@massu/core 2.5.5 → 2.5.7

package/dist/hooks/session-start.js

@@ -2205,6 +2205,8 @@ __export(memory_db_exports, {
   MEMORY_FILE_TITLE_LIKE: () => MEMORY_FILE_TITLE_LIKE,
   MEMORY_FILE_TITLE_PREFIX: () => MEMORY_FILE_TITLE_PREFIX,
   MEMORY_SCHEMA_VERSION: () => MEMORY_SCHEMA_VERSION,
+  PENDING_SYNC_MAX_AGE_DAYS: () => PENDING_SYNC_MAX_AGE_DAYS,
+  PENDING_SYNC_MAX_ITEMS: () => PENDING_SYNC_MAX_ITEMS,
   TOOL_COST_EVENTS_RETENTION_DAYS: () => TOOL_COST_EVENTS_RETENTION_DAYS,
   USAGE_COUNTER_ARMED_KEY: () => USAGE_COUNTER_ARMED_KEY,
   addConversationTurn: () => addConversationTurn,
@@ -2213,6 +2215,7 @@ __export(memory_db_exports, {
   addSummary: () => addSummary,
   addToolCallDetail: () => addToolCallDetail,
   addUserPrompt: () => addUserPrompt,
+  allPendingSync: () => allPendingSync,
   appendIncidentToFailureClass: () => appendIncidentToFailureClass,
   armUsageCounter: () => armUsageCounter,
   assignImportance: () => assignImportance,
@@ -2220,6 +2223,7 @@ __export(memory_db_exports, {
   createSession: () => createSession,
   deduplicateFailedAttempt: () => deduplicateFailedAttempt,
   dequeuePendingSync: () => dequeuePendingSync,
+  discardPendingSync: () => discardPendingSync,
   embedMissingObservations: () => embedMissingObservations,
   endSession: () => endSession,
   enqueueRulePromotionEvent: () => enqueueRulePromotionEvent,
@@ -3202,6 +3206,35 @@ function initMemorySchema(db) {
 }
 function enqueueSyncPayload(db, payload) {
   db.prepare("INSERT INTO pending_sync (payload) VALUES (?)").run(payload);
+  const overflow = db.prepare(
+    `SELECT id, retry_count, last_error, payload FROM pending_sync
+      WHERE created_at < datetime('now', ?)
+         OR id NOT IN (SELECT id FROM pending_sync ORDER BY created_at DESC, id DESC LIMIT ?)
+      LIMIT 10000`
+  ).all(`-${PENDING_SYNC_MAX_AGE_DAYS} days`, PENDING_SYNC_MAX_ITEMS);
+  if (overflow.length > 0) {
+    discardPendingSync(db, overflow, `over the queue limit (${PENDING_SYNC_MAX_ITEMS} items / ${PENDING_SYNC_MAX_AGE_DAYS} days)`);
+  }
+}
+function discardPendingSync(db, rows, why) {
+  if (rows.length === 0) return 0;
+  const rescued = rescueLearningFromStalePayloads(db, rows);
+  for (let i = 0; i < rows.length; i += 500) {
+    const ids = rows.slice(i, i + 500).map((r) => r.id);
+    db.prepare(`DELETE FROM pending_sync WHERE id IN (${ids.map(() => "?").join(",")})`).run(...ids);
+  }
+  if (rescued > 0) {
+    process.stderr.write(
+      `[massu] RESCUED ${rescued} learned rule(s) from ${rows.length} discarded payload(s) \u2014 they were re-queued for delivery, NOT discarded.
+`
+    );
+  }
+  process.stderr.write(`[massu] cloud sync: discarded ${rows.length} queued upload(s): ${why}.
+`);
+  return rows.length;
+}
+function allPendingSync(db) {
+  return db.prepare("SELECT id, retry_count, last_error, payload FROM pending_sync").all();
 }
 function getMemoryMeta(db, key) {
   const row = db.prepare("SELECT value FROM memory_meta WHERE key = ?").get(key);
@@ -3404,7 +3437,9 @@ function dequeuePendingSync(db, limit = 10) {
     }
   }
   return db.prepare(
-    "SELECT id, payload, retry_count FROM pending_sync ORDER BY created_at ASC LIMIT ?"
+    // Least-retried first: oldest-first retried the same 10 items until they were discarded
+    // while every newer item waited at retry 0 (2026-11-09: 43,492 never attempted).
+    "SELECT id, payload, retry_count FROM pending_sync ORDER BY retry_count ASC, created_at ASC LIMIT ?"
   ).all(limit);
 }
 function removePendingSync(db, id) {
@@ -4077,7 +4112,7 @@ function scoreFailureClasses(db, matchText, filePath, promptContext, weights) {
   }
   return bestMatch;
 }
-var MEMORY_SCHEMA_VERSION, TOOL_COST_EVENTS_RETENTION_DAYS, MAX_DRAFT_TEXT_LEN, FUNNEL_EVENT_OUTBOX_CAP, _temporalColCache, CONSOLIDATION_LESSON_EVIDENCE, MEMORY_FILE_TITLE_PREFIX, MEMORY_FILE_TITLE_LIKE, USAGE_COUNTER_ARMED_KEY;
+var MEMORY_SCHEMA_VERSION, TOOL_COST_EVENTS_RETENTION_DAYS, PENDING_SYNC_MAX_ITEMS, PENDING_SYNC_MAX_AGE_DAYS, MAX_DRAFT_TEXT_LEN, FUNNEL_EVENT_OUTBOX_CAP, _temporalColCache, CONSOLIDATION_LESSON_EVIDENCE, MEMORY_FILE_TITLE_PREFIX, MEMORY_FILE_TITLE_LIKE, USAGE_COUNTER_ARMED_KEY;
 var init_memory_db = __esm({
   "src/memory-db.ts"() {
     "use strict";
@@ -4092,6 +4127,8 @@ var init_memory_db = __esm({
     init_memory_embed_sweep();
     MEMORY_SCHEMA_VERSION = 2;
     TOOL_COST_EVENTS_RETENTION_DAYS = 90;
+    PENDING_SYNC_MAX_ITEMS = 500;
+    PENDING_SYNC_MAX_AGE_DAYS = 30;
     MAX_DRAFT_TEXT_LEN = 16384;
     FUNNEL_EVENT_OUTBOX_CAP = 2e4;
     _temporalColCache = /* @__PURE__ */ new WeakMap();
@@ -4219,6 +4256,13 @@ function assertContainedIn(rootDir, candidate, opts = {}) {
   }
   return abs;
 }
+function isSameRealPath(a, b) {
+  try {
+    return realpathSync(a) === realpathSync(b);
+  } catch {
+    return false;
+  }
+}
 function isContainedIn(rootDir, candidate, opts = {}) {
   if (candidate.includes("\0")) return false;
   const root = resolve6(rootDir);
@@ -13984,7 +14028,7 @@ init_config();
 init_corrections_md();
 init_db_driver();
 import { readFileSync as readFileSync19, existsSync as existsSync24 } from "fs";
-import { resolve as resolve9 } from "path";
+import { dirname as dirname13, join as join18, resolve as resolve9 } from "path";
 import { parse as parseYaml4 } from "yaml";
 
