v1.0.0-beta.67

1.0.0-beta.67 (2026-10-04)

⚠ BREAKING CHANGES

• sessions: session stores at LCM schema 14 (written by v1.0.0-beta.66) are refused with the typed reset and are recreated empty by tracedecay wipe --stale --yes; the message projector version moves to claude-session-message-v7.
• query: lexical artifact revision 30 is refused as incompatible and rebuilt from the sealed generation; staging files at revision 30 are discarded.
• sessions: session-temporal schema 8 adds session_temporal_resets, and the observation-projection schema adds observation_source_presence and observation_source_rewrites. Existing stores of either older shape are refused as stale; clear them with the typed scoped reset tracedecay wipe --stale --yes.
• code-index: the sealed code-generation format revision moves from 19 to 20; a revision-19 store takes the typed SupersededSealedGenerationRevision refusal and rebuilds from source.

Features

• hosts: stage ChatGPT bundles and add the Codex explorer (#2916) (af1e328)
• logging: log span close timings under TRACEDECAY_SPAN_TIMINGS=1 (59c15f4)

Bug Fixes

• agent-hosts: drop deleted profiling skill from cursor list (d9ec5e5)
• answer refusals as typed problems on cli, mcp and memory (5be0c2a)
• application: refuse file reads of unpublished paths (48a8595)
• bench: carry context file listing into seed_all (no refetch) (d0707be)
• bench: carry scout work identity inside delivery claim (5b57ee7)
• bench: inline affected-test path extractor (closure lifetime) (48a50c3)
• bench: isolate work chains and mint actor-owned scope sets (e265602)
• bench: keep queries.rs coverage-free for its standalone bench root (cb666fd)
• bench: parse pin-mismatch digest hints, capture live wf revision (282db6c)
• bench: unblock verified reads and chain coverage in large_repos (c17e0d8)
• capture: record Claude gitBranch as Git branch evidence (67e5948)
• chatgpt-extension: serve through symlinks, drain stderr, surface errors (c103d0e)
• chatgpt-extension: serve through symlinks, surface tool errors (e20070d)
• cli: add --json to query commands and route branch list to stdout (1383d8a)
• cli: connect selected retained effects to the target project (1a912e5)
• cli: derive session sync retryability from termination (ae23872)
• cli: honour --json and stdout routing for #2890 rows (cd16bf2)
• cli: let sync-status report deferred import catch-up (24ff382)
• cli: list only projects this profile holds a store for (357195e)
• cli: mark printed remote refusals as already rendered (f77d97b)
• cli: name the session sync source so status rejects git gaps (52b8873)
• cli: type session sync admission refusals by kind (0446ce5)
• code-extraction: treat shadowed receiver params as generic (7c0469d)
• code-index-runtime: serve the outgoing graph until successor warms (9876444)
• code-index-runtime: serve the outgoing graph until successor warms (211f71c)
• code-index: box the carried symbol row to satisfy clippy (c1ca558)
• code-index: claim a wake's permit with its stamp (d7caf3a)
• code-index: close Go satisfaction review gaps (cbd1629)
• code-index: find Go interface implementors across files (ce66a0e)
• code-index: index TS namespaces, gap computed receivers (#2965) (6372128)
• code-index: inventory the outgoing graph a refresh waits on (8d4e66f)
• code-index: inventory the outgoing graph a refresh waits on (156914c)
• code-index: loosen only Go methods naming receiver type params (b4ccb67)
• code-index: mark every identifier exact read partial (b3b4f75)
• code-index: mark runtime Go implementations partial if undecided (bb64284)
• code-index: promote Go methods from embedded fields and aliases (c89b239)
• code-index: re-point referencing files with no movable picks (e6b7c28)
• code-index: re-resolve referencing files with no movable picks (56965c1)
• code-index: release the held graph on refusal and serve it first (b82cfb1)
• code-index: report a decode failure over the error it caused (123e256)
• code-index: report undecided Go implementors as partial (8a0424a)
• code-index: resolve Go promotion by selector depth (d207ed8)
• code-index: scan when a catalog carry finds itself corrupt (6bfde87)
• code-index: seal Go method-set edits cold (95b8c18)
• code-index: serve a complete seat that lands after the read misses (65d6f7f)
• code-index: serve a complete seat that lands after the read misses (c1253b6)
• code-index: truthful exact occurrence coverage (221b411), Refs #2884
• contracts: declare freshness on node and impact results (d49b863)
• contracts: declare freshness on node and impact results (7788840)
• daemon-service: drop retired commit-index from census and grants (845b6f1)
• daemon-service: remove dangling metrics calls and empty guards (e8ef679)
• daemon: remove four load races in lib tests (#2986) (b0c4067)
• daemon: shut down composition server after aborted index wait (f54dabd)
• doctor: keep the human report off stderr under --json (5ae68bd)
• doctor: name drifted host components; detect CLI hosts (#3002) (d3a0371), Refs #2982
• doctor: report a verifying code index as stale like status (a9b9dd7)
• git-correlation: drop legacy failure receipts at migration (b116d76)
• git: decode index records stored before commit removal (23380b4)
• global-db: keep session schema bumps off global.db (#2992) (2b41229), Refs #2979
• graph-db: check each streamed target is intact (9dea972)
• graph-db: hold visited targets until the read proves intact (421b8cc)
• graph-db: verify sealed pages after every base read (f522e37)
• graph-db: verify sealed pages after every base read (3d840ca)
