chore(release): release 1.0.0-beta.89

[ScriptedAlchemy]

🤖 I have created a release beep boop

1.0.0-beta.89 (2026-10-18)

Features

• doctor: census the daemon's unlinked SQLite temp files (690a4df)
• doctor: census the daemon's unlinked SQLite temp files (b25d76e)
• global-db: add RegisteredGlobalDb::transact job transactions (ab54b69)
• maintenance: check mounted store paths still name their file (e130dbb)
• storage: run runtime-core writes as WriteTx jobs (9cb89f2)

Bug Fixes

• address audit correctness and resource bounds (#4231) (35e5ae4)
• analytics: count only host tool calls as MCP tool usage (6fefdf3)
• analytics: count only host tool calls as MCP tool usage (dc08532), Refs #4110
• automation: show bounded ledger counts and starved activity gates (f8149ae)
• bazel: read arborium grammar manifest dir at build-script run time (9161511)
• bazel: read arborium grammar manifest dir at build-script run time (788bee0)
• ci: allow long git paths on Windows runners (220b6ca)
• ci: allow long git paths on Windows runners (c36fae0)
• cli: stop installing mimalloc owner heaps (db5a6d9)
• code-index: end a worker whose shutdown permit was drained (c9def11)
• code-index: end a worker whose shutdown permit was drained (ea7f7ee)
• context-scout: seek native session ids instead of sorting bodies (84faa48)
• context-scout: seek native session ids instead of sorting bodies (44acc10)
• daemon-service: free a hook cycle's permit before its terminal (21429c5)
• daemon-service: free a hook cycle's permit before its terminal (51c99bb)
• daemon-service: free hook capacity before settling the cycle (2611abb), Refs #4135
• daemon: bound producer shutdown by the caller's phase deadline (f20e92b)
• daemon: bound producer shutdown by the caller's phase deadline (15e46cc), Refs #4175
• daemon: build the HTTP application router on the blocking pool (1e2e49e)
• daemon: build the HTTP application router on the blocking pool (2855b3d)
• daemon: capacity release waits out maintenance store clients (f4f9f91)
• daemon: capacity release waits out maintenance store clients (f78741e), Refs #4175
• daemon: list mounted graphs without leasing project servers (5cff32d)
• daemon: list mounted graphs without leasing project servers (ee96ca8), Refs #4175
• daemon: read the queued refusal when a daemon write fails (c2f1faf)
• daemon: read the queued refusal when a daemon write fails (a7d2afd), Refs #4145
• daemon: root-cause seven load-only daemon test failures (cd8c168)
• daemon: wait for restarted refresh worker idle, not a 2 s wall (3c411cf)
• graph-db: checkpoint the Grafeo WAL during commits (#4099) (97970c8)
• graph-db: checkpoint the Grafeo WAL from commits past a size bound (cb41933)
• hooks: deliver edits from unbound linked worktrees (4fbd0ff)
• hooks: deliver edits from unbound linked worktrees (361fd62)
• host-admission: answer replay requests when a pass starts (84e58aa), Refs #4149
• host-admission: one wake per replay kick; signal-driven daemon tests (2254620)
• maintenance: collect unregistered project dirs every tick (7195f29)
• maintenance: collect unregistered project dirs every tick (3856249)
• maintenance: require a restart for stores deleted under the daemon (eb320ad)
• maintenance: restart for stores deleted under the daemon (#4099) (12fba92)
• maintenance: stop the shared git dir keeping dead stores alive (c3a0d36)
• maintenance: sweep response handles, rotate hook analytics (d3a42fa)
• maintenance: sweep response handles, rotate hook analytics (#4099) (3a04205)
• memory: drop mimalloc owner heaps that crash on delete (#4152) (d541668)
• observability: bound shutdown drains by the caller's deadline (9a16394)
• observability: bound shutdown drains by the caller's deadline (685ece9), Refs #4175
• project-open: join blocking work an aborted open still owns (fe8569b)
• project-open: move blocking credential and hook work off workers (e14cb03)
• project-open: move blocking credential and hook work off workers (afa3196)
• projection: read output ownership from provenance, drop TEMP cache (af76b41)
• projection: read output ownership from provenance, drop TEMP cache (f149ff0)
• runtime-core: drain held stores until the store-close deadline (952d101)
• runtime-core: drain held stores until the store-close deadline (145aa42), Refs #4175
• runtime-core: end the store-close drain before its deadline (b674d41), Refs #4175
• runtime-core: let shutdown close wait for draining leases (e4ccb3b)
• runtime-core: let shutdown close wait for draining leases (17580ca)
• rusqlite-runtime: checkpoint WAL pressure with RESTART (4b9ad9d)
• rusqlite-runtime: retire ledger rows of exited daemon incarnations (840d722)
• rusqlite-runtime: retire ledger rows of exited daemon incarnations (7e4a5b0)
• rusqlite: attribute native writer waits to their storage caller (9bf0c3d)
• sessions: key Claude sources by projects-relative path (8565407)
• sessions: key Claude sources by projects-relative path (38a7954)
• sessions: rescan instead of serving a stale empty Codex pass (186fa75), Refs #4135
• storage: bound the hard WAL drain behind a stuck reader (76b351c)
• storage: bound the hard WAL drain behind a stuck reader (faa2a5a)
• storage: discard queued commands when a pool task stops (7e6a97c)
• storage: keep store pool threads free of sync waits (0d505ca)
• storage: keep the scoped-reset refusal for non-SQLite stores (3211abd)
• storage: measure every store and bound each family by purpose (c9ac8b0)
• storage: open convergence snapshots through the read connection (1f3ff39)
• storage: refuse or adopt every sync wait on a pool thread (b18a826)
• storage: retry writer queries across WAL recovery on the pool (6c6c556)
• storage: satisfy clippy in the bounded drain (dbd40fe)
• storage: size free pages from the header, not a reader (5daa37d)
• storage: size free pages from the header, not a reader (8a0ee49)
• storage: size the store pool to the host, at least six threads (84f8994)
• storage: sync memory stores on every commit (a253ab7)
• telemetry: stop re-walking stores too large for dbstat (073c00a)
• telemetry: stop re-walking stores too large for dbstat (99c1a7d)
• workflow: skip fan-out children that settle before fail-fast (e60da70)
• work: settle dispatch past a dropped caller, block off workers (b888a2f)

