v1.0.0-beta.89

1.0.0-beta.89 (2026-10-19)

Features

• context-scout: daemon-owned intent suggestions over a decision engine (#4121) (ada5a81)
• daemon: exit as profile_lost when the profile is deleted (31b7898)
• global-db: add RegisteredGlobalDb::transact job transactions (ab54b69)
• global-db: add transact_or and JobExit for job bodies (642433a)
• storage: adopt a second clone through repository anchors (f76fcd1)
• storage: authorize every checkout of a project (2d58997)
• storage: close a store whose file is unlinked under it (d806cc4)
• storage: close unlinked stores and exit on ProfileLost (step 7b) (42a3c46)
• storage: repository identity across clones (step 8a) (8b58f7f)
• storage: run runtime-core writes as WriteTx jobs (9cb89f2)

Bug Fixes

• address audit correctness and resource bounds (#4231) (35e5ae4)
• api: derive cancellation policy from executable bindings (205c83a)
• api: derive cancellation policy from executable bindings (8d0df8b)
• bazel: copy writable fixtures and honor test filters (55860f5)
• bazel: normalize npm extraction traversal permissions (cc6c2c1)
• bazel: preserve isolated test resource defaults (a59066c)
• bazel: read arborium grammar manifest dir at build-script run time (9161511)
• bazel: retain benchmark output from remote tests (0e4de45)
• build: share dashboard source copies across consumers (1787f22)
• build: share dashboard source copies across consumers (e3df8d5)
• ci: expose packaged LSP smoke imports to Bazel (ee650a8)
• ci: integrate baseline repairs into hook replay (d318f40)
• ci: preserve current hook recovery during baseline integration (dd9a1b2)
• ci: preserve release dispatch and checkout invariants (57892b9)
• ci: resolve export paths in the runner steps (f5e226e)
• cli: read glibc counters through mallinfo on the 2.31 baseline (73e6ccf)
• code-index: end a seat wait once a pass settles after the re-park (647705e)
• code-index: end a seat wait once a pass settles after the re-park (95a56e5), Refs #4238
• code-index: end a worker whose shutdown permit was drained (c9def11)
• code-index: end a worker whose shutdown permit was drained (ea7f7ee)
• code-index: seal the last capture attempt past a newer epoch (2625038)
• code-index: seal the last capture attempt past a newer epoch (cd9bfc1), Refs #4238
• code-index: stamp a proof with the epoch it began under (c7c6e9e)
• code-index: stamp a proof with the epoch it began under (ddd51c1), Refs #4238
• daemon-service: bound provider output drain by attempt lifecycle (0b0e012)
• daemon-service: bound provider output drain by attempt lifecycle (7427f7f)
• daemon-service: drop the unused axum Response import (07ee41d)
• daemon: bound producer shutdown by the caller's phase deadline (f20e92b)
• daemon: bound producer shutdown by the caller's phase deadline (15e46cc), Refs #4175
• daemon: build the HTTP application router on the blocking pool (1e2e49e)
• daemon: capacity release waits out maintenance store clients (f4f9f91)
• daemon: capacity release waits out maintenance store clients (f78741e), Refs #4175
• daemon: exit non-zero on profile_lost so launchd restarts (e78ee42)
• daemon: join composition rollback before returning errors (ee7f675)
• daemon: list mounted graphs without leasing project servers (5cff32d)
• daemon: list mounted graphs without leasing project servers (ee96ca8), Refs #4175
• daemon: log the profile root on profile_lost (3b71446)
• dashboard: authenticate by request header, not a shared cookie (c43d6d6)
• dashboard: authenticate by request header, not a shared cookie (8bffd6b)
• dashboard: cancel scoped reads and share JSON transport (eddfcb6)
• dashboard: decode canonical settings settlements (4517217)
• dashboard: generate settings PATCH contracts (7ad21f2)
• dashboard: preserve concealed curator refusals (c7e636d)
• dashboard: run the Cortex relief layout in a worker (064973d)
• dashboard: run the Cortex relief layout in a worker (c4ea34d)
