fix(ci): integrate baseline runtime and fixture repairs

MODULE.bazel

@@ -2,6 +2,7 @@ module(name = "tracedecay", version = "0.0.0")
 
 bazel_dep(name = "platforms", version = "1.1.0")
 bazel_dep(name = "bazel_skylib", version = "1.9.2")
+bazel_dep(name = "bazel_lib", version = "3.7.0")
 bazel_dep(name = "rules_python", version = "2.4.2")
 bazel_dep(name = "rules_rust", version = "0.74.0")
 # Rustc adds every dependency search directory to PATH on Windows; large

crates/tracedecay-application/src/code_index.rs

@@ -268,7 +268,7 @@ mod tests {
                     resident_bytes: bytes,
                     unreclaimable_bytes: bytes,
                     swapped_bytes: 0,
-                    cgroup_committed_bytes: None,
+                    cgroup_headroom_bytes: None,
                 })
             }),
         ));

crates/tracedecay-cli/tests/c_library_allocator.rs

@@ -19,10 +19,15 @@ static MIMALLOC: mimalloc::MiMalloc = mimalloc::MiMalloc;
 const MIB: usize = 1024 * 1024;
 
 /// Bytes glibc's arenas and its mmapped chunks hold for live allocations.
+///
+/// The hermetic toolchain links against glibc 2.31, which predates
+/// `mallinfo2`. `mallinfo` reports the same counters as `int`, which this
+/// test's few-MiB working set stays far below.
 fn glibc_in_use() -> usize {
-    // SAFETY: `mallinfo2` only reads allocator statistics.
-    let info = unsafe { libc::mallinfo2() };
-    info.uordblks + info.hblkhd
+    // SAFETY: `mallinfo` only reads allocator statistics.
+    let info = unsafe { libc::mallinfo() };
+    usize::try_from(info.uordblks).expect("in-use arena bytes fit in int")
+        + usize::try_from(info.hblkhd).expect("mmapped bytes fit in int")
 }
 
 #[test]

crates/tracedecay-cli/tests/core_cli_suite/source_provenance_test.rs

@@ -410,23 +410,8 @@ impl CargoFixture {
         let watched_input = directory.path().join("release-sha.txt");
         std::fs::create_dir_all(&cargo_home).expect("fixture cargo home");
         std::fs::write(&watched_input, ENV_SHA).expect("write watched input");
-        std::fs::create_dir_all(root.join("src")).expect("fixture source directory");
-        std::fs::create_dir_all(root.join("provenance/src"))
-            .expect("fixture build dependency source directory");
-
-        for relative in [
-            "Cargo.toml",
-            "Cargo.lock",
-            "build.rs",
-            "README.md",
-            "provenance/Cargo.toml",
-            "provenance/src/lib.rs",
-        ] {
-            std::fs::copy(fixture.join(relative), root.join(relative))
-                .unwrap_or_else(|error| panic!("copy checked-in fixture {relative}: {error}"));
-        }
-        std::fs::copy(fixture.join("src/main.rs"), root.join("src/main.rs"))
-            .expect("copy checked-in fixture src/main.rs");
+        crate::common::fixture::copy_fixture_tree(&fixture, &root)
+            .expect("copy writable provenance fixture");
 
         Self {
             _directory: directory,

crates/tracedecay-cli/tests/host_journeys_suite/host_lifecycle_cli_acceptance/exact_restore.rs

@@ -470,6 +470,15 @@ fn uninstall_after_an_upgrade_removes_tracedecay_residue_and_keeps_unprovable_st
         run_phase(&cli, id, &["install", "--agent", id], false);
     }
     strip_creation_records(&cli);
+    // Unproven directories must retain operator modes across update/uninstall,
+    // regardless of the umask that created them during the old installation.
+    for (relative, mode) in [(".cursor/plugins", 0o750), (".cursor/plugins/local", 0o710)] {
+        fs::set_permissions(
+            cli.home.path().join(relative),
+            fs::Permissions::from_mode(mode),
+        )
+        .unwrap();
+    }
     deposit_legacy_cursor_extension(&cli);
     let upgraded = home_snapshot(&cli);
     for residue in [
@@ -503,8 +512,8 @@ fn uninstall_after_an_upgrade_removes_tracedecay_residue_and_keeps_unprovable_st
                 "  + .cline/mcp.json: file 600 {}",
                 hex::encode(Sha256::digest(skeleton))
             ),
-            "  + .cursor/plugins: dir 755".to_string(),
-            "  + .cursor/plugins/local: dir 755".to_string(),
+            "  + .cursor/plugins: dir 750".to_string(),
+            "  + .cursor/plugins/local: dir 710".to_string(),
         ]
     );
 }