Performance Improvements

• sessions: pin Codex discovery pages outside the hub lock (f2057f2)
• sessions: pin Codex discovery pages outside the hub lock (f9bfc82), Refs #4176
• sessions: wait for git evidence reads off the native worker (4ea3c25)
• sessions: wait for git evidence reads off the native worker (c7b5505)

---

This PR was generated with Release Please. See documentation.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 149aa93

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 2 new potential issues.

🐛 2 issues in files not directly in the diff

🐛 Release binary reports the previous version

A beta.89 Bazel build gives tracedecay beta.88 as CARGO_PKG_VERSION. The CLI reports beta.88 and compares upgrades against beta.88, while the release integrity check rejects the reverted lockfile.

---

🐛 Edited Claude transcripts retain obsolete observations

When an existing transcript's first line changes, resolve_claude_source abandons its stem cursor because the file identity changes. The new path source cannot rewrite the old observations, so obsolete and replacement records coexist.

[devin-ai-integration]

Devin Review found 1 new potential issue.

🐛 1 issue in files not directly in the diff

🐛 Release builds fail on stale lockfile

With the workspace at beta.89, Cargo.lock records beta.88 for three member crates. Locked dependency resolution and the release integrity gate reject the release.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 1 new potential issue.

🐛 1 issue in files not directly in the diff

🐛 Release binary reports the old version

Building the beta.89 release with Bazel sets CARGO_PKG_VERSION to beta.88. The CLI reports beta.88 and makes upgrade decisions using that version; the release integrity check also rejects the stale lockfile.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 1 new potential issue.

