@massu/core 2.5.6 → 2.5.7

package/CHANGELOG.md

@@ -10,6 +10,36 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 > redistributed under the **Apache License 2.0**. Full license + NOTICE:
 > `packages/core/assets/embedder/MODEL-LICENSE`.
 
+## [2.5.7] - 2026-11-10
+
+### Fixed
+
+- **Cloud sync no longer queues uploads the server refuses.** When the massu cloud refused an upload
+  for a reason that retrying cannot change (for example `403 Sync not available for current plan
+  status`), massu queued it and retried forever. One project's memory database grew to 8.5 GB this way,
+  7.6 GB of it refused uploads, and every reply re-sent a ~179 KB upload that was always refused. Now:
+  - a refusal that cannot succeed is never queued or retried;
+  - when the account itself is refused (401 or 403), massu records the server's reason, pauses sync,
+    clears the queue (learned rules are kept), and shows `MASSU CLOUD SYNC PAUSED` with that reason at
+    session start. It checks again once a day and resumes on its own when the account allows it;
+  - temporary failures (network, 5xx, 429) still queue, but the queue now holds at most 500 items and
+    nothing older than 30 days, and every item gets its turn.
+- **`massu install-hooks` now upgrades a project completely.** It also moves the massu MCP server in
+  `.mcp.json` to the same version as the hooks (it never did before, so every upgrade left the server
+  behind), and it replaces hook entries written by much older installers, which used to stay beside the
+  current ones and fail on every tool call. Your own hooks and any hand-written massu entry are left alone.
+- **A hook launched through a symlinked path now runs.** Started through a symlink, a hook decided it was
+  not the program being run and exited without doing anything; for the safety gate that meant allowing
+  the call. The commands `massu init` writes were not affected.
+
+### Added
+
+- **The first prompt of a session is faster.** Session start now loads the memory-search model in the
+  background, so the first prompt no longer pays for it (measured: about 1.5 s for the first search,
+  0.6 s after). Turn it off with `MASSU_RECALL_WARMUP=0`.
+- **`scripts/massu-db-size-audit.sh`** (in the repository) reports where a massu database's space goes:
+  live data, space freed but not yet returned to the disk, the largest tables, and the sync queue.
+
 ## [2.5.6] - 2026-11-09
 
