feat: TraceDecay V2 delivery (PR8–PR13) + daemon performance, memory, and reliability overhaul

[ScriptedAlchemy]

Order 25 — perf routing (2026-09-16; #707 held)

Finding	Ticket / draft	Owner lane	Status
Deferred query mount Notify (r4023832024)	#1391	fcb451b2 /fast/tmp/td-1391-deferred-mount	assigned
Candidate-batch cancel (r4023833605)	#1392 / #1372 / #1385	b0c507d5 /fast/tmp/td-1385-token-cutover	assigned expand
rebuild/freshness clones (r4023833146)	#1368 + #1389	existing	parked mapping
Discovery queue merge (r4023846345)	—	—	DISMISS; git-discovery deadline/single-flight only
fastembed residue (r4023833721)	#1393	qualification owner	assigned ticket
Lexical / ast-grep / grep alloc hypotheses	measure then split PRs	61f929fb /fast/tmp/td-707-perf-profiles	measure-first; report tables; no PR from static counts
New ETag/cache-header subsystem	—	—	NON-ACTION (SSE path via #1389)
#1388 → #1395 direct-seal admit	#1395	3ec8d342 /fast/tmp/td-1394-seal-admit	replacement owner; keep graph-db gate; measure ≥5 runs

Perf tables

| #1397 @ 407a7ba897 owner 304d4726 | search-qual residue | audit e339e1a2 | HOLD — deletion-first. Contradicts audit (types tautological DecisionPolicy). Rework per PR body hold: keep model-free eval/provenance; delete methodology + policy fields/callers + false-pass report + dead deps/fixtures; rename validate_workload; 67/34/33 + real failed count; NL metric / protected hard; provenance evidence-only; nDCG explained; drop new tautology enums; fix digest; 2 reviewers. Escape: close #1397 → clean smaller deletion PR. |
| #1396 @ dd4a8ec09f | clone table batch | Fable f6d91bcf | HOLD (PASS+). Collision-branch tests; typed conflict policy (no raw SQL); search_quality_suite v16 non-vacuous; r4/r8 ≥3-run before/after; no merge without measured win; successor out of scope. Owner 055650a8 /fast/tmp/td-1396-clone-batch. |
| #1400 | ci beta retarget | — | CLOSED unmerged. #707 held; automatic beta publication not authorized. Do not reopen without explicit release authorization. |
| #1401 @ 395a090713 | Hawk fail-closed | coordinator hold | HOLD. Keep delete fake seed + no continue-on-error. Invalid: Hawk out of PR CI for backlog red. Rework fail-closed affected-scope PR check (changed-surface authority); no fake bundle; no hidden #707 reds; scheduled full workspace supplements only. Escape: close rather than optionalize. Owner a5193afd /fast/tmp/td-1401-hawk. |

Order 25 census 2026-09-16T08:41Z (tip 82cb66a2e5)

Merges this turn: 0 (no exact-head PR had APPROVED reviews + green evidence).
Closes this turn: 0 new (evidence #1367/#1369/#1378/#1381 already closed earlier; #1394 already closed as #1389 donor).
#707: draft=true MERGEABLE HELD.

Lane	Head	Owner	Plan
#1368	b539a34d08 draft	prior owners stale; needs live typed-admission finish	draft until 2 reviews
#1377	7ed395cd04 ready-not-draft	#1103 seat	45s lifecycle required; reviews COMMENTED only
#1382	70da34eb12	delivery WT	server proximity hold
#1383	14609f4f66	pass3	typed acceptance
#1385	8285bf92da	b0c507d5	token+batch cancel
#1386	2d5e3e8506	e3a7d459	fsync hold
#1389	c1f39dce14	96c4848e	UI truth
#1395	issue	3ec8d342	seal admit perf
#1396	dd4a8ec09f	055650a8	Fable PASS+ hold
#1397	407a7ba897	304d4726	deletion-first
#1399	b1757ef2ce	94733c50	Kimi review
#1401	395a090713	a5193afd	Hawk scoped
#1402	ae5b00b5d7	87ed9ad2	deferred wake
#1403	735038d3f4	1010ad71	decode batch
#1407/#1408	new issues	61bf0837 / 7d4c615f	discovery deadline pair
#1355	issue	16486204	truthful partial impl
#1409/#1410	new issues	9fa0b51f / 0ba3cc10	Kiro / NonCanonical

Privacy history audit 2a59924a pending — no history rewrite without explicit destructive approval. #863 remains open.
| #1414 | #1410 NonCanonical | 0ba3cc10 | DRAFT. Typed NonCanonicalCloneBodyOrder; acceptance unchanged; keep draft until 2 reviews+CI. |

[changeset-bot]

🦋 Changeset detected

Latest commit: 35c241a

The changes in this PR will be included in the next version bump.

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[ScriptedAlchemy]

Post-reopen correction pushed in a23f86a: source-neutral background reconcile no longer advances the scheduler epoch and cancel in-flight text activation; mounted hook overflow uses the explicit invalidating path. Evidence: RED reproduced 0/1, GREEN 1/1 for ordinary_background_reconcile_does_not_supersede_in_flight_text_work; cargo check --lib --locked passed.

[chatgpt-codex-connector]

💡 Codex Review

tracedecay/.github/workflows/release.yml

Lines 408 to 411 in fc20c4f

	if [[ -n "${{ steps.target-runtime.outputs.runtime_library }}" ]]; then
	companion_args+=(
	--companion
	"${{ steps.target-runtime.outputs.runtime_library }}=${{ steps.target-runtime.outputs.runtime_entry_name }}"

Install the bundled Linux runtime beside the binary

For Linux targets, this archive now contains libonnxruntime.so.1, and the verification step succeeds only while that companion remains beside the $ORIGIN-linked executable. However, install.sh lines 80-84 extracts the archive and copies only tracedecay into the install directory before deleting the temporary directory. On systems without a compatible system ONNX Runtime, binaries installed through the advertised script will therefore fail in the dynamic loader even for --version; install the companion library beside the executable or use a layout whose runtime search path matches the installed location.

