as readdirSync2, statSync as statSync2, writeFileSync as writeFileSync3, mkdirSync as mkdirSync7 } from "fs";
+import { existsSync as existsSync11, readFileSync as readFileSync7, unlinkSync as unlinkSync3, readdirSync as readdirSync2, statSync as statSync3, writeFileSync as writeFileSync4, mkdirSync as mkdirSync7 } from "fs";
 import { tmpdir as tmpdir2 } from "os";
 import { join as join6, dirname as dirname8 } from "path";
 
@@ -4100,20 +4137,48 @@ function writeHookContext(hookEventName, message) {
 // src/hooks/auto-learning-pipeline.ts
 init_hook_failure_signal();
 
+// src/lib/safe-write.ts
+import {
+  writeFileSync as writeFileSync3,
+  renameSync,
+  openSync as openSync2,
+  fsyncSync as fsyncSync2,
+  closeSync as closeSync2,
+  existsSync as existsSync9,
+  realpathSync,
+  unlinkSync as unlinkSync2,
+  accessSync as accessSync2,
+  statSync as statSync2,
+  chmodSync as chmodSync3,
+  constants
+} from "fs";
+function isSameRealPath(a, b) {
+  try {
+    return realpathSync(a) === realpathSync(b);
+  } catch {
+    return false;
+  }
+}
+
 // src/hooks/lib/is-direct-invocation.ts
-import { pathToFileURL } from "url";
+import { fileURLToPath as fileURLToPath2, pathToFileURL } from "url";
 function isDirectInvocation(moduleUrl) {
   const entry = process.argv[1];
   if (!entry) return false;
   try {
-    return moduleUrl === pathToFileURL(entry).href;
+    if (moduleUrl === pathToFileURL(entry).href) return true;
+  } catch {
+    return false;
+  }
+  try {
+    return isSameRealPath(fileURLToPath2(moduleUrl), entry);
   } catch {
     return false;
   }
 }
 
 // src/hooks/lib/session-touched-files.ts
-import { readFileSync as readFileSync6, existsSync as existsSync9, realpathSync } from "fs";
+import { readFileSync as readFileSync6, existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import { relative, isAbsolute, resolve as resolve5 } from "path";
 var FILE_WRITING_TOOLS = Object.freeze({
   Edit: ["file_path"],
@@ -4123,7 +4188,7 @@ var FILE_WRITING_TOOLS = Object.freeze({
 });
 function canonical(p) {
   try {
-    return realpathSync(p);
+    return realpathSync2(p);
   } catch {
     return p;
   }
@@ -4171,7 +4236,7 @@ function transcriptTouchedFiles(root, transcriptPath) {
   return out;
 }
 function flagFileTouchedFiles(root, flagPath) {
-  if (!existsSync9(flagPath)) return null;
+  if (!existsSync10(flagPath)) return null;
   let raw;
   try {
     raw = readFileSync6(flagPath, "utf-8");
@@ -4592,7 +4657,7 @@ function readShownKeys(ackPath) {
 }
 function writeShownKeys(ackPath, keys) {
   mkdirSync7(dirname8(ackPath), { recursive: true });
-  writeFileSync3(ackPath, JSON.stringify({ shown: [...keys].sort() }), "utf-8");
+  writeFileSync4(ackPath, JSON.stringify({ shown: [...keys].sort() }), "utf-8");
 }
 function freshMatches(matchKeys, shown) {
   return [...new Set(matchKeys)].filter((k) => !shown.has(k));
@@ -4602,7 +4667,7 @@ function recentIncidentFiles(dir, nowMs = Date.now()) {
   try {
     return readdirSync2(dir).filter((f) => f.endsWith(".md")).filter((f) => {
       try {
-        return nowMs - statSync2(join6(dir, f)).mtimeMs <= RECENT_INCIDENT_WINDOW_MS;
+        return nowMs - statSync3(join6(dir, f)).mtimeMs <= RECENT_INCIDENT_WINDOW_MS;
       } catch {
         return false;
       }
@@ -4616,7 +4681,7 @@ function readPostImageFrom(root) {
   return (rel) => {
     try {
       const abs = join6(root, rel);
-      if (statSync2(abs).size > MAX_POST_IMAGE_BYTES) return null;
+      if (statSync3(abs).size > MAX_POST_IMAGE_BYTES) return null;
       return readFileSync7(abs, "utf-8");
     } catch {
       return null;
@@ -4729,7 +4794,7 @@ async function main() {
     const autoLearn = config.autoLearning;
     const flagPath = getSessionFlagPath(hookInput.session_id);
     let sessionFixes = [];
-    if (existsSync10(flagPath)) {
+    if (existsSync11(flagPath)) {
       try {
         sessionFixes = readFileSync7(flagPath, "utf-8").split("\n").filter(Boolean).map((line) => JSON.parse(line));
       } catch {
@@ -4821,16 +4886,16 @@ async function main() {
 }
 function cleanup(flagPath) {
   try {
-    if (existsSync10(flagPath)) unlinkSync2(flagPath);
+    if (existsSync11(flagPath)) unlinkSync3(flagPath);
     const dir = join6(tmpdir2(), "massu-auto-learning");
-    if (existsSync10(dir)) {
+    if (existsSync11(dir)) {
       const now = Date.now();
       for (const file of readdirSync2(dir)) {
         const fullPath = join6(dir, file);
         try {
-          const stat = statSync2(fullPath);
+          const stat = statSync3(fullPath);
           if (now - stat.mtimeMs > 864e5) {
-            unlinkSync2(fullPath);
+            unlinkSync3(fullPath);
           }
         } catch {
         }