 ### Security

package/dist/cli.js

@@ -2490,6 +2490,8 @@ __export(memory_db_exports, {
   MEMORY_FILE_TITLE_LIKE: () => MEMORY_FILE_TITLE_LIKE,
   MEMORY_FILE_TITLE_PREFIX: () => MEMORY_FILE_TITLE_PREFIX,
   MEMORY_SCHEMA_VERSION: () => MEMORY_SCHEMA_VERSION,
+  PENDING_SYNC_MAX_AGE_DAYS: () => PENDING_SYNC_MAX_AGE_DAYS,
+  PENDING_SYNC_MAX_ITEMS: () => PENDING_SYNC_MAX_ITEMS,
   TOOL_COST_EVENTS_RETENTION_DAYS: () => TOOL_COST_EVENTS_RETENTION_DAYS,
   USAGE_COUNTER_ARMED_KEY: () => USAGE_COUNTER_ARMED_KEY,
   addConversationTurn: () => addConversationTurn,
@@ -2498,6 +2500,7 @@ __export(memory_db_exports, {
   addSummary: () => addSummary,
   addToolCallDetail: () => addToolCallDetail,
   addUserPrompt: () => addUserPrompt,
+  allPendingSync: () => allPendingSync,
   appendIncidentToFailureClass: () => appendIncidentToFailureClass,
   armUsageCounter: () => armUsageCounter,
   assignImportance: () => assignImportance,
@@ -2505,6 +2508,7 @@ __export(memory_db_exports, {
   createSession: () => createSession,
   deduplicateFailedAttempt: () => deduplicateFailedAttempt,
   dequeuePendingSync: () => dequeuePendingSync,
+  discardPendingSync: () => discardPendingSync,
   embedMissingObservations: () => embedMissingObservations,
   endSession: () => endSession,
   enqueueRulePromotionEvent: () => enqueueRulePromotionEvent,
@@ -3487,6 +3491,35 @@ function initMemorySchema(db) {
 }
 function enqueueSyncPayload(db, payload) {
   db.prepare("INSERT INTO pending_sync (payload) VALUES (?)").run(payload);
+  const overflow = db.prepare(
+    `SELECT id, retry_count, last_error, payload FROM pending_sync
+      WHERE created_at < datetime('now', ?)
+         OR id NOT IN (SELECT id FROM pending_sync ORDER BY created_at DESC, id DESC LIMIT ?)
+      LIMIT 10000`
+  ).all(`-${PENDING_SYNC_MAX_AGE_DAYS} days`, PENDING_SYNC_MAX_ITEMS);
+  if (overflow.length > 0) {
+    discardPendingSync(db, overflow, `over the queue limit (${PENDING_SYNC_MAX_ITEMS} items / ${PENDING_SYNC_MAX_AGE_DAYS} days)`);
+  }
+}
+function discardPendingSync(db, rows, why) {
+  if (rows.length === 0) return 0;
+  const rescued = rescueLearningFromStalePayloads(db, rows);
+  for (let i = 0; i < rows.length; i += 500) {
+    const ids = rows.slice(i, i + 500).map((r3) => r3.id);
+    db.prepare(`DELETE FROM pending_sync WHERE id IN (${ids.map(() => "?").join(",")})`).run(...ids);
+  }
+  if (rescued > 0) {
+    process.stderr.write(
+      `[massu] RESCUED ${rescued} learned rule(s) from ${rows.length} discarded payload(s) \u2014 they were re-queued for delivery, NOT discarded.
+`
+    );
+  }
+  process.stderr.write(`[massu] cloud sync: discarded ${rows.length} queued upload(s): ${why}.
+`);
+  return rows.length;
+}
+function allPendingSync(db) {
+  return db.prepare("SELECT id, retry_count, last_error, payload FROM pending_sync").all();
 }
 function getMemoryMeta(db, key) {
   const row = db.prepare("SELECT value FROM memory_meta WHERE key = ?").get(key);
@@ -3689,7 +3722,9 @@ function dequeuePendingSync(db, limit = 10) {
     }
   }
   return db.prepare(
-    "SELECT id, payload, retry_count FROM pending_sync ORDER BY created_at ASC LIMIT ?"
+    // Least-retried first: oldest-first retried the same 10 items until they were discarded
+    // while every newer item waited at retry 0 (2026-11-09: 43,492 never attempted).
+    "SELECT id, payload, retry_count FROM pending_sync ORDER BY retry_count ASC, created_at ASC LIMIT ?"
   ).all(limit);
 }
 function removePendingSync(db, id) {
@@ -4362,7 +4397,7 @@ function scoreFailureClasses(db, matchText, filePath, promptContext, weights) {
   }
   return bestMatch;
 }
-var MEMORY_SCHEMA_VERSION, TOOL_COST_EVENTS_RETENTION_DAYS, MAX_DRAFT_TEXT_LEN, FUNNEL_EVENT_OUTBOX_CAP, _temporalColCache, CONSOLIDATION_LESSON_EVIDENCE, MEMORY_FILE_TITLE_PREFIX, MEMORY_FILE_TITLE_LIKE, USAGE_COUNTER_ARMED_KEY;
+var MEMORY_SCHEMA_VERSION, TOOL_COST_EVENTS_RETENTION_DAYS, PENDING_SYNC_MAX_ITEMS, PENDING_SYNC_MAX_AGE_DAYS, MAX_DRAFT_TEXT_LEN, FUNNEL_EVENT_OUTBOX_CAP, _temporalColCache, CONSOLIDATION_LESSON_EVIDENCE, MEMORY_FILE_TITLE_PREFIX, MEMORY_FILE_TITLE_LIKE, USAGE_COUNTER_ARMED_KEY;
 var init_memory_db = __esm({
   "src/memory-db.ts"() {
     "use strict";
@@ -4377,6 +4412,8 @@ var init_memory_db = __esm({
     init_memory_embed_sweep();
     MEMORY_SCHEMA_VERSION = 2;
     TOOL_COST_EVENTS_RETENTION_DAYS = 90;
+    PENDING_SYNC_MAX_ITEMS = 500;
+    PENDING_SYNC_MAX_AGE_DAYS = 30;
     MAX_DRAFT_TEXT_LEN = 16384;