• graph: truthful coverage and freshness on graph reads (69b73bf)
• host-admission: root Git evidence drains without provenance (a15717d)
• kimi: never pool the kimi web plugin install connection (fc9ec83)
• maintenance: drop leftover gauge guards and identity fns (cb43365)
• mcp: carry the worktree verdict on array and truncated JSON (18e4849)
• mcp: keep the owner problem record on refusal errors (184e321)
• mcp: open every graph read with the worktree verdict (8c55a23)
• mcp: render an owner denial record as a denial (572b93d)
• mcp: render route refusals in the caller's requested format (654992b)
• mcp: report unknown impact seeds and print callers cursor once (030abef)
• mcp: report unknown impact seeds and print the callers cursor once (2452d0d)
• mcp: route selected fact writes to the target project (#2892) (5502a81)
• mcp: satisfy clippy for refusal format threading (633aca7)
• memory: document unknown-id refusals; reword foreign write refusal (f013bc1)
• memory: drop unreachable not_found fact results (982b8f5)
• memory: write selected-project facts and refuse unknown fact ids (2a3eea5)
• observability: keep spans off awaits and metrics infallible (2da56c1)
• projection: keep a Claude session's cwd for history evidence (5f76c94)
• query: answer each exact occurrence from its innermost row (95be51f)
• query: answer each exact occurrence from its owning chunk (3ff6f89)
• query: answer each exact occurrence from its owning chunk (7526075)
• query: drop partial carry copies on interruption (88b54fb)
• query: match exact evidence against parsed request literals (b80903e)
• query: match exact evidence against parsed request literals (782ce1b)
• query: match typed exact literals by their parsed bytes (fd4a469)
• query: pair the exact matched literal with its filtered kind (76a2066)
• query: parse typed exact literals; scope lexical before the cap (de1f35c)
• query: port the lexical catchup bench to sealed publication (c35dd4d)
• query: port the lexical catchup bench to sealed publication (976f023)
• query: scope exact matches before the candidate cap (9580702)
• query: scope lexical matches before the candidate cap (d992411)
• root-cause two master flakes (spool drain wake, invisible wake permit) (18a5f94)
• session-memory: refuse remove and supersede of unknown fact ids (0772dfc)
• session-runtime: count Git evidence commits in the commit budget (f94eacf)
• session-runtime: count Git evidence commits in the commit budget (919f788)
• session-runtime: restore retry-class observations in refresh worker (f492f1f)
• sessions: attribute linked-worktree sessions to their worktree (48bec17)
• sessions: attribute linked-worktree sessions to their worktree (0dc3d03)
• sessions: index session history from the retained session cwd (250d0fd)
• sessions: keep each scope's settled proof of a replaced transcript (1889048)
• sessions: locate each Codex record at its turn_context cwd (0f90c60)
• sessions: order git catch-up by change sequence (8b57ca0)
• sessions: order git catch-up by change sequence (776dbc8)
• sessions: page git scope identity reads under the row cap (e530e26)
• sessions: page git scope identity reads under the row cap (0d3e2f4)
• sessions: pass admitted project root to git convergence (1658a5d)
• sessions: render block content and carry Claude git branch (8b8151d)
• sessions: reset shipped v6 message stores through LCM schema 15 (52954a8)
• sessions: resolve a removed cwd through its surviving worktree (9684a89)
• sessions: retire only the advancing cursor's own resume proof (97493d5)
• sessions: retire records a rewritten transcript drops (#2975) (770d178), Refs #2947
• sessions: stop re-reading a replaced transcript on every idle poll (1ab43d4)
• storage: count a repo marker only with this profile's shard (cba0c1f)
• tests: pass project root to git evidence convergence (413755b)
• tests: pass project root to git evidence convergence (97ff175)
• tests: seed daemon stores only between daemon processes (bbedd75)
• tests: seed daemon stores only between daemon processes (a588739)
• tidy leftovers from the hotpath removal (1f0672f)
• verify carried text parents and build cold on carry failure (10a8ba0)
• verify carried text parents and build cold on carry failure (101bdbe)
• windows: close path-spelling, DACL, and witness gaps (#2966) (96907cf)

Performance Improvements

• code-extraction: static metric names, skip unless tracing (fa9fee0)
• code-index: carry the warm catalog across a one-file edit (e320217)
• code-index: check the file set before decoding parent evidence (804be0a)
• code-index: seal one-file edits over the sealed parent (#2985) (88e5b13)
• code-index: skip metric atomics and walks unless tracing (03f6ca9)
• code-index: WIP carry the warm catalog across a one-file edit (622cc5a)
• db: batch the diagnostics probe and span identity reads (#2963) (fa09211)
• dedupe lexical field scans, group opencode page probes, share SSE source poll, batch payload upserts (dbffb47)
• graph-db: gate grafeo census and corpus walks on tracing (8de823d)
• graph-db: serve the sealed generation in place (#2993) (f4c46f1)
• hooks: gate spool gauges and lease atomics on tracing (65af763)
• mcp: compute bounded tool label only when traced (97fa81a)
• query: carry the parent text artifact across an edit (#3004) (1386c99)
• query: gate sampled timing and fullscan reads on tracing (01bf9ac)
• query: skip artifact batch metric walks unless tracing (db5d1f1)
• sessions: settle the relation receipt in the activation commit (d09d4d5)
• sessions: settle the relation receipt in the activation commit (9e85939)