 // src/capability-advisor.ts
@@ -14276,18 +14320,69 @@ function checkWindows(pid) {
 init_hook_failure_signal();
 
 // src/hooks/lib/is-direct-invocation.ts
-import { pathToFileURL } from "url";
+init_safe_write();
+import { fileURLToPath as fileURLToPath2, pathToFileURL } from "url";
 function isDirectInvocation(moduleUrl) {
   const entry = process.argv[1];
   if (!entry) return false;
   try {
-    return moduleUrl === pathToFileURL(entry).href;
+    if (moduleUrl === pathToFileURL(entry).href) return true;
   } catch {
     return false;
   }
+  try {
+    return isSameRealPath(fileURLToPath2(moduleUrl), entry);
+  } catch {
+    return false;
+  }
+}
+
+// src/cloud-sync.ts
+init_config();
+init_memory_db();
+init_rule_delivery();
+
+// src/observation-extractor.ts
+init_memory_db();
+init_config();
+
+// src/cloud-sync.ts
+var CLOUD_SYNC_REFUSAL_KEY = "cloud_sync_refused";
+var CLOUD_SYNC_RECHECK_MS = 24 * 60 * 60 * 1e3;
+function readCloudSyncRefusal(db) {
+  try {
+    const raw = getMemoryMeta(db, CLOUD_SYNC_REFUSAL_KEY);
+    if (!raw) return null;
+    const v = JSON.parse(raw);
+    return v && typeof v.status === "number" ? v : null;
+  } catch {
+    return null;
+  }
+}
+function cloudSyncRefusalBanner(db) {
+  const r = readCloudSyncRefusal(db);
+  if (!r) return null;
+  return `=== MASSU CLOUD SYNC PAUSED ===
+The massu cloud refused uploads from this project (HTTP ${r.status}: ${r.reason || "no reason given"}) on ${r.at}. Nothing is being uploaded or queued; local memory is unaffected. It re-checks once a day and resumes on its own when the account allows it.
+=== END ===
+
+`;
 }
 