🐛 1 issue in files not directly in the diff

🐛 Release binary reports the wrong beta

For the beta.89 release, tracedecay reports beta.88 because its Bazel package version remains beta.88. The updater then offers beta.89 again to users who already installed it.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 1 new potential issue.

🐛 1 issue in files not directly in the diff

🐛 Release binaries retain the previous version

Building the beta.89 release through tracedecay-cli stamps beta.88 into the binary. Cargo.lock also records beta.88 for three workspace packages, so release checks and locked builds fail.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 1 new potential issue.

🐛 1 issue in files not directly in the diff

🐛 Release binary reports the old version

With the workspace at beta.89, tracedecay-cli remains beta.88 in Bazel and the lockfile. The CLI reports beta.88, and release integrity validation rejects the mismatched package versions.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 1 new potential issue.

🐛 1 issue in files not directly in the diff

🐛 Release binary identifies as beta.88

A Bazel-built beta.89 release embeds beta.88 through CARGO_PKG_VERSION. The CLI reports the wrong version and offers an upgrade to its own release.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 1 new potential issue.

🐛 1 issue in files not directly in the diff

🐛 Release binary reports the wrong version

When Bazel builds the beta.89 release, CARGO_PKG_VERSION for the CLI and product library remains beta.88. The shipped binary reports beta.88 and treats the beta.89 release as an available upgrade.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 1 new potential issue.

🐛 1 issue in files not directly in the diff

🐛 Release binary reports the prior version

For the beta.89 release, CARGO_PKG_VERSION remains beta.88 in Bazel builds. The binary reports beta.88, and the stale Cargo.lock entries fail the release integrity check.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 1 new potential issue.

🐛 1 issue in files not directly in the diff

🐛 Release binary reports the old version

A Bazel-built tracedecay reports beta.88 for the beta.89 release, and register_product_runtime rejects its provider at startup. The Bazel CLI and project targets both retain beta.88, so their mismatch with the workspace version also breaks generated-build checks.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 1 new potential issue.

🐛 1 issue in files not directly in the diff

🐛 Release binaries identify as beta.88

For the beta.89 release, CARGO_PKG_VERSION remains beta.88 because the product's locked and Bazel package versions were reverted. The CLI reports the wrong version, and release safety checks reject the release.

1 flag not posted on this PR by your GitHub settings — view it in Devin Review. (Configure)

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 2 new potential issues.

🐛 2 issues in files not directly in the diff

🐛 Release builds reject stale package versions

Locked builds of beta.89 fail because Cargo.lock records beta.88 for three workspace-versioned packages. The release integrity check also rejects the manifest-lock mismatch.

---

🐛 Bazel binary reports the prior release

Bazel builds beta.89's CLI with CARGO_PKG_VERSION set to beta.88. The binary reports beta.88, while its release metadata advertises beta.89.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 1 new potential issue.

🐛 1 issue in files not directly in the diff

🐛 Released binary reports the previous version

For the beta.89 release, tracedecay built by Bazel reports beta.88 and treats beta.89 as an available upgrade. Its CARGO_PKG_VERSION comes from the Bazel target, while the release metadata declares beta.89.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 1 new potential issue.

🐛 1 issue in files not directly in the diff

🐛 Beta release identifies itself as beta.88

A Bazel-built beta.89 CLI reports beta.88 because CARGO_PKG_VERSION comes from this target. Its upgrade command then treats beta.89 as newer and repeatedly reinstalls the same release.

[devin-ai-integration]

Devin Review found 1 new potential issue.

🐛 1 issue in files not directly in the diff

🐛 Released binary reports the previous beta

A beta.89 Bazel build gives CARGO_PKG_VERSION the beta.88 value. The CLI reports beta.88 and treats its own beta.89 release as an available upgrade.