crates/tracedecay-cli/tests/work_loop_journey.rs

@@ -376,13 +376,13 @@ impl ProductionDaemon {
         (status, parsed)
     }
 
-    /// Follows only the daemon's explicit same-request warming contract. A
-    /// terminal problem or malformed retry response is returned immediately,
+    /// Follows the daemon's explicit same-request warming and capacity retry
+    /// contract. A terminal problem or malformed retry response returns immediately,
     /// so callers still prove their exact success or refusal below.
     fn post_settled(&self, label: &str, route_path: &str, body: &Value) -> (u16, Value) {
         poll_until(label, || {
             let (status, answer) = self.post(route_path, body);
-            if status == 503
+            if matches!(status, 429 | 503)
                 && answer["kind"] == "problem"
                 && answer["value"]["problem"]["retryable"] == true
                 && answer["value"]["problem"]["retry_scope"] == "same_request"

crates/tracedecay-code-index-runtime/src/code_index_scheduler/memory_tests.rs

@@ -490,7 +490,7 @@ fn measured_rss_pressure_refuses_worker_admission_and_readmits_as_it_falls() {
                     resident_bytes: unreclaimable_bytes,
                     unreclaimable_bytes,
                     swapped_bytes: 0,
-                    cgroup_committed_bytes: None,
+                    cgroup_headroom_bytes: None,
                 })
         }),
     ));
@@ -577,7 +577,7 @@ fn a_refresh_after_cold_index_sizes_its_worker_slab_to_measured_headroom() {
                 resident_bytes: unreclaimable_bytes,
                 unreclaimable_bytes,
                 swapped_bytes: 0,
-                cgroup_committed_bytes: None,
+                cgroup_headroom_bytes: None,
             })
         }),
     ));
@@ -655,7 +655,7 @@ fn a_refresh_decodes_its_parent_before_planning_its_worker_slab() {
                 resident_bytes: 0,
                 unreclaimable_bytes: 0,
                 swapped_bytes: 0,
-                cgroup_committed_bytes: None,
+                cgroup_headroom_bytes: None,
             })
         }),
     ));
@@ -745,7 +745,7 @@ fn a_released_generation_decodes_again_only_once_its_bytes_fit_the_budget() {
                 resident_bytes: 0,
                 unreclaimable_bytes: 0,
                 swapped_bytes: 0,
-                cgroup_committed_bytes: None,
+                cgroup_headroom_bytes: None,
             })
         }),
     ));
@@ -829,7 +829,7 @@ fn a_decode_is_admitted_against_unreclaimable_bytes_not_clean_file_pages() {
         resident_bytes: GIB,
         unreclaimable_bytes: GIB,
         swapped_bytes: 0,
-        cgroup_committed_bytes: None,
+        cgroup_headroom_bytes: None,
     }));
     let sampled = Arc::clone(&view);
     let pressure = Arc::new(ResidentMemoryPressureV1::with_sampler(
@@ -853,7 +853,7 @@ fn a_decode_is_admitted_against_unreclaimable_bytes_not_clean_file_pages() {
         resident_bytes: high_watermark - 1,
         unreclaimable_bytes: 2 * GIB,
         swapped_bytes: 0,
-        cgroup_committed_bytes: None,
+        cgroup_headroom_bytes: None,
     };
     let decoded = scheduler
         .latest_complete()
@@ -879,7 +879,7 @@ fn a_decode_is_admitted_against_unreclaimable_bytes_not_clean_file_pages() {
         resident_bytes: high_watermark - 1,
         unreclaimable_bytes: high_watermark - 1,
         swapped_bytes: 0,
-        cgroup_committed_bytes: None,
+        cgroup_headroom_bytes: None,
     };
     assert!(matches!(
         scheduler.publication.load_active_shared(),
@@ -920,7 +920,7 @@ fn reconcile_stops_when_resident_memory_crosses_the_watermark() {
                 resident_bytes: unreclaimable_bytes,
                 unreclaimable_bytes,
                 swapped_bytes: 0,
-                cgroup_committed_bytes: None,
+                cgroup_headroom_bytes: None,
             })
         }),
     ));

crates/tracedecay-code-index-runtime/src/code_index_scheduler/tests/publication_store.rs

