[ScriptedAlchemy]

🤖 I have created a release beep boop

1.0.0-beta.89 (2026-10-19)

Features

• context-scout: daemon-owned intent suggestions over a decision engine (#4121) (ada5a81)
• daemon: exit as profile_lost when the profile is deleted (31b7898)
• global-db: add RegisteredGlobalDb::transact job transactions (ab54b69)
• global-db: add transact_or and JobExit for job bodies (642433a)
• storage: adopt a second clone through repository anchors (f76fcd1)
• storage: authorize every checkout of a project (2d58997)
• storage: close a store whose file is unlinked under it (d806cc4)
• storage: close unlinked stores and exit on ProfileLost (step 7b) (42a3c46)
• storage: repository identity across clones (step 8a) (8b58f7f)
• storage: run runtime-core writes as WriteTx jobs (9cb89f2)

Bug Fixes

• address audit correctness and resource bounds (#4231) (35e5ae4)
• api: derive cancellation policy from executable bindings (205c83a)
• api: derive cancellation policy from executable bindings (8d0df8b)
• bazel: copy writable fixtures and honor test filters (55860f5)
• bazel: normalize npm extraction traversal permissions (cc6c2c1)
• bazel: preserve isolated test resource defaults (a59066c)
• bazel: read arborium grammar manifest dir at build-script run time (9161511)
• bazel: retain benchmark output from remote tests (0e4de45)
• build: share dashboard source copies across consumers (1787f22)
• build: share dashboard source copies across consumers (e3df8d5)
• ci: expose packaged LSP smoke imports to Bazel (ee650a8)
• ci: integrate baseline repairs into hook replay (d318f40)
• ci: preserve current hook recovery during baseline integration (dd9a1b2)
• ci: preserve release dispatch and checkout invariants (57892b9)
• ci: resolve export paths in the runner steps (f5e226e)
• cli: read glibc counters through mallinfo on the 2.31 baseline (73e6ccf)
• code-index: end a seat wait once a pass settles after the re-park (647705e)
• code-index: end a seat wait once a pass settles after the re-park (95a56e5), Refs #4238
• code-index: end a worker whose shutdown permit was drained (c9def11)
• code-index: end a worker whose shutdown permit was drained (ea7f7ee)
• code-index: seal the last capture attempt past a newer epoch (2625038)
• code-index: seal the last capture attempt past a newer epoch (cd9bfc1), Refs #4238
• code-index: stamp a proof with the epoch it began under (c7c6e9e)
• code-index: stamp a proof with the epoch it began under (ddd51c1), Refs #4238
• daemon-service: bound provider output drain by attempt lifecycle (0b0e012)
• daemon-service: bound provider output drain by attempt lifecycle (7427f7f)
• daemon-service: drop the unused axum Response import (07ee41d)
• daemon: bound producer shutdown by the caller's phase deadline (f20e92b)
• daemon: bound producer shutdown by the caller's phase deadline (15e46cc), Refs #4175
• daemon: build the HTTP application router on the blocking pool (1e2e49e)
• daemon: capacity release waits out maintenance store clients (f4f9f91)
• daemon: capacity release waits out maintenance store clients (f78741e), Refs #4175
• daemon: exit non-zero on profile_lost so launchd restarts (e78ee42)
• daemon: join composition rollback before returning errors (ee7f675)
• daemon: list mounted graphs without leasing project servers (5cff32d)
• daemon: list mounted graphs without leasing project servers (ee96ca8), Refs #4175
• daemon: log the profile root on profile_lost (3b71446)
• dashboard: authenticate by request header, not a shared cookie (c43d6d6)
• dashboard: authenticate by request header, not a shared cookie (8bffd6b)
• dashboard: cancel scoped reads and share JSON transport (eddfcb6)
• dashboard: decode canonical settings settlements (4517217)
• dashboard: generate settings PATCH contracts (7ad21f2)
• dashboard: preserve concealed curator refusals (c7e636d)