     FUNNEL_EVENT_OUTBOX_CAP = 2e4;
     _temporalColCache = /* @__PURE__ */ new WeakMap();
@@ -16446,6 +16483,7 @@ ${import_picocolors2.default.gray(m2)}  ${s}
 // src/commands/init.ts
 var init_exports = {};
 __export(init_exports, {
+  SUPERSEDED_MASSU_HOOKS: () => SUPERSEDED_MASSU_HOOKS,
   applyVariantTemplate: () => applyVariantTemplate,
   buildConfigFromDetection: () => buildConfigFromDetection,
   buildHooksConfig: () => buildHooksConfig,
@@ -16468,6 +16506,7 @@ __export(init_exports, {
   mergeHooksConfig: () => mergeHooksConfig,
   parseInitArgs: () => parseInitArgs,
   printInitHelp: () => printInitHelp,
+  refreshMcpServerPin: () => refreshMcpServerPin,
   registerMcpServer: () => registerMcpServer,
   renderConfigYaml: () => renderConfigYaml,
   resolveHooksDir: () => resolveHooksDir,
@@ -17052,6 +17091,32 @@ function getInstallerVersion() {
     "getInstallerVersion: could not resolve @massu/core package.json. This indicates a corrupt install. Re-install via `npx -y @massu/core init`."
   );
 }
+function refreshMcpServerPin(projectRoot) {
+  const mcpPath = resolve12(projectRoot, ".mcp.json");
+  if (!existsSync21(mcpPath)) return "absent";
+  let doc;
+  try {
+    doc = JSON.parse(readFileSync17(mcpPath, "utf-8"));
+  } catch {
+    return "custom";
+  }
+  const servers = doc.mcpServers ?? {};
+  const cur = servers.massu;
+  if (!cur) return "absent";
+  const args2 = Array.isArray(cur.args) ? cur.args.map(String) : [];
+  const SEMVER = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/;
+  const shimForm = typeof cur.command === "string" && /[/\\]massu-hook$/.test(cur.command) && args2.length === 1 && SEMVER.test(args2[0]);
+  const npxForm = cur.command === "npx" && args2.length === 2 && args2[0] === "-y" && /^@massu\/core@/.test(args2[1]);
+  if (!shimForm && !npxForm) return "custom";
+  const version = getInstallerVersion();
+  const shim = resolveMassuShim();
+  const next = shim !== null ? { type: "stdio", command: shim, args: [version] } : { type: "stdio", command: "npx", args: ["-y", `@massu/core@${version}`] };
+  if (JSON.stringify({ ...cur, ...next }) === JSON.stringify(cur)) return "current";
+  servers.massu = { ...cur, ...next };
+  doc.mcpServers = servers;
+  writeFileSync5(mcpPath, JSON.stringify(doc, null, 2) + "\n", "utf-8");
+  return "updated";
+}
 function registerMcpServer(projectRoot) {
   const mcpPath = resolve12(projectRoot, ".mcp.json");
   let existing = {};
@@ -17316,12 +17381,33 @@ function mergeHooksConfig(existing, additions) {
     }
     merged[event] = Array.from(byMatcher.values());
   }
+  const emitted = /* @__PURE__ */ new Set();
+  for (const groups of Object.values(additions ?? {})) {
+    for (const g2 of groups) {
+      for (const h2 of g2.hooks ?? []) {
+        const id = typeof h2?.command === "string" ? massuHookIdentity(h2.command) : null;
+        if (id) emitted.add(id);
+      }
+    }
+  }
+  for (const event of Object.keys(merged)) {
+    merged[event] = merged[event].map((g2) => ({
+      ...g2,
+      hooks: (g2.hooks ?? []).filter((h2) => {
+        const id = typeof h2?.command === "string" ? massuHookIdentity(h2.command) : null;
+        const by = id ? SUPERSEDED_MASSU_HOOKS[id] : void 0;
+        return !(by && emitted.has(by));
+      })
+    })).filter((g2) => (g2.hooks ?? []).length > 0);
+  }
   return merged;
 }
 function massuHookIdentity(command) {
   if (!/@massu\/core|[/\\]\.?massu[/\\]/.test(command)) return null;
   const m3 = /\bhook-runner\s+([A-Za-z0-9._-]+)/.exec(command);
-  return m3 ? m3[1] : null;
+  if (m3) return m3[1];
+  const legacy = /@massu[/\\]core[/\\]dist[/\\]hooks[/\\]([a-z0-9-]+)\.js/.exec(command);
+  return legacy ? legacy[1] : null;
 }
 function mergeHookEntries(existing, additions) {
   const seenCommands = /* @__PURE__ */ new Set();
@@ -17747,7 +17833,7 @@ async function promptStackConfirm() {
 function capitalize(str) {
   return str.charAt(0).toUpperCase() + str.slice(1);
 }
-var __filename2, __dirname2, FRAMEWORK_TO_TEMPLATE_ID, TEMPLATE_NAMES;
+var __filename2, __dirname2, FRAMEWORK_TO_TEMPLATE_ID, TEMPLATE_NAMES, SUPERSEDED_MASSU_HOOKS;
 var init_init = __esm({
   "src/commands/init.ts"() {
     "use strict";
@@ -17780,6 +17866,10 @@ var init_init = __esm({
       "swift-ios",
       "multi-runtime"
     ];
+    SUPERSEDED_MASSU_HOOKS = Object.freeze({
+      "security-gate": "pre-tool-use-gate",
+      "pre-delete-check": "pre-tool-use-gate"
+    });
   }
 });
 
