fix(session-ingest): repair v2 session deletion query

[eshurakov]

Summary

• Fix v2 CLI session deletion failures by replacing malformed raw Drizzle ANY(...) interpolation in the pre-delete event-row lookup with inArray(), while preserving authenticated-user scoping.
• Keep recursive descendant discovery, child-first transactional deletion, cache eviction, ingest Durable Object cleanup, and session.deleted emission unchanged. No architectural changes are introduced.
• Add SQL-shape regression coverage for parent-and-child deletion plus the existing cleanup and event propagation behavior.

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Executive Summary

All previously flagged issues are resolved: api.ts now correctly builds a Map keyed by session_id and iterates orderedSessionIds for session.deleted event emission (child-first), and the test has been updated to properly validate that ordering against a deliberately out-of-order mock SELECT result.

Files Reviewed (2 files)

• services/session-ingest/src/routes/api.ts — ✅ fixed (event emission now uses orderedSessionIds via Map lookup)
• services/session-ingest/src/routes/api.test.ts — ✅ fixed (mock rows returned in non-ordered form; assertions verify child-first event order)

Fix these issues in Kilo Cloud

---

_{Reviewed by claude-4.6-sonnet-20260217 · 312,304 tokens}

_{Review guidance: REVIEW.md from base branch main}