• dashboard: run the Cortex relief layout in a worker (064973d)
• dashboard: run the Cortex relief layout in a worker (c4ea34d)
• dashboard: share JSON transport and cancel structure reads (0390978), Refs #4213
• dashboard: verify curation fixtures through Bazel (3f0ef62)
• db: deduplicate hook-route analytics with indexed lookup (87c29d0)
• drop unused mut and Debug-free parse assertion (b9475c6)
• evals: enforce exact-run evidence and failure reporting (b553ad0), Refs #4204
• evals: honor consent and platform executable paths (64e8b5e)
• evals: score only exact-run transcripts and preserve agent failures (82ec8fd)
• evals: separate verified outcomes from adoption scoring (7563b5e)
• evals: separate verified outcomes from adoption scoring (d82d527)
• graph: import typed read errors for dashboard responses (5388ad9)
• graph: preserve unavailable evidence refusals (cb0dc07)
• hooks: admit cold file edits before full project open (8c8b308)
• hooks: allow replay after branch label changes in same checkout (a5896ff)
• hooks: combine current intent recovery with baseline repairs (acb1575)
• hooks: fence replay across ledger and spool (bfb9aba)
• hooks: fence source currency until routed edits reach indexing (68306ef)
• hooks: guard known-session replay and test per-edit lifecycle (976c957)
• hooks: honor lifecycle gating during ledger replay (be6a6e2)
• hooks: keep reads available through broker recovery (cbcb484)
• hooks: preserve lifecycle debt and immutable replay order (1b6f500)
• hooks: preserve lifecycle evidence during replay (f8c42c6)
• hooks: preserve ordered replay lifecycle evidence (5a5cb74)
• hooks: preserve peer baseline integration (26e7e43)
• hooks: preserve peer broker recovery regression (c8ce4d8)
• hooks: reconcile durable routes and observe queued edits (d33a128)
• hooks: reconcile intent duplicates after host claims (206248d)
• hooks: recover committed intent before claim mounting (e9e7aa1)
• hooks: recover intent delivery after completed replay (4b0e015)
• hooks: recover intent delivery while feedback is pending (b721f91)
• hooks: require event-specific spool evidence before ledger replay (98609ed)
• hooks: retain intent boundary work through replay (b88ffd4)
• hooks: retain read availability when admission spool fails (97d4a71)
• hooks: settle cooperatively superseded producer work (4e6d11a)
• host-admission: one wake per replay kick; signal-driven daemon tests (2254620)
• identity: preserve nested checkout scope authority (d7a8cd6)
• identity: retain enrolled monorepo package scope (651a822)
• identity: share indexed scope identities across surfaces (600b671)
• index: retain completed readings at readiness deadline (90b2326)
• index: retain stale owners when source admission is unreadable (1027ce0)
• integrate reviewed runtime and application repairs (1ea485b)
• lcm: budget context in o200k tokens instead of words (6c15336)
• lcm: enforce context budgets in o200k tokens, not words (334a226)
• lsp: distinguish diagnostic headers from message text (8eed2f3)
• lsp: preserve TypeScript diagnostic paths and parse failures (d64d4f8), Refs #4202
• lsp: preserve TypeScript diagnostics and reject false-clean checks (5f09e01)
• maintenance: restate the lost-store restart after the probe (f8f2afa)
• mcp: preserve live graph request cancellation (fb85df8)
• memory: drop mimalloc owner heaps that crash on delete (#4152) (d541668)
• memory: separate process and cgroup admission budgets (6914cc8)
• observability: bound shutdown drains by the caller's deadline (9a16394)
• observability: bound shutdown drains by the caller's deadline (685ece9), Refs #4175
• privacy: detect sparse token pairs in UUID paths (2010a84)
• privacy: detect uneven split tokens in UUID paths (667387e)
• privacy: infer split tokens without fragment cutoffs (557f933)