---

tracedecay/release-please-config.json

Lines 22 to 25 in fc20c4f

	{
	"type": "json",
	"path": "server.json",
	"jsonpath": "$.version"

Advance the SDK version in release PRs

The new npm publication job derives its version from the packed sdks/typescript/package.json, but this release-please list updates only the root manifest, CLI manifest, and server.json; the SDK manifest and lockfile remain fixed at 0.1.0. Starting with the release after 0.1.0, the job will either fail its different-integrity check for @tracedecay/sdk@0.1.0 or no-op for identical bytes, so no SDK version corresponding to the new stable release is published.

---

tracedecay/dashboard/src/workspaces/delivery/DeliveryPage.tsx

Lines 80 to 82 in fc20c4f

	const overview = useQuery({
	queryKey: ['delivery', 'overview'],
	queryFn: () => fetchEnvelope('/api/delivery/overview', DeliveryOverviewV1Schema),

Scope Delivery queries to the selected project

When the scope bar selects a project other than the active project, this query keeps the same cache key and continues fetching the unprefixed active-project route. The dashboard already provides scopeKey and scopedUrl, and the backend mounts /api/projects/{id}/delivery/overview; without using them here, the page labels the selected project while showing another project's Git, CI, and release data, and switching scopes does not trigger a refetch.

---

tracedecay/src/tracedecay/lifecycle/registry.rs

Lines 118 to 122 in fc20c4f

	let digest = RegistrationDigest {
	project_id: project_id.to_string(),
	canonical_root: registration_root.to_path_buf(),
	git_common_dir: git_common_dir.clone(),
	tracked_branches,

Include Git remote identity in the registration digest

When origin changes via git remote set-url without touching branch metadata or store artifacts, this digest remains identical, so the cache returns at lines 130-131 before git_remote_url is recomputed at line 147. The registry consequently retains the old remote and its alias, causing remote-based cross-project resolution to reject the new identity or continue resolving the stale one until an unrelated artifact changes; include the normalized remote in the digest.

AGENTS.md reference: AGENTS.md:L159-L161

---

tracedecay/plugin/cursor-native-extension/src/extension.ts

Lines 187 to 189 in fc20c4f

	private sendCurrentDiagnostics(): void {
	const uris = vscode.languages.getDiagnostics().map(([uri]) => uri);
	this.sendChangedDiagnostics(uris);

Batch startup diagnostics instead of dropping the tail

At activation or language-client restart, getDiagnostics() can return more than 32 document URIs, but this passes the entire list to limitAdmittedNativeDiagnosticDocuments, which permanently slices it to the first 32. Documents after that boundary are never synchronized unless they later emit a diagnostic-change or open event, leaving TraceDecay's native diagnostic state incomplete indefinitely for larger workspaces; split the startup list into bounded batches instead.

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[ScriptedAlchemy]

#733 landed Clippy-red. Helper branch (not merged, shared checkout untouched):

cursor/707-clippy-after-733 @ latest HEAD of this PR (186880e550)

Clears the #733 Clippy denials:

• nest Unbound | Unavailable or-patterns
• collapse nested hint/witness and session-drain ifs
• box SessionGraphAttachmentStateV1::Attached so the enum is not 808B

Adopt when you want:

git fetch origin cursor/707-clippy-after-733
git merge --ff-only origin/cursor/707-clippy-after-733

I will not land this on #707.

[ScriptedAlchemy]

Clippy helper is now on the Codex worktrees (still not landed on this PR head):

• relocate /fast/projects/tracedecay/.codex-worktrees/root-package-relocation @ 806b8c74ef (cherry-pick of 3293045f53)
• post-721 /tmp/tracedecay-integrate-post721-707-a1 @ 127ab57fae (ff to 186880e550 then same cherry-pick)

Same change as cursor/707-clippy-after-733. I will not push/merge this onto #707.

[ScriptedAlchemy]

Isolated post-#721 verification (worktree /tmp/tracedecay-integrate-post721-707-a1, CARGO_TARGET_DIR=/tmp/td-post721-isolated-target):

Green (non-vacuous) on merge 3b1baaee82 / later 127ab57fae:

• tracedecay-graph-db --lib 87
• tracedecay-runtime-core --lib 677
• tracedecay-usecases --lib 837 (+1 ignored)
• tracedecay-code-index --lib 177 (+1 ignored)
• sealed_publication_tests 3, daemon::scheduler 33, session_runtime 1, sealed_projection_deadline_tests 1
• late-bind native_declared_topology_projection 12

Not green

• --all-features cannot compile tracedecay-rusqlite-runtime (admission.rs:120): hotpath::mutex! vs std::sync::Mutex because graph-db enables hotpath/hotpath without tracedecay-rusqlite-runtime/hotpath.
• daemon::tests::scheduler 11 passed / 11 failed. Failures are scheduler_config::*: ensure_worker_plan — profile code-index worker plan was not installed during daemon bootstrap (plus one writer-gate timeout and one missing scheduler key). Production bootstrap.rs still calls install_profile_worker_plan; the test daemon path does not.

Clippy helper remains on this tree at 127ab57fae / relocate 806b8c74ef. Not pushed to this PR head.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-17T09:20:02.294567Z	35c241a	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.