 // src/hooks/session-start.ts
+import { spawn } from "child_process";
+import { fileURLToPath as fileURLToPath3 } from "url";
+function startRecallWarmUp() {
+  if (process.env.MASSU_RECALL_WARMUP === "0") return false;
+  try {
+    const recall = join18(dirname13(fileURLToPath3(import.meta.url)), "memory-recall.js");
+    if (!existsSync24(recall)) return false;
+    spawn(process.execPath, [recall, "--warm-cache"], { detached: true, stdio: "ignore" }).unref();
+    return true;
+  } catch {
+    return false;
+  }
+}
 async function main() {
   try {
     const input = await readStdin();
@@ -14347,6 +14442,12 @@ Session memory, code intelligence, and governance are now active.
         const watcherBanner = buildWatcherBanner();
         if (watcherBanner) process.stdout.write(watcherBanner);
       }
+      try {
+        const syncBanner = cloudSyncRefusalBanner(db);
+        if (syncBanner) process.stdout.write(syncBanner);
+      } catch {
+      }
+      startRecallWarmUp();
       try {
         const consolidationCfg = resolveConsolidationConfig();
         const advisorBlock = await runAdvisors([localModelAdvisor, crossRepoShareAdvisor], {
@@ -14499,11 +14600,11 @@ Index has ${stats.doc_count} documents, last indexed ${ageHours}h ago. Consider
   }
   sections.sort((a, b) => b.importance - a.importance);
   let usedTokens = 0;
-  const headerTokens = estimateTokens("=== Massu Memory: Previous Session Context ===\n\n=== END Massu Memory ===\n");
+  const headerTokens = estimateTokens2("=== Massu Memory: Previous Session Context ===\n\n=== END Massu Memory ===\n");
   usedTokens += headerTokens;
   const includedSections = [];
   for (const section of sections) {
-    const sectionTokens = estimateTokens(section.text);
+    const sectionTokens = estimateTokens2(section.text);
     if (usedTokens + sectionTokens <= tokenBudget) {
       includedSections.push(section.text);
       usedTokens += sectionTokens;
@@ -14516,7 +14617,7 @@ ${includedSections.join("\n")}
 === END Massu Memory ===
 `;
 }
-function estimateTokens(text) {
+function estimateTokens2(text) {
   return Math.ceil(text.length / 4);
 }
 async function getGitBranch() {
@@ -14649,6 +14750,9 @@ function formatAge(ms) {
 if (isDirectInvocation(import.meta.url)) {
   main();
 }
+export {
+  startRecallWarmUp
+};
 /*! Bundled license information:
 
 is-extglob/index.js:

package/dist/hooks/user-prompt.js

@@ -2182,6 +2182,8 @@ __export(memory_db_exports, {
   MEMORY_FILE_TITLE_LIKE: () => MEMORY_FILE_TITLE_LIKE,
   MEMORY_FILE_TITLE_PREFIX: () => MEMORY_FILE_TITLE_PREFIX,
   MEMORY_SCHEMA_VERSION: () => MEMORY_SCHEMA_VERSION,
+  PENDING_SYNC_MAX_AGE_DAYS: () => PENDING_SYNC_MAX_AGE_DAYS,
+  PENDING_SYNC_MAX_ITEMS: () => PENDING_SYNC_MAX_ITEMS,
   TOOL_COST_EVENTS_RETENTION_DAYS: () => TOOL_COST_EVENTS_RETENTION_DAYS,
   USAGE_COUNTER_ARMED_KEY: () => USAGE_COUNTER_ARMED_KEY,
   addConversationTurn: () => addConversationTurn,
@@ -2190,6 +2192,7 @@ __export(memory_db_exports, {
   addSummary: () => addSummary,
   addToolCallDetail: () => addToolCallDetail,
   addUserPrompt: () => addUserPrompt,
+  allPendingSync: () => allPendingSync,
   appendIncidentToFailureClass: () => appendIncidentToFailureClass,
   armUsageCounter: () => armUsageCounter,
   assignImportance: () => assignImportance,
@@ -2197,6 +2200,7 @@ __export(memory_db_exports, {
   createSession: () => createSession,
   deduplicateFailedAttempt: () => deduplicateFailedAttempt,
   dequeuePendingSync: () => dequeuePendingSync,
+  discardPendingSync: () => discardPendingSync,
   embedMissingObservations: () => embedMissingObservations,
   endSession: () => endSession,
   enqueueRulePromotionEvent: () => enqueueRulePromotionEvent,
@@ -3179,6 +3183,35 @@ function initMemorySchema(db) {
 }
 function enqueueSyncPayload(db, payload) {
   db.prepare("INSERT INTO pending_sync (payload) VALUES (?)").run(payload);
+  const overflow = db.prepare(
+    `SELECT id, retry_count, last_error, payload FROM pending_sync
+      WHERE created_at < datetime('now', ?)
+         OR id NOT IN (SELECT id FROM pending_sync ORDER BY created_at DESC, id DESC LIMIT ?)
+      LIMIT 10000`
+  ).all(`-${PENDING_SYNC_MAX_AGE_DAYS} days`, PENDING_SYNC_MAX_ITEMS);
+  if (overflow.length > 0) {
+    discardPendingSync(db, overflow, `over the queue limit (${PENDING_SYNC_MAX_ITEMS} items / ${PENDING_SYNC_MAX_AGE_DAYS} days)`);
+  }
+}
+function discardPendingSync(db, rows, why) {
+  if (rows.length === 0) return 0;
+  const rescued = rescueLearningFromStalePayloads(db, rows);
+  for (let i = 0; i < rows.length; i += 500) {
+    const ids = rows.slice(i, i + 500).map((r) => r.id);
+    db.prepare(`DELETE FROM pending_sync WHERE id IN (${ids.map(() => "?").join(",")})`).run(...ids);
+  }
+  if (rescued > 0) {
+    process.stderr.write(
+      `[massu] RESCUED ${rescued} learned rule(s) from ${rows.length} discarded payload(s) \u2014 they were re-queued for delivery, NOT discarded.
+`
+    );
+  }
+  process.stderr.write(`[massu] cloud sync: discarded ${rows.length} queued upload(s): ${why}.
+`);
+  return rows.length;
+}
+function allPendingSync(db) {
+  return db.prepare("SELECT id, retry_count, last_error, payload FROM pending_sync").all();
 }
 function getMemoryMeta(db, key) {
   const row = db.prepare("SELECT value FROM memory_meta WHERE key = ?").get(key);
@@ -3381,7 +3414,9 @@ function dequeuePendingSync(db, limit = 10) {
     }
   }
   return db.prepare(
-    "SELECT id, payload, retry_count FROM pending_sync ORDER BY created_at ASC LIMIT ?"
+    // Least-retried first: oldest-first retried the same 10 items until they were discarded
+    // while every newer item waited at retry 0 (2026-11-09: 43,492 never attempted).
+    "SELECT id, payload, retry_count FROM pending_sync ORDER BY retry_count ASC, created_at ASC LIMIT ?"
   ).all(limit);
 }
 function removePendingSync(db, id) {
@@ -4054,7 +4089,7 @@ function scoreFailureClasses(db, matchText, filePath, promptContext, weights) {
   }
   return bestMatch;
 }
-var MEMORY_SCHEMA_VERSION, TOOL_COST_EVENTS_RETENTION_DAYS, MAX_DRAFT_TEXT_LEN, FUNNEL_EVENT_OUTBOX_CAP, _temporalColCache, CONSOLIDATION_LESSON_EVIDENCE, MEMORY_FILE_TITLE_PREFIX, MEMORY_FILE_TITLE_LIKE, USAGE_COUNTER_ARMED_KEY;
+var MEMORY_SCHEMA_VERSION, TOOL_COST_EVENTS_RETENTION_DAYS, PENDING_SYNC_MAX_ITEMS, PENDING_SYNC_MAX_AGE_DAYS, MAX_DRAFT_TEXT_LEN, FUNNEL_EVENT_OUTBOX_CAP, _temporalColCache, CONSOLIDATION_LESSON_EVIDENCE, MEMORY_FILE_TITLE_PREFIX, MEMORY_FILE_TITLE_LIKE, USAGE_COUNTER_ARMED_KEY;
 var init_memory_db = __esm({
   "src/memory-db.ts"() {
     "use strict";
@@ -4069,6 +4104,8 @@ var init_memory_db = __esm({
     init_memory_embed_sweep();
     MEMORY_SCHEMA_VERSION = 2;
     TOOL_COST_EVENTS_RETENTION_DAYS = 90;
+    PENDING_SYNC_MAX_ITEMS = 500;
+    PENDING_SYNC_MAX_AGE_DAYS = 30;
     MAX_DRAFT_TEXT_LEN = 16384;
     FUNNEL_EVENT_OUTBOX_CAP = 2e4;
     _temporalColCache = /* @__PURE__ */ new WeakMap();
@@ -4083,7 +4120,7 @@ var init_memory_db = __esm({
 init_memory_db();
 init_db_driver();
 init_config();
-import { existsSync as existsSync10, mkdirSync as mkdirSync8, writeFileSync as writeFileSync4, readFileSync as readFileSync7, readdirSync as readdirSync3, openSync as openSync2, fstatSync, readSync, closeSync as closeSync2 } from "fs";
+import { existsSync as existsSync11, mkdirSync as mkdirSync8, writeFileSync as writeFileSync5, readFileSync as readFileSync7, readdirSync as readdirSync3, openSync as openSync3, fstatSync, readSync, closeSync as closeSync3 } from "fs";
 import { join as join7 } from "path";
 