@@ -19319,6 +19409,10 @@ async function runInstallHooks() {
   }
   const { count } = installHooks(projectRoot);
   console.log(`  Installed ${count} hooks in .claude/settings.local.json`);
+  const mcp = refreshMcpServerPin(projectRoot);
+  if (mcp === "updated") console.log(`  Updated the massu MCP server in .mcp.json to ${version} (commit this file)`);
+  else if (mcp === "current") console.log(`  .mcp.json already runs massu ${version}`);
+  else if (mcp === "custom") console.log("  .mcp.json has a hand-written massu entry \u2014 left unchanged; check its version");
   console.log("");
   console.log("Hooks will activate on your next Claude Code session.");
   console.log("");

package/dist/hooks/auto-learning-pipeline.js

@@ -2086,6 +2086,8 @@ __export(memory_db_exports, {
   MEMORY_FILE_TITLE_LIKE: () => MEMORY_FILE_TITLE_LIKE,
   MEMORY_FILE_TITLE_PREFIX: () => MEMORY_FILE_TITLE_PREFIX,
   MEMORY_SCHEMA_VERSION: () => MEMORY_SCHEMA_VERSION,
+  PENDING_SYNC_MAX_AGE_DAYS: () => PENDING_SYNC_MAX_AGE_DAYS,
+  PENDING_SYNC_MAX_ITEMS: () => PENDING_SYNC_MAX_ITEMS,
   TOOL_COST_EVENTS_RETENTION_DAYS: () => TOOL_COST_EVENTS_RETENTION_DAYS,
   USAGE_COUNTER_ARMED_KEY: () => USAGE_COUNTER_ARMED_KEY,
   addConversationTurn: () => addConversationTurn,
@@ -2094,6 +2096,7 @@ __export(memory_db_exports, {
   addSummary: () => addSummary,
   addToolCallDetail: () => addToolCallDetail,
   addUserPrompt: () => addUserPrompt,
+  allPendingSync: () => allPendingSync,
   appendIncidentToFailureClass: () => appendIncidentToFailureClass,
   armUsageCounter: () => armUsageCounter,
   assignImportance: () => assignImportance,
@@ -2101,6 +2104,7 @@ __export(memory_db_exports, {
   createSession: () => createSession,
   deduplicateFailedAttempt: () => deduplicateFailedAttempt,
   dequeuePendingSync: () => dequeuePendingSync,
+  discardPendingSync: () => discardPendingSync,
   embedMissingObservations: () => embedMissingObservations,
   endSession: () => endSession,
   enqueueRulePromotionEvent: () => enqueueRulePromotionEvent,
@@ -3083,6 +3087,35 @@ function initMemorySchema(db) {
 }
 function enqueueSyncPayload(db, payload) {
   db.prepare("INSERT INTO pending_sync (payload) VALUES (?)").run(payload);
+  const overflow = db.prepare(
+    `SELECT id, retry_count, last_error, payload FROM pending_sync
+      WHERE created_at < datetime('now', ?)
+         OR id NOT IN (SELECT id FROM pending_sync ORDER BY created_at DESC, id DESC LIMIT ?)
+      LIMIT 10000`
+  ).all(`-${PENDING_SYNC_MAX_AGE_DAYS} days`, PENDING_SYNC_MAX_ITEMS);
+  if (overflow.length > 0) {
+    discardPendingSync(db, overflow, `over the queue limit (${PENDING_SYNC_MAX_ITEMS} items / ${PENDING_SYNC_MAX_AGE_DAYS} days)`);
+  }
+}
+function discardPendingSync(db, rows, why) {
+  if (rows.length === 0) return 0;
+  const rescued = rescueLearningFromStalePayloads(db, rows);
+  for (let i = 0; i < rows.length; i += 500) {
+    const ids = rows.slice(i, i + 500).map((r) => r.id);
+    db.prepare(`DELETE FROM pending_sync WHERE id IN (${ids.map(() => "?").join(",")})`).run(...ids);
