v0.1.0-beta.29

0.1.0-beta.29 (2026-08-21)

Features

• agent-hosts: auto-trust Codex managed hooks on install and update (dbed6d3)
• agent-hosts: auto-trust Codex managed hooks on install and update (83be52d)
• automation: make session-evidence budget backoff window configurable (1524f03)
• automation: typed session-evidence budget backoff for scheduler skips (dd5b677)
• code-index: configure native graph activation (4be1897)
• mount privacy remediation, multi-root dashboard scope, native-integration notifications (70182de)
• privacy: rescan at-rest LCM store bytes under current detector (1c58d39)
• privacy: rescan at-rest LCM store bytes under the current detector (327011a)
• private-fs: mount quota-aware available_space (747999e)
• private-fs: mount quota-aware available_space (1edb427)
• rusqlite-runtime: expose exclusive maintenance checkpoint port (f8de48d)
• rusqlite-runtime: expose exclusive maintenance checkpoint port (6eb16dd)
• rusqlite-runtime: expose exclusive maintenance checkpoint port (a13a7f4)
• scout: remount the Context Scout producer path and Plan 20 flag (ab6099e)

Bug Fixes

• agent-hosts: adopt receiptless cataloged deploys on install/update (8c82f0d)
• agent-hosts: adopt receiptless cataloged deploys on install/update (3ecb5a0)
• agent-hosts: gate receiptless adoption on explicit authority (1044ce5)
• agent-hosts: gate receiptless adoption on explicit authority (6b07061)
• agent-hosts: grant Claude plugin wildcard (fbf65bf)
• agent-hosts: preserve multicall interpreter name (1f50ffd)
• agent-hosts: preserve original mode on host config backups (f4fbdcb)
• agent-hosts: recover versioned registration paths (bda88ee)
• agent-hosts: report usable ownership recovery (9c7ae7d)
• agent-hosts: require explicit receiptless adoption (8ec75e8)
• agent-hosts: retain profile memory graph port in user harness (ef23c7c)
• agent-hosts: sync Codex hook trust in activation, prune on removal (21fdaa0)
• application: bind session evidence budget suppressed label (320464f)
• application: return typed work-catalog identity failures (0398bb4)
• automation: dedicate suppressed-tick skip reason and reject zero window (fbf12e2)
• automation: distinguish budget backoff skips (d775002)
• automation: preserve budget backoff ordering (18f1237)
• automation: share evidence budget labels (7002612)
• build: preserve lean feature compilation (060046f)
• build: satisfy Rust 1.97 Clippy policy (4926a59)
• claude: separate row and message identities (b785e63)
• cli: carry the status deadline into daemon tool calls (dfa752a)
• cli: classify read-only startup policy (bcd937a)
• cli: forward receiptless adoption authority (e2b173e)
• cli: prevent implicit host repairs (a762092)
• cli: request the code-index reconcile init reports (2e066ad)
• cli: require confirmed host adoption (a275cc5)
• cli: skip install checks for nested inspections (89c1951)
• cli: update explicit reinstall test imports (6424fd0)
• code-index: code-index leftover slice for #421 — full-scope dispatch, sealed-branch shard key (fa37dd9)
• code-index: compile graph policy without test authority (2dbc2ea)
• code-index: dispatch active generations by exact full scope (49f8acc)
• code-index: fail closed on late ceiling install (63b012c)
• code-index: honor daemon worker ceiling (95819cb)
• code-index: honor daemon worker ceiling (bf8f4fd)
• code-index: reclaim graph manifest memo (0dcdd8f)
• code-index: refuse graph before retained hydration (70d091e)
• code-index: serialize worker ceiling setup (3b371c6)
• code-index: serve text when graph budget is refused (10745a1)
• code-index: update graph policy on remount (99c50aa)
• codex: bind stable observation source context (88ad214)
• config: converge native graph setting on existing stores (8c74c58)
• cursor: stabilize canonical observation context (cf4868a)
• daemon: bound shutdown coordinator receipts (7c11144)
• daemon: defer slow repository discovery instead of failing open (39bbac1)
• daemon: drain terminal graph owner states (2f7239e)
• daemon: drain terminal graph owner states (a0310e6)
• daemon: harden first-index recovery (a4e47ba)
• daemon: harden project privacy and status routing (f1655c8)
• daemon: honor graph policy for linked worktrees (788d824)
• daemon: join active work attempt processes (9f18046)
• daemon: join active work attempt processes (f221dc7)
• daemon: join bounded hook cycle workers (fcb5443)
• daemon: join bounded hook cycle workers (1f9e429)
• daemon: join project-open background leases (a8503ee)
• daemon: join reconciliation workers before closing retained graphs (59b3760)
• daemon: join session runtime terminal tasks (4ba8be4)
• daemon: keep committed-profile unseated retention retryable (f45e856)
• daemon: keep the unix socket endpoint within SUN_LEN (a64e7d6)
• daemon: latch retirement reaper shutdown wakes (2567125)
• daemon: mount budget-aware lexical projection build (906eea1)
• daemon: preserve exact branch ref identity (7a721df)
• daemon: preserve exact branch ref identity (6724e6b)
• daemon: preserve semantic retries on no-op (4467464)
• daemon: propagate terminal runtime shutdown failures (b7ed3eb)
• daemon: quiet vector retention when semantic runtime is unseated (78509af)
• daemon: quiet vector retention when semantic runtime is unseated (ae3d107)
• daemon: release session graph leases at shutdown (c3907ff)
• daemon: release session graph leases at shutdown (b6001dd)
• daemon: release session sync stores at shutdown (3a1b00a)
• daemon: release session sync stores at shutdown (d2816ed)
• daemon: release telemetry clients at shutdown (725e30b)
• daemon: remount scout producer path on settings revision drift (d630d1e)
• daemon: reserve scheduler retirement after admission (41fe56b)
• daemon: retain session sync tasks through shutdown (04da6df)
• daemon: retain timed-out shutdown runner ownership (c605133)
• daemon: Scout P1 follow-up after #521 (d6a273c)
• daemon: skip redundant graph activation (1678492)
• daemon: skip redundant graph activation (214781f)
• daemon: stable first-index on empty profiles (discovery deferral, real init reconcile, accept/SUN_LEN hardening) (5259f5b)
• daemon: survive transient accept errors instead of exiting (ea0eda9)
• global-db: restore measured WAL reclaim to registered checkpoint (28135a5)
• global-db: restore measured WAL reclaim to registered checkpoint (Plan 38 §6) (dc3e3f8)
• graph-db: bind cheap re-seat to an exact dependency digest (c9cf5d4)
• graph-db: bind reseat to its generation and single-proof admit (7669346)
• graph-db: bound generation retirement pages (11c6fe4)
• graph-db: canonicalize operation paths before identity checks (001a243)
• graph-db: index vectors introduced by later pages (6869898)
• graph-db: keep hydrate digest off the snapshot gate (5505ec0)