• dashboard: share JSON transport and cancel structure reads (0390978), Refs #4213
• dashboard: verify curation fixtures through Bazel (3f0ef62)
• db: deduplicate hook-route analytics with indexed lookup (87c29d0)
• drop unused mut and Debug-free parse assertion (b9475c6)
• evals: enforce exact-run evidence and failure reporting (b553ad0), Refs #4204
• evals: honor consent and platform executable paths (64e8b5e)
• evals: score only exact-run transcripts and preserve agent failures (82ec8fd)
• evals: separate verified outcomes from adoption scoring (7563b5e)
• evals: separate verified outcomes from adoption scoring (d82d527)
• graph: import typed read errors for dashboard responses (5388ad9)
• graph: preserve unavailable evidence refusals (cb0dc07)
• hooks: admit cold file edits before full project open (8c8b308)
• hooks: allow replay after branch label changes in same checkout (a5896ff)
• hooks: combine current intent recovery with baseline repairs (acb1575)
• hooks: fence replay across ledger and spool (bfb9aba)
• hooks: fence source currency until routed edits reach indexing (68306ef)
• hooks: guard known-session replay and test per-edit lifecycle (976c957)
• hooks: honor lifecycle gating during ledger replay (be6a6e2)
• hooks: keep reads available through broker recovery (cbcb484)
• hooks: preserve lifecycle debt and immutable replay order (1b6f500)
• hooks: preserve lifecycle evidence during replay (f8c42c6)
• hooks: preserve ordered replay lifecycle evidence (5a5cb74)
• hooks: preserve peer baseline integration (26e7e43)
• hooks: preserve peer broker recovery regression (c8ce4d8)
• hooks: reconcile durable routes and observe queued edits (d33a128)
• hooks: reconcile intent duplicates after host claims (206248d)
• hooks: recover committed intent before claim mounting (e9e7aa1)
• hooks: recover intent delivery after completed replay (4b0e015)
• hooks: recover intent delivery while feedback is pending (b721f91)
• hooks: require event-specific spool evidence before ledger replay (98609ed)
• hooks: retain intent boundary work through replay (b88ffd4)
• hooks: retain read availability when admission spool fails (97d4a71)
• hooks: settle cooperatively superseded producer work (4e6d11a)
• host-admission: one wake per replay kick; signal-driven daemon tests (2254620)
• identity: preserve nested checkout scope authority (d7a8cd6)
• identity: retain enrolled monorepo package scope (651a822)
• identity: share indexed scope identities across surfaces (600b671)
• index: retain completed readings at readiness deadline (90b2326)
• index: retain stale owners when source admission is unreadable (1027ce0)
• integrate reviewed runtime and application repairs (1ea485b)
• lcm: budget context in o200k tokens instead of words (6c15336)
• lcm: enforce context budgets in o200k tokens, not words (334a226)
• lsp: distinguish diagnostic headers from message text (8eed2f3)
• lsp: preserve TypeScript diagnostic paths and parse failures (d64d4f8), Refs #4202
• lsp: preserve TypeScript diagnostics and reject false-clean checks (5f09e01)
• maintenance: restate the lost-store restart after the probe (f8f2afa)
• mcp: preserve live graph request cancellation (fb85df8)
• memory: drop mimalloc owner heaps that crash on delete (#4152) (d541668)
• memory: separate process and cgroup admission budgets (6914cc8)
• observability: bound shutdown drains by the caller's deadline (9a16394)
• observability: bound shutdown drains by the caller's deadline (685ece9), Refs #4175
• privacy: detect sparse token pairs in UUID paths (2010a84)
• privacy: detect uneven split tokens in UUID paths (667387e)
• privacy: infer split tokens without fragment cutoffs (557f933)
• privacy: isolate entropy runs in UUID paths (d4a2256)
• privacy: preserve ordinary sparse directory pairs (4323288)
• privacy: preserve UUID directory paths in entropy scans (18513ff)