+  }
+  if (rescued > 0) {
+    process.stderr.write(
+      `[massu] RESCUED ${rescued} learned rule(s) from ${rows.length} discarded payload(s) \u2014 they were re-queued for delivery, NOT discarded.
+`
+    );
+  }
+  process.stderr.write(`[massu] cloud sync: discarded ${rows.length} queued upload(s): ${why}.
+`);
+  return rows.length;
+}
+function allPendingSync(db) {
+  return db.prepare("SELECT id, retry_count, last_error, payload FROM pending_sync").all();
 }
 function getMemoryMeta(db, key) {
   const row = db.prepare("SELECT value FROM memory_meta WHERE key = ?").get(key);
@@ -3285,7 +3318,9 @@ function dequeuePendingSync(db, limit = 10) {
     }
   }
   return db.prepare(
-    "SELECT id, payload, retry_count FROM pending_sync ORDER BY created_at ASC LIMIT ?"
+    // Least-retried first: oldest-first retried the same 10 items until they were discarded
+    // while every newer item waited at retry 0 (2026-11-09: 43,492 never attempted).
+    "SELECT id, payload, retry_count FROM pending_sync ORDER BY retry_count ASC, created_at ASC LIMIT ?"
   ).all(limit);
 }
 function removePendingSync(db, id) {
@@ -3958,7 +3993,7 @@ function scoreFailureClasses(db, matchText, filePath, promptContext, weights) {
   }
   return bestMatch;
 }
-var MEMORY_SCHEMA_VERSION, TOOL_COST_EVENTS_RETENTION_DAYS, MAX_DRAFT_TEXT_LEN, FUNNEL_EVENT_OUTBOX_CAP, _temporalColCache, CONSOLIDATION_LESSON_EVIDENCE, MEMORY_FILE_TITLE_PREFIX, MEMORY_FILE_TITLE_LIKE, USAGE_COUNTER_ARMED_KEY;
+var MEMORY_SCHEMA_VERSION, TOOL_COST_EVENTS_RETENTION_DAYS, PENDING_SYNC_MAX_ITEMS, PENDING_SYNC_MAX_AGE_DAYS, MAX_DRAFT_TEXT_LEN, FUNNEL_EVENT_OUTBOX_CAP, _temporalColCache, CONSOLIDATION_LESSON_EVIDENCE, MEMORY_FILE_TITLE_PREFIX, MEMORY_FILE_TITLE_LIKE, USAGE_COUNTER_ARMED_KEY;
 var init_memory_db = __esm({
   "src/memory-db.ts"() {
     "use strict";
@@ -3973,6 +4008,8 @@ var init_memory_db = __esm({
     init_memory_embed_sweep();
     MEMORY_SCHEMA_VERSION = 2;
     TOOL_COST_EVENTS_RETENTION_DAYS = 90;
+    PENDING_SYNC_MAX_ITEMS = 500;
+    PENDING_SYNC_MAX_AGE_DAYS = 30;
     MAX_DRAFT_TEXT_LEN = 16384;
     FUNNEL_EVENT_OUTBOX_CAP = 2e4;
     _temporalColCache = /* @__PURE__ */ new WeakMap();
@@ -4058,7 +4095,7 @@ var init_hook_failure_signal = __esm({
 init_config();
 import { execFileSync } from "child_process";
 import { createHash } from "crypto";
-import { existsSync as existsSync10, readFileSync as readFileSync7, unlinkSync as unlinkSync2, readdirSync as readdirSync2, statSync as statSync2, writeFileSync as writeFileSync3, mkdirSync as mkdirSync7 } from "fs";
+import { existsSync as existsSync11, readFileSync as readFileSync7, unlinkSync as unlinkSync3, readdirSync as readdirSync2, statSync as statSync3, writeFileSync as writeFileSync4, mkdirSync as mkdirSync7 } from "fs";
 import { tmpdir as tmpdir2 } from "os";
 import { join as join6, dirname as dirname8 } from "path";
 
@@ -4100,20 +4137,48 @@ function writeHookContext(hookEventName, message) {
 // src/hooks/auto-learning-pipeline.ts
 init_hook_failure_signal();
 