 // src/rule-candidate-detector.ts
@@ -4395,13 +4432,41 @@ function entitledForTeamSharedPromotion(tier) {
 init_rule_candidate_store();
 init_hook_failure_signal();
 
+// src/lib/safe-write.ts
+import {
+  writeFileSync as writeFileSync4,
+  renameSync,
+  openSync as openSync2,
+  fsyncSync as fsyncSync2,
+  closeSync as closeSync2,
+  existsSync as existsSync10,
+  realpathSync,
+  unlinkSync as unlinkSync2,
+  accessSync as accessSync2,
+  statSync as statSync2,
+  chmodSync as chmodSync3,
+  constants
+} from "fs";
+function isSameRealPath(a, b) {
+  try {
+    return realpathSync(a) === realpathSync(b);
+  } catch {
+    return false;
+  }
+}
+
 // src/hooks/lib/is-direct-invocation.ts
-import { pathToFileURL } from "url";
+import { fileURLToPath as fileURLToPath2, pathToFileURL } from "url";
 function isDirectInvocation(moduleUrl) {
   const entry = process.argv[1];
   if (!entry) return false;
   try {
-    return moduleUrl === pathToFileURL(entry).href;
+    if (moduleUrl === pathToFileURL(entry).href) return true;
+  } catch {
+    return false;
+  }
+  try {
+    return isSameRealPath(fileURLToPath2(moduleUrl), entry);
   } catch {
     return false;
   }
@@ -4439,7 +4504,7 @@ async function main() {
         const fileRefs = extractFileReferences(prompt);
         if (fileRefs.length > 0) {
           const knowledgeDbPath = getResolvedPaths().knowledgeDbPath;
-          if (knowledgeDbPath && existsSync10(knowledgeDbPath)) {
+          if (knowledgeDbPath && existsSync11(knowledgeDbPath)) {
             const kdb = openDatabase2(knowledgeDbPath, { readonly: true, selfHeal: false });
             try {
               const placeholders = fileRefs.map(() => "?").join(",");
@@ -4499,7 +4564,7 @@ async function main() {
             mkdirSync8(candidateDir, { recursive: true });
             const promptHash = hashPrompt(prompt);
             const candidatePath = join7(candidateDir, `${promptHash}.json`);
-            if (!existsSync10(candidatePath)) {
+            if (!existsSync11(candidatePath)) {
               upsertCandidate(db, hookInput.cwd, {
                 prompt,
                 prompt_hash: promptHash,
@@ -4524,7 +4589,7 @@ async function main() {
             }
           } else {
             const nudgePath = join7(candidateDir, ".last-tier-nudge");
-            if (!existsSync10(nudgePath)) {
+            if (!existsSync11(nudgePath)) {
               mkdirSync8(candidateDir, { recursive: true });
               process.stderr.write(
                 `
@@ -4532,18 +4597,18 @@ async function main() {
 