@@ -98,7 +98,7 @@ fn selected_graph_build_bound_reserves_transient_memory_and_retries_after_releas
                 resident_bytes: 0,
                 unreclaimable_bytes: 0,
                 swapped_bytes: 0,
-                cgroup_committed_bytes: None,
+                cgroup_headroom_bytes: None,
             })
         }),
     ));

crates/tracedecay-code-index-runtime/src/code_index_scheduler/tests/residency.rs

@@ -1492,7 +1492,7 @@ fn fixed_reading_authority() -> Arc<ProcessResidentMemoryV1> {
         resident_bytes: 256 * 1024 * 1024,
         unreclaimable_bytes: 256 * 1024 * 1024,
         swapped_bytes: 0,
-        cgroup_committed_bytes: None,
+        cgroup_headroom_bytes: None,
     };
     Arc::new(ProcessResidentMemoryV1::with_pressure(
         limit,

crates/tracedecay-code-index-runtime/tests/code_index_scheduler/serving.rs

@@ -2207,7 +2207,7 @@ fn text_artifact_ceilings_reserve_through_process_resident_memory() {
                     resident_bytes: live_bytes,
                     unreclaimable_bytes: live_bytes,
                     swapped_bytes: 0,
-                    cgroup_committed_bytes: None,
+                    cgroup_headroom_bytes: None,
                 })
             }),
         ));

crates/tracedecay-daemon-service/src/invocation/dispatch.rs

@@ -1,6 +1,7 @@
 //! The daemon invocation dispatcher: `DaemonInvocationService::invoke`.
 
 use super::*;
+use tracedecay_contracts::CancellationSignal;
 use tracedecay_runtime_core::cancellation::CancellationToken;
 use tracedecay_runtime_core::path_safety::canonical_existing_identity;
 use tracedecay_tool_catalog::ApplicationSurfaceOperation;
@@ -785,13 +786,26 @@ impl DaemonInvocationService {
                 let Some(owner) = graph_tool_owner else {
                     return missing_registered_owner_problem(publication, request_id);
                 };
+                let signal = match self.request_cancellations.signal(&request_id, &request_cancellation) {
+                    Some(signal) => signal,
+                    None => match CancellationSignal::active(cancellation.token_id.as_str()) {
+                        Ok(signal) => signal,
+                        Err(_) => return DaemonInvocationResponse::problem(
+                            request_id,
+                            DaemonInvocationProblem::InvalidRequest,
+                        ),
+                    },
+                };
+                if let CancellationState::Cancelled { requested_at } = cancellation.state {
+                    signal.cancel(requested_at);
+                }
                 Box::pin(execute_graph_tool(
                     request_id,
                     owner,
                     surface_operation,
                     arguments,
                     deadline,
-                    cancellation,
+                    signal,
                     request_cancellation,
                 ))
                 .await

crates/tracedecay-daemon-service/src/invocation/graph_tool.rs

@@ -9,8 +9,7 @@ use std::sync::Arc;
 use serde_json::{Map, Value};
 use tracedecay_contracts::graph_tool::GraphToolCompletionV1;
 use tracedecay_contracts::{
-    ApplicationProblem, CancellationContext, CancellationSignal, CancellationState, Deadline,
-    RequestId, ResolvedScope, now_micros,
+    ApplicationProblem, CancellationSignal, Deadline, RequestId, ResolvedScope, now_micros,
 };
 use tracedecay_daemon_protocol::{
     DaemonInvocationOutcome, DaemonInvocationProblem, DaemonInvocationResponse,
@@ -92,21 +91,15 @@ pub(super) async fn execute_graph_tool(
     operation: ApplicationSurfaceOperation,
     arguments: Map<String, Value>,
     deadline: Deadline,
-    cancellation: CancellationContext,
+    signal: CancellationSignal,
     request_cancellation: tracedecay_runtime_core::cancellation::CancellationToken,
 ) -> DaemonInvocationResponse {
-    let (Ok(typed_request_id), Ok(signal)) = (
-        RequestId::new(request_id.clone()),
-        CancellationSignal::active(cancellation.token_id.as_str()),
-    ) else {
+    let Ok(typed_request_id) = RequestId::new(request_id.clone()) else {
         return DaemonInvocationResponse::problem(
             request_id,
             DaemonInvocationProblem::InvalidRequest,
         );
     };
-    if let CancellationState::Cancelled { requested_at } = &cancellation.state {
-        signal.cancel(*requested_at);
-    }
     let execution = owner.port.execute(GraphToolInvocationV1 {
         operation,
         arguments,