+// src/lib/safe-write.ts
+import {
+  writeFileSync as writeFileSync3,
+  renameSync,
+  openSync as openSync2,
+  fsyncSync as fsyncSync2,
+  closeSync as closeSync2,
+  existsSync as existsSync9,
+  realpathSync,
+  unlinkSync as unlinkSync2,
+  accessSync as accessSync2,
+  statSync as statSync2,
+  chmodSync as chmodSync3,
+  constants
+} from "fs";
+function isSameRealPath(a, b) {
+  try {
+    return realpathSync(a) === realpathSync(b);
+  } catch {
+    return false;
+  }
+}
+
 // src/hooks/lib/is-direct-invocation.ts
-import { pathToFileURL } from "url";
+import { fileURLToPath as fileURLToPath2, pathToFileURL } from "url";
 function isDirectInvocation(moduleUrl) {
   const entry = process.argv[1];
   if (!entry) return false;
   try {
-    return moduleUrl === pathToFileURL(entry).href;
+    if (moduleUrl === pathToFileURL(entry).href) return true;
+  } catch {
+    return false;
+  }
+  try {
+    return isSameRealPath(fileURLToPath2(moduleUrl), entry);
   } catch {
     return false;
   }
 }
 
 // src/hooks/lib/session-touched-files.ts
-import { readFileSync as readFileSync6, existsSync as existsSync9, realpathSync } from "fs";
+import { readFileSync as readFileSync6, existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import { relative, isAbsolute, resolve as resolve5 } from "path";
 var FILE_WRITING_TOOLS = Object.freeze({
   Edit: ["file_path"],
@@ -4123,7 +4188,7 @@ var FILE_WRITING_TOOLS = Object.freeze({
 });
 function canonical(p) {
   try {
-    return realpathSync(p);
+    return realpathSync2(p);
   } catch {
     return p;
   }
@@ -4171,7 +4236,7 @@ function transcriptTouchedFiles(root, transcriptPath) {
   return out;
 }
 function flagFileTouchedFiles(root, flagPath) {
-  if (!existsSync9(flagPath)) return null;
+  if (!existsSync10(flagPath)) return null;
   let raw;
   try {
     raw = readFileSync6(flagPath, "utf-8");
@@ -4592,7 +4657,7 @@ function readShownKeys(ackPath) {
 }
 function writeShownKeys(ackPath, keys) {
   mkdirSync7(dirname8(ackPath), { recursive: true });
-  writeFileSync3(ackPath, JSON.stringify({ shown: [...keys].sort() }), "utf-8");
+  writeFileSync4(ackPath, JSON.stringify({ shown: [...keys].sort() }), "utf-8");
 }
 function freshMatches(matchKeys, shown) {
   return [...new Set(matchKeys)].filter((k) => !shown.has(k));
@@ -4602,7 +4667,7 @@ function recentIncidentFiles(dir, nowMs = Date.now()) {
   try {
     return readdirSync2(dir).filter((f) => f.endsWith(".md")).filter((f) => {
       try {
-        return nowMs - statSync2(join6(dir, f)).mtimeMs <= RECENT_INCIDENT_WINDOW_MS;
+        return nowMs - statSync3(join6(dir, f)).mtimeMs <= RECENT_INCIDENT_WINDOW_MS;
       } catch {
         return false;
       }
@@ -4616,7 +4681,7 @@ function readPostImageFrom(root) {
   return (rel) => {
     try {
       const abs = join6(root, rel);
-      if (statSync2(abs).size > MAX_POST_IMAGE_BYTES) return null;
+      if (statSync3(abs).size > MAX_POST_IMAGE_BYTES) return null;
       return readFileSync7(abs, "utf-8");
     } catch {
       return null;
@@ -4729,7 +4794,7 @@ async function main() {
     const autoLearn = config.autoLearning;
     const flagPath = getSessionFlagPath(hookInput.session_id);
     let sessionFixes = [];
-    if (existsSync10(flagPath)) {
+    if (existsSync11(flagPath)) {
       try {
         sessionFixes = readFileSync7(flagPath, "utf-8").split("\n").filter(Boolean).map((line) => JSON.parse(line));
       } catch {
@@ -4821,16 +4886,16 @@ async function main() {
 }
 function cleanup(flagPath) {
   try {
-    if (existsSync10(flagPath)) unlinkSync2(flagPath);
+    if (existsSync11(flagPath)) unlinkSync3(flagPath);
     const dir = join6(tmpdir2(), "massu-auto-learning");
-    if (existsSync10(dir)) {
+    if (existsSync11(dir)) {
       const now = Date.now();
       for (const file of readdirSync2(dir)) {
         const fullPath = join6(dir, file);
         try {
-          const stat = statSync2(fullPath);
+          const stat = statSync3(fullPath);
           if (now - stat.mtimeMs > 864e5) {
-            unlinkSync2(fullPath);
+            unlinkSync3(fullPath);
           }
         } catch {
         }