• graph-db: scale batch bound and keep budget identity (2af6170)
• graph-db: seat live activation after Plan 39 (0c8373f)
• graph-db: seat live activation after Plan 39 (b1741aa)
• graph-db: stage generations in bounded pages (eb841f7)
• hooks: index bundled work and workflow skills for cursor (41e17ee)
• hooks: keep contended ledger locks typed as busy on windows (c786587)
• hooks: keep transient spool validation failures typed as io (0b5c91d)
• hooks: refuse non-private existing spool roots (9cd8732)
• lint: clear pedantic debt in merged daemon and migrate paths (6c9a4a2)
• metadata: align product release authorities (92491d8)
• observation: accept bound Codex source revisions (62ab4c0)
• observation: accept semantic anchor replay (9d6586c)
• observation: converge canonical payload revisions (fcb452c)
• observation: preserve store failure reasons (328d0b1)
• privacy: classify ambiguous LCM JSON as quarantine, not receipt construction (31648fb)
• privacy: close the remaining Codex P1 gaps after #522 merged (fa9c631)
• privacy: derive PartialEq for DetectionError (fd69979)
• privacy: derive PartialEq for DetectionError (71d994f)
• privacy: derive PartialEq for DetectionError (3cfb111)
• privacy: preserve sensitive-field quarantine (4842360)
• privacy: prove and sweep superseded payload purges (69354d2)
• privacy: purge detector-flagged superseded payloads on correction (592de04)
• privacy: quarantine LCM credential-bearing keys instead of Receipt (dbf8192)
• privacy: quarantine LCM credential-bearing keys instead of Receipt (5ce4db9)
• privacy: quarantine LCM credential-bearing keys instead of Receipt (fdf163d)
• privacy: route non-JSON key quarantines to CredentialKeyQuarantine (0103cff)
• privacy: route non-JSON key quarantines to CredentialKeyQuarantine (ae73d9a)
• privacy: route non-JSON key quarantines to CredentialKeyQuarantine (2d1137a)
• privacy: scan labels and drain retained statuses (a19bc5a)
• privacy: split credential-key quarantine Display (c79d5c5)
• privacy: split credential-key quarantine Display (da5cd31)
• privacy: split credential-key quarantine Display (bce2bf5)
• projection: key Claude outputs by row identity (49acab5)
• projection: retire v4 output ownership atomically (77efae8)
• query: bound omitted semantic and lexical deadlines (6e32b35)
• query: cheaper exact-flat retain + deadline backstop (8fa116b)
• query: drop Plan 20 framing on budget deadline overrides (b53812c)
• query: enforce deadlines across full scans (ce0b96c)
• query: let request budgets override crate deadline fallbacks (95840eb)
• query: materialize only retained exact-flat rows (c1b9e05)
• query: remove unwired lexical budget constructors (af33753)
• query: restore new_admitted_with_budget for daemon mount (19e3bd7)
• release: canonicalize runtime fixture paths (68b2c34)
• release: include Linux runtime notices (961d555)
• release: make beta builders portable (1116410)
• release: make harnesses portable on Windows (f8d457e)
• release: prevent beta lockfile races (28177d3)
• release: ship portable Linux inference runtime (8585bf7)
• release: use cross-platform Python runtime (cc22f04)
• release: validate beta source before Rust setup (adecaa0)
• runtime-core: interrupt WAL folds on cancellation (ac8356b)
• runtime-core: interrupt WAL folds on cancellation (93ce096)
• runtime-core: interrupt WAL folds on cancellation (262f199)
• runtime-core: re-interrupt WAL fold until completion (c068bc1)
• runtime: isolate repository discovery from blocking pool (ca8f06c)
• runtime: keep unavailable authorities scoped (4c4171a)
• runtime: prefer repository identity authority (7267953)
• rusqlite-runtime: borrow the LazyLock fixture root as &str in placement tests (4470547)
• rusqlite-runtime: drain admitted writes before maintenance (51f41f7)
• rusqlite-runtime: drop unused common module from scope set test binary (ee4bd75)
• rusqlite-runtime: expect unused crate-private drain in lib clippy (f534aa6)
• rusqlite-runtime: gate the test-only maintenance drain wrapper (7480164)
• rusqlite-runtime: keep exclusive drain crate-private (3305d58)
• rusqlite-runtime: keep exclusive drain crate-private (e69be29)
• rusqlite-runtime: reject blocked inventory before exclusive drain (9f726be)
• rusqlite-runtime: reject blocked inventory before exclusive drain (25f85d6)
• rusqlite-runtime: route attempt worktree root through the platform fixture helper (89a218c)
• rusqlite-runtime: validate maintenance permit before drain (0862061)
• rusqlite-runtime: validate maintenance permit before drain (d0694e7)
• scout: keep hook cycles live and retryable (d9e69f7)
• search: report actual fallback lane coverage (aa85090)
• semantic: keep typed cancel/deadline through pre-install warm (0b870eb)
• semantic: preserve candidate warm interruptions (fd6ada3)
• semantic: warm candidate session before installing serving pointer (32b5c8f)
• sessions: accept duplicate receipts on read miss (a553b08)
• sessions: accept duplicate receipts on read miss (391212c)
• sessions: avoid queued status for duplicate read miss (2243cdb)
• sessions: block cover-past on observation commit failures (9430898)
• sessions: block cover-past on observation commit failures (fcc5a76)
• sessions: carry admission retry verdict through jsonl ingest wrap (42cb37d)
• sessions: keep admission uncertainty typed (3b26f3c)
• sessions: keep duplicate projection status unknown (451855b)
• skill: handle current storage status shape (2d5bf28)
• snapshot: take available_space from private-fs (f3a883b)
• storage: conflict only on populated exact-root duplicates (ed81625)
• storage: surface split identity when candidates name the exact root (510eeb3)
• storage: type windows sidecar lock contention as contended (3f10bba)
• test: align windows file-semantics tests with pin contracts (21ae992)
• test: calibrate exact-sql test budgets for hosted-runner disks (8a45607)
• test: platform roots for run-control and leak-adjudication suites (ffcbd76)
• test: resolve cargo at runtime for archived metadata probes (d0d2733)
• test: restore shared fixture root helper for application tests (bcde960)
• test: restore shared fixture root helper for application tests (0ef259f)
• test: restore shared fixture root helper for application tests (5002c5d)
• test: widen exact-sql test budgets for linux runner cleanup (c36e06f)
• usecases: cheaper LCM drain yield and idle frontier init (db0099b)
• usecases: gate repeat deterministic-refusal drain warns (c805f24)
• usecases: inline one-line drain skip increment (3b56552)
• usecases: keep draining after durable sanitization skip (7f84b9b)
• usecases: keep durable refusal diagnostics quiet (482286a)
• usecases: make the first idle rollup tick immediate (cfc5450)
• usecases: type drain yield project-call counter (ae9824b)