• project-open: join blocking work an aborted open still owns (fe8569b)
• project-open: move blocking credential and hook work off workers (e14cb03)
• projection: keep the stored cwd when a session names another (cf66a51)
• projection: settle passes parked on terminal session collisions (d1539a1)
• remove the worldwide token counter (6fef056)
• runtime-core: drain held stores until the store-close deadline (952d101)
• runtime-core: drain held stores until the store-close deadline (145aa42), Refs #4175
• runtime-core: end the store-close drain before its deadline (b674d41), Refs #4175
• rusqlite: attribute native writer waits to their storage caller (9bf0c3d)
• sdk: close abandoned operation streams (0b7c2f6), Refs #4209
• sdk: close abandoned SSE responses when a watcher stops (0fa6ce8)
• sdk: spend reconnect budget on failed connects in both SDKs (8fa2da8)
• sdk: treat unavailable as a terminal stream event (7aaebfd)
• sdk: unavailable terminal event and reconnect budget for failed connects (5c0b372)
• sessions: attach history before waking refresh workers (cc061b4)
• sessions: preserve canonical message directory scopes (4c0e1fc)
• settings: label reconciliation as receipt state (a14674c)
• settings: separate saved commits from reconciliation (79a6779)
• source-edit: scope-aware rename collision hazards (628b04a)
• source-edit: scope-aware rename collision hazards (eaaf0c0)
• storage: adopt through anchors only with remote agreement (c4c58c5)
• storage: clear profile pins when a lost runtime is evicted (05a8f65)
• storage: close a lost file's readers before its key reopens (5f2a7b1)
• storage: close a lost file's readers before its key reopens (b1678f6)
• storage: close the lost writer and report FileLost to waiters (46722b3)
• storage: close the lost writer and report FileLost to waiters (9bb55f0), Refs #4280
• storage: discard queued commands when a pool task stops (7e6a97c)
• storage: drain without holding the state lock across the join (e1fc4bb)
• storage: keep store pool threads free of sync waits (0d505ca)
• storage: keep the scoped-reset refusal for non-SQLite stores (3211abd)
• storage: preserve clone adoption and registry lifecycle (81a1d23)
• storage: preserve clone adoption and registry lifecycle (fc9147a)
• storage: refuse or adopt every sync wait on a pool thread (b18a826)
• storage: retain native roots during registry reaping (4e7dd78)
• storage: retry writer queries across WAL recovery on the pool (6c6c556)
• storage: revalidate reap plans before deleting registry rows (aa9275f)
• storage: revalidate registry reap candidates before applying (7e7d200)
• storage: size free pages from the header, not a reader (5daa37d)
• storage: size the store pool to the host, at least six threads (84f8994)
• storage: withdraw only the roots a registration added (59b1b73)
• telemetry: stop re-walking stores too large for dbstat (073c00a)
• tests: hold the dashboard fixture shard its marker names (994e070)
• tests: hold the dashboard fixture shard its marker names (1e34ead)
• work: cover app-server cancellation through the production spawn path (c167057)
• workflow: skip fan-out children that settle before fail-fast (e60da70)
• work: let the coordinator deadline seal app-server timeouts (f147373)
• work: make managed placement roots exclusive across actors (84a4321)
• work: make placement root exclusive across actors (e84ff03)
• work: preserve storage failure causes, narrow version conflicts (4193608)
• work: preserve storage failure causes, narrow version conflicts (880c312)
• work: settle dispatch past a dropped caller, block off workers (b888a2f)

Performance Improvements

• configuration: avoid runtime rebuilds during claim checks (14bdcf6)
• sessions: pin Codex discovery pages outside the hub lock (f2057f2)
• sessions: pin Codex discovery pages outside the hub lock (f9bfc82), Refs #4176
• sessions: wait for git evidence reads off the native worker (4ea3c25)