package/dist/hooks/classify-failure.js

@@ -2157,6 +2157,8 @@ __export(memory_db_exports, {
   MEMORY_FILE_TITLE_LIKE: () => MEMORY_FILE_TITLE_LIKE,
   MEMORY_FILE_TITLE_PREFIX: () => MEMORY_FILE_TITLE_PREFIX,
   MEMORY_SCHEMA_VERSION: () => MEMORY_SCHEMA_VERSION,
+  PENDING_SYNC_MAX_AGE_DAYS: () => PENDING_SYNC_MAX_AGE_DAYS,
+  PENDING_SYNC_MAX_ITEMS: () => PENDING_SYNC_MAX_ITEMS,
   TOOL_COST_EVENTS_RETENTION_DAYS: () => TOOL_COST_EVENTS_RETENTION_DAYS,
   USAGE_COUNTER_ARMED_KEY: () => USAGE_COUNTER_ARMED_KEY,
   addConversationTurn: () => addConversationTurn,
@@ -2165,6 +2167,7 @@ __export(memory_db_exports, {
   addSummary: () => addSummary,
   addToolCallDetail: () => addToolCallDetail,
   addUserPrompt: () => addUserPrompt,
+  allPendingSync: () => allPendingSync,
   appendIncidentToFailureClass: () => appendIncidentToFailureClass,
   armUsageCounter: () => armUsageCounter,
   assignImportance: () => assignImportance,
@@ -2172,6 +2175,7 @@ __export(memory_db_exports, {
   createSession: () => createSession,
   deduplicateFailedAttempt: () => deduplicateFailedAttempt,
   dequeuePendingSync: () => dequeuePendingSync,
+  discardPendingSync: () => discardPendingSync,
   embedMissingObservations: () => embedMissingObservations,
   endSession: () => endSession,
   enqueueRulePromotionEvent: () => enqueueRulePromotionEvent,
@@ -3154,6 +3158,35 @@ function initMemorySchema(db) {
 }
 function enqueueSyncPayload(db, payload) {
   db.prepare("INSERT INTO pending_sync (payload) VALUES (?)").run(payload);
+  const overflow = db.prepare(
+    `SELECT id, retry_count, last_error, payload FROM pending_sync
+      WHERE created_at < datetime('now', ?)
+         OR id NOT IN (SELECT id FROM pending_sync ORDER BY created_at DESC, id DESC LIMIT ?)
+      LIMIT 10000`
+  ).all(`-${PENDING_SYNC_MAX_AGE_DAYS} days`, PENDING_SYNC_MAX_ITEMS);
+  if (overflow.length > 0) {
+    discardPendingSync(db, overflow, `over the queue limit (${PENDING_SYNC_MAX_ITEMS} items / ${PENDING_SYNC_MAX_AGE_DAYS} days)`);
+  }
+}
+function discardPendingSync(db, rows, why) {
+  if (rows.length === 0) return 0;
+  const rescued = rescueLearningFromStalePayloads(db, rows);
+  for (let i = 0; i < rows.length; i += 500) {
+    const ids = rows.slice(i, i + 500).map((r) => r.id);
+    db.prepare(`DELETE FROM pending_sync WHERE id IN (${ids.map(() => "?").join(",")})`).run(...ids);
+  }
+  if (rescued > 0) {
+    process.stderr.write(
+      `[massu] RESCUED ${rescued} learned rule(s) from ${rows.length} discarded payload(s) \u2014 they were re-queued for delivery, NOT discarded.
+`
+    );
+  }
+  process.stderr.write(`[massu] cloud sync: discarded ${rows.length} queued upload(s): ${why}.
+`);
+  return rows.length;
+}
+function allPendingSync(db) {
+  return db.prepare("SELECT id, retry_count, last_error, payload FROM pending_sync").all();
 }
 function getMemoryMeta(db, key) {
   const row = db.prepare("SELECT value FROM memory_meta WHERE key = ?").get(key);
@@ -3356,7 +3389,9 @@ function dequeuePendingSync(db, limit = 10) {
     }
   }
   return db.prepare(
-    "SELECT id, payload, retry_count FROM pending_sync ORDER BY created_at ASC LIMIT ?"
+    // Least-retried first: oldest-first retried the same 10 items until they were discarded
+    // while every newer item waited at retry 0 (2026-11-09: 43,492 never attempted).
+    "SELECT id, payload, retry_count FROM pending_sync ORDER BY retry_count ASC, created_at ASC LIMIT ?"
   ).all(limit);
 }
 function removePendingSync(db, id) {
@@ -4029,7 +4064,7 @@ function scoreFailureClasses(db, matchText, filePath, promptContext, weights) {
   }
   return bestMatch;
 }
-var MEMORY_SCHEMA_VERSION, TOOL_COST_EVENTS_RETENTION_DAYS, MAX_DRAFT_TEXT_LEN, FUNNEL_EVENT_OUTBOX_CAP, _temporalColCache, CONSOLIDATION_LESSON_EVIDENCE, MEMORY_FILE_TITLE_PREFIX, MEMORY_FILE_TITLE_LIKE, USAGE_COUNTER_ARMED_KEY;
+var MEMORY_SCHEMA_VERSION, TOOL_COST_EVENTS_RETENTION_DAYS, PENDING_SYNC_MAX_ITEMS, PENDING_SYNC_MAX_AGE_DAYS, MAX_DRAFT_TEXT_LEN, FUNNEL_EVENT_OUTBOX_CAP, _temporalColCache, CONSOLIDATION_LESSON_EVIDENCE, MEMORY_FILE_TITLE_PREFIX, MEMORY_FILE_TITLE_LIKE, USAGE_COUNTER_ARMED_KEY;
 var init_memory_db = __esm({
   "src/memory-db.ts"() {
     "use strict";
@@ -4044,6 +4079,8 @@ var init_memory_db = __esm({
     init_memory_embed_sweep();
     MEMORY_SCHEMA_VERSION = 2;
     TOOL_COST_EVENTS_RETENTION_DAYS = 90;
+    PENDING_SYNC_MAX_ITEMS = 500;
+    PENDING_SYNC_MAX_AGE_DAYS = 30;
     MAX_DRAFT_TEXT_LEN = 16384;
     FUNNEL_EVENT_OUTBOX_CAP = 2e4;
     _temporalColCache = /* @__PURE__ */ new WeakMap();
@@ -4057,7 +4094,7 @@ var init_memory_db = __esm({
 // src/hooks/classify-failure.ts
 init_config();
 init_memory_db();
-import { existsSync as existsSync9, readFileSync as readFileSync6, readdirSync as readdirSync2, unlinkSync as unlinkSync2, writeFileSync as writeFileSync3 } from "fs";
+import { existsSync as existsSync10, readFileSync as readFileSync6, readdirSync as readdirSync2, unlinkSync as unlinkSync3, writeFileSync as writeFileSync4 } from "fs";
 import { tmpdir as tmpdir2 } from "os";
 import { join as join6, basename as basename3 } from "path";
 