• privacy: isolate entropy runs in UUID paths (d4a2256)
• privacy: preserve ordinary sparse directory pairs (4323288)
• privacy: preserve UUID directory paths in entropy scans (18513ff)
• project-open: join blocking work an aborted open still owns (fe8569b)
• project-open: move blocking credential and hook work off workers (e14cb03)
• projection: keep the stored cwd when a session names another (cf66a51)
• projection: settle passes parked on terminal session collisions (d1539a1)
• remove the worldwide token counter (6fef056)
• runtime-core: drain held stores until the store-close deadline (952d101)
• runtime-core: drain held stores until the store-close deadline (145aa42), Refs #4175
• runtime-core: end the store-close drain before its deadline (b674d41), Refs #4175
• rusqlite: attribute native writer waits to their storage caller (9bf0c3d)
• sdk: close abandoned operation streams (0b7c2f6), Refs #4209
• sdk: close abandoned SSE responses when a watcher stops (0fa6ce8)
• sdk: spend reconnect budget on failed connects in both SDKs (8fa2da8)
• sdk: treat unavailable as a terminal stream event (7aaebfd)
• sdk: unavailable terminal event and reconnect budget for failed connects (5c0b372)
• sessions: attach history before waking refresh workers (cc061b4)
• sessions: preserve canonical message directory scopes (4c0e1fc)
• settings: label reconciliation as receipt state (a14674c)
• settings: separate saved commits from reconciliation (79a6779)
• source-edit: scope-aware rename collision hazards (628b04a)
• source-edit: scope-aware rename collision hazards (eaaf0c0)
• storage: adopt through anchors only with remote agreement (c4c58c5)
• storage: clear profile pins when a lost runtime is evicted (05a8f65)
• storage: close a lost file's readers before its key reopens (5f2a7b1)
• storage: close a lost file's readers before its key reopens (b1678f6)
• storage: close the lost writer and report FileLost to waiters (46722b3)
• storage: close the lost writer and report FileLost to waiters (9bb55f0), Refs #4280
• storage: discard queued commands when a pool task stops (7e6a97c)
• storage: drain without holding the state lock across the join (e1fc4bb)
• storage: keep store pool threads free of sync waits (0d505ca)
• storage: keep the scoped-reset refusal for non-SQLite stores (3211abd)
• storage: preserve clone adoption and registry lifecycle (81a1d23)
• storage: preserve clone adoption and registry lifecycle (fc9147a)
• storage: refuse or adopt every sync wait on a pool thread (b18a826)
• storage: retain native roots during registry reaping (4e7dd78)
• storage: retry writer queries across WAL recovery on the pool (6c6c556)
• storage: revalidate reap plans before deleting registry rows (aa9275f)
• storage: revalidate registry reap candidates before applying (7e7d200)
• storage: size free pages from the header, not a reader (5daa37d)
• storage: size the store pool to the host, at least six threads (84f8994)
• storage: withdraw only the roots a registration added (59b1b73)
• telemetry: stop re-walking stores too large for dbstat (073c00a)
• tests: hold the dashboard fixture shard its marker names (994e070)
• tests: hold the dashboard fixture shard its marker names (1e34ead)
• work: cover app-server cancellation through the production spawn path (c167057)
• workflow: skip fan-out children that settle before fail-fast (e60da70)
• work: let the coordinator deadline seal app-server timeouts (f147373)
• work: make managed placement roots exclusive across actors (84a4321)
• work: make placement root exclusive across actors (e84ff03)
• work: preserve storage failure causes, narrow version conflicts (4193608)
• work: preserve storage failure causes, narrow version conflicts (880c312)
• work: settle dispatch past a dropped caller, block off workers (b888a2f)