Performance Improvements

• cli: skip install health checks for inspections (72d1dbb)
• code-extraction: borrow source in hot extract walks (83086bb)
• code-extraction: borrow test callee names (84951b3)
• code-extraction: cut no-delimiter signatures at the body child (95c4e4e)
• code-index: cap default indexing workers (5366a2c)
• code-index: release exact admission staging (a630505)
• code-index: share graph publication manifests (77da1d7)
• code-index: shrink graph publication and adjacency hydration work (4aca023)
• daemon: classify launchd service as interactive (f5c0da2)
• dashboard-api: borrow-keyed hit path for LCM display cache (074eb21)
• dashboard-api: bound LCM display token cache (23f6bfc)
• dashboard-api: serve LCM display token counts from shared cache (620f091)
• domain: share sanitized chunk text clones (ac94b6b)
• graph-db: skip canonical batch rebuild on stored re-seat (2d6cd0c)
• index: build text serving across worker passes (4ce6d31)
• memory: scan graph source once per settled reconciliation (44c8a6b)
• query: compact retained lexical scoring state (09629c0)
• query: resume lexical projection builds (4817fab)
• runtime-core: checkpoint WAL snapshot copies in place (a9c2abd)
• runtime-core: checkpoint WAL snapshot copies in place (9eb493e)
• runtime-core: checkpoint WAL snapshot copies in place (d2b83e6)
• semantic: drop eager member byte hashing from lifecycle authority (fe90ba8)