@@ -4109,13 +4146,41 @@ function writeHookContext(hookEventName, message) {
 // src/hooks/classify-failure.ts
 init_hook_failure_signal();
 
+// src/lib/safe-write.ts
+import {
+  writeFileSync as writeFileSync3,
+  renameSync,
+  openSync as openSync2,
+  fsyncSync as fsyncSync2,
+  closeSync as closeSync2,
+  existsSync as existsSync9,
+  realpathSync,
+  unlinkSync as unlinkSync2,
+  accessSync as accessSync2,
+  statSync as statSync2,
+  chmodSync as chmodSync3,
+  constants
+} from "fs";
+function isSameRealPath(a, b) {
+  try {
+    return realpathSync(a) === realpathSync(b);
+  } catch {
+    return false;
+  }
+}
+
 // src/hooks/lib/is-direct-invocation.ts
-import { pathToFileURL } from "url";
+import { fileURLToPath as fileURLToPath2, pathToFileURL } from "url";
 function isDirectInvocation(moduleUrl) {
   const entry = process.argv[1];
   if (!entry) return false;
   try {
-    return moduleUrl === pathToFileURL(entry).href;
+    if (moduleUrl === pathToFileURL(entry).href) return true;
+  } catch {
+    return false;
+  }
+  try {
+    return isSameRealPath(fileURLToPath2(moduleUrl), entry);
   } catch {
     return false;
   }
@@ -4160,7 +4225,7 @@ function cleanupFailureContextFiles() {
     const files = readdirSync2(dir).filter((f) => f.startsWith("massu-failure-context-"));
     for (const file of files) {
       try {
-        unlinkSync2(join6(dir, file));
+        unlinkSync3(join6(dir, file));
       } catch {
       }
     }
@@ -4226,12 +4291,12 @@ async function main() {
       return;
     }
     const dedupeMarker = getDedupeMarkerPath(hookInput.session_id, filePath);
-    if (existsSync9(dedupeMarker)) {
+    if (existsSync10(dedupeMarker)) {
       process.exit(0);
       return;
     }
     try {
-      writeFileSync3(dedupeMarker, "1");
+      writeFileSync4(dedupeMarker, "1");
     } catch {
     }
     const db = getMemoryDb();