Performance Improvements

• configuration: avoid runtime rebuilds during claim checks (14bdcf6)
• sessions: pin Codex discovery pages outside the hub lock (f2057f2)
• sessions: pin Codex discovery pages outside the hub lock (f9bfc82), Refs #4176
• sessions: wait for git evidence reads off the native worker (4ea3c25)

---

This PR was generated with Release Please. See documentation.

[changeset-bot]

⚠️ No Changeset found

Latest commit: f13e1d2

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 2 new potential issues.

🐛 2 issues in files not directly in the diff

🐛 Release binary reports the previous version

A beta.89 Bazel build gives tracedecay beta.88 as CARGO_PKG_VERSION. The CLI reports beta.88 and compares upgrades against beta.88, while the release integrity check rejects the reverted lockfile.

---

🐛 Edited Claude transcripts retain obsolete observations

When an existing transcript's first line changes, resolve_claude_source abandons its stem cursor because the file identity changes. The new path source cannot rewrite the old observations, so obsolete and replacement records coexist.

[devin-ai-integration]

Devin Review found 1 new potential issue.

🐛 1 issue in files not directly in the diff

🐛 Release builds fail on stale lockfile

With the workspace at beta.89, Cargo.lock records beta.88 for three member crates. Locked dependency resolution and the release integrity gate reject the release.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 1 new potential issue.

🐛 1 issue in files not directly in the diff

🐛 Released binary reports the wrong version

A Bazel-built beta.89 release reports beta.88 because CARGO_PKG_VERSION comes from the target's version. The host bundle reads beta.89 from the workspace manifest, so installed components disagree about the product version.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 3 new potential issues.

🐛 3 issues in files not directly in the diff

🐛 Release binary reports the previous version

When Bazel builds this release, CARGO_PKG_VERSION is beta.88 instead of beta.89. The CLI uses it for its reported version and upgrade checks, so beta.89 installs appear outdated.

---

🐛 Startup deletion leaves profile unmonitored

If the profile disappears before ProfileIdentityWatch::pin, pinning fails and the daemon replaces profile_lost with a pending future. The daemon stays alive on its deleted profile instead of exiting.

---

⚠️ Active readers retain deleted store files

When a store disappears during a read, close_lost_file drops the reader pool without releasing its pinned file. An active reader lease retains PoolInner, so the deleted file occupies disk until the lease ends.

1 flag not posted on this PR by your GitHub settings — view it in Devin Review. (Configure)

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 1 new potential issue.

🐛 1 issue in files not directly in the diff

🐛 Beta release retains previous package versions

When releasing beta.89, Cargo.lock identifies three workspace packages as beta.88. The generated Bazel targets also embed beta.88, so release validation fails and a built binary reports the wrong version.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 2 new potential issues.

🐛 2 issues in files not directly in the diff

🐛 Release binaries retain the previous version

For the beta.89 release, CARGO_PKG_VERSION remains beta.88 in Bazel-built CLI, product, and project targets. The CLI reports beta.88 and treats the new release as an available upgrade.

---

⚠️ Bazel-run benchmarks lose their corpus

Under bazel run, repository_root() resolves ../.. from the workspace root instead of the crate root. Benchmark input loading fails; partitioned_codec uses the same relative-path assumption.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 1 new potential issue.

🐛 1 issue in files not directly in the diff

🐛 Released binary reports the previous version

For the beta.89 release, tracedecay reports beta.88 and treats beta.89 as an available upgrade. Bazel stamps the CLI and project targets beta.88, while the release manifests declare beta.89.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 1 new potential issue.

🐛 1 issue in files not directly in the diff

🐛 Released CLI retains the previous version

A beta.89 Bazel build gives tracedecay-cli beta.88 as its package version. Its self-updater then treats the installed release as outdated and offers beta.89 again.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 2 new potential issues.

🐛 2 issues in files not directly in the diff

🐛 Released CLI reports the previous version

A beta.89 Bazel build gives tracedecay the beta.88 package version. PRODUCT_BUILD_VERSION derives from that version, so the released CLI reports beta.88 and compares upgrades against it.

---

🐛 Release lockfile blocks locked builds

The beta.89 workspace manifest gives tracedecay, tracedecay-cli, and tracedecay-project beta.89, but their lock entries remain beta.88. Release integrity rejects the mismatch, blocking the release.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 1 new potential issue.

🐛 1 issue in files not directly in the diff

🐛 Interrupted events disappear after reconnect

If a stream drops before an event finishes, lastEventId can advance to its undelivered ID. The reconnect skips that event, so dashboard updates disappear.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 1 new potential issue.

🐛 1 issue in files not directly in the diff

🐛 Release binary identifies as beta.88

When Bazel builds beta.89, CARGO_PKG_VERSION remains beta.88 across the CLI and workspace-versioned libraries. The shipped binary reports beta.88, and run_upgrade treats beta.89 as an available update.

[devin-ai-integration]

Devin Review found 1 new potential issue.

🐛 1 issue in files not directly in the diff

🐛 Release binary advertises the wrong version

For a beta.89 Bazel build, tracedecay reports beta.88 because its target version remains beta.88. CARGO_PKG_VERSION also drives upgrade decisions, so installed beta.89 assets identify as beta.88.

[ScriptedAlchemy]

🤖 Created releases:

• v1.0.0-beta.89

🌻