 `
               );
-              writeFileSync4(nudgePath, (/* @__PURE__ */ new Date()).toISOString());
+              writeFileSync5(nudgePath, (/* @__PURE__ */ new Date()).toISOString());
             }
           }
         }
-        if (existsSync10(candidateDir)) {
+        if (existsSync11(candidateDir)) {
           const candidates = readdirSync3(candidateDir).filter(
             (f) => f.endsWith(".json") && !f.startsWith(".")
           );
           const candidateCount = candidates.length;
           const surfacedPath = join7(candidateDir, ".last-surfaced");
           let lastSurfaced = 0;
-          if (existsSync10(surfacedPath)) {
+          if (existsSync11(surfacedPath)) {
             const raw = readFileSync7(surfacedPath, "utf-8").trim();
             const parsed = parseInt(raw, 10);
             if (!Number.isNaN(parsed)) lastSurfaced = parsed;
@@ -4555,17 +4620,17 @@ async function main() {
 
 `
             );
-            writeFileSync4(surfacedPath, String(candidateCount));
+            writeFileSync5(surfacedPath, String(candidateCount));
           }
         }
       } catch (candidateErr) {
         try {
           const dir = join7(hookInput.cwd, ".massu", "rule-candidates");
-          if (!existsSync10(dir)) mkdirSync8(dir, { recursive: true });
+          if (!existsSync11(dir)) mkdirSync8(dir, { recursive: true });
           const logPath = join7(dir, ".detector-failures.jsonl");
-          const pre = existsSync10(logPath) ? readFileSync7(logPath, "utf-8") : "";
+          const pre = existsSync11(logPath) ? readFileSync7(logPath, "utf-8") : "";
           const sep = pre && !pre.endsWith("\n") ? "\n" : "";
-          writeFileSync4(logPath, pre + sep + JSON.stringify({
+          writeFileSync5(logPath, pre + sep + JSON.stringify({
             session_id,
             // Security review (plan-2026-05-27): log the prompt HASH, never a
             // raw prompt excerpt — the failure log must not persist PII/secrets.
@@ -4586,13 +4651,13 @@ async function main() {
 }
 function detectPriorAssistantTurn(transcriptPath) {
   try {
-    if (!transcriptPath || !existsSync10(transcriptPath)) {
+    if (!transcriptPath || !existsSync11(transcriptPath)) {
       return { hadEditOrWrite: false, files: [] };
     }
     if (!transcriptPath.includes("/.claude/projects/")) {
       return { hadEditOrWrite: false, files: [] };
     }
-    const fd = openSync2(transcriptPath, "r");
+    const fd = openSync3(transcriptPath, "r");
     let buf;
     try {
       const stats = fstatSync(fd);
@@ -4601,7 +4666,7 @@ function detectPriorAssistantTurn(transcriptPath) {
       buf = Buffer.alloc(readLen);
       readSync(fd, buf, 0, readLen, offset);
     } finally {
-      closeSync2(fd);
+      closeSync3(fd);
     }
     const lines = buf.toString("utf-8").split("\n").filter(Boolean);
     const files = [];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@massu/core",
-  "version": "2.5.5",
+  "version": "2.5.7",
   "type": "module",
   "description": "AI Engineering Governance MCP Server - Session memory, knowledge system, feature registry, code intelligence, rule enforcement, tiered tooling (12 free / 73 total), 56 workflow commands, 11 agents, 20+ patterns",
   "main": "./dist/cli.js",