chore(release): release 1.0.0-beta.66

[ScriptedAlchemy]

🤖 I have created a release beep boop

1.0.0-beta.66 (2026-10-02)

⚠ BREAKING CHANGES

• code-index: the sealed generation format moves to revision 19. Revision-18 generations are refused as superseded and rebuilt from source once.
• lcm: LCM schema 14. Session stores at LCM schema 13 (every profile written since v1.0.0-beta.50) refuse session features as reset-required for the LCM component (found 13, required 14) until tracedecay wipe --stale --yes resets exactly those session stores. LCM-created sessions carry their store's project or profile scope.
• code-index: code_graph_serving gains the warming state. Clients treating every state other than ready as unactivated should treat warming as activated. The TypeScript SDK moves to 0.15.0.
• lsp: test-run expansion handles move to schema version 2 and handles issued before the upgrade are denied. Projections for a project with no recorded run defer with managed-test-run-unrecorded, and a run the daemon never settled defers with managed-test-run-abandoned, instead of managed-test-run-frontier-expired.
• sdk: CodeIndexFreshnessCoverageV1 gains partial_omitted_sources, which a fresh generation reports when its snapshot omits unrepresentable or privacy-withheld sources; such a read is still current. Worktree freshness gains omitted_sources and tracedecay_files gains worktree_omitted_sources. The sealed code-index format moves to revision 18, so existing generations rebuild from source. The TypeScript SDK moves to 0.13.0.
• mcp: RequestCostReceiptV1 and the tracedecay_cost trailer carry a required catalog_symbols count; previously recorded receipts without it no longer decode.

Features

• remote: publish the first writer authority via the daemon (#2857) (282a0c7)

Bug Fixes

• automation: type backend failures at their source (#2831) (03c04f1)
• capture: remove stale synthesized-id import (06b56fd)
• ci: keep vendored dependency artifacts in rust-cache (#2920) (b45a7c7)
• ci: make hosted Hauler lanes pass on a sandboxed ARM host (#2924) (a328d34)
• cli: remote spawn_blocking and LCM reset remedy (555db0e)
• cli: run remote blocking client off async runtime (de21493), Refs #2808 #2805
• cli: serialize owner heap deletion with thread teardown (#2863) (a08ceeb)
• cli: wipe all profile state and census refused ledgers (#2915) (2ad49b5)
• code-index: authenticate base pages before allocation (5744b5e)
• code-index: bound page reads and endpoint admission (832b16c)
• code-index: carry non-UTF-8 status changes byte-exact (6343b79)
• code-index: compile resolution gauge only with hotpath (21be3b3)
• code-index: disclose call sites relations cannot bind (#2922) (0ea316b)
• code-index: end every seat wait through one authority (#2823) (60fce0d)
• code-index: expose page footprint emission (6110242)
• code-index: keep predecessor through failed decode (6e24cea)
• code-index: keep predecessor through failed decode (4fd8349)
• code-index: preserve sparse evidence on older Git (#2869) (6f99af4)
• code-index: publish failed mounts through status (10e84bf)
• code-index: publish failed mounts through status (3c6389a)
• code-index: record unrepresentable Git paths as omitted sources (8b817f6), Refs #2721
• code-index: release superseded predecessor seat (#2826) (c7ac4cd)
• code-index: replay the published generation over an older head (#2927) (730026c)
• code-index: report a released graph as warming (#2910) (9478068)
• code-index: retain static admission identity (d232ee7)
• code-index: share emitted page footprints (db57391)
• code-index: surface mount failures across waiters (16cd132)
• code-index: verify independent graph page segments (36d7320)
• code-index: wait for memory without renewing or self-waking (#2938) (f064d6c)
• code-index: wait out a held store lock on follow-ups (1db05cb)
• code-index: wait out a held store lock on follow-ups (e0fb1eb), Refs #2797
• code-index: wait out in-flight mount retries in readiness (4543a4d)
• code-index: wait within the read budget for a graph re-warm (#2942) (482b179)
• code-index: withdraw unsafe carried lexical artifacts (2d27d53)
• codex: capture tool-call arguments so commands are findable (#2899) (9df726f)
• daemon: control only the systemd unit this profile owns (#2931) (60f4b93), Refs #2919
• daemon: derive owner session-store admission from tool declarations (d730bc2)
• daemon: derive session-store admission from tool declarations (ee5fca1)
• daemon: drop the unreachable read-only open fallback (11d0a36)
• daemon: finish typed project-open classification (687ee4c)
• daemon: type project-open and tool error classification (c97198b)
• daemon: type project-open errors and classify tool errors (95a78ac)
• dashboard: name the opening publication test slot (9064ff7)
• dashboard: publish session authorities from project open (3cd1bb9)
• dashboard: publish session authorities from project open (e80d5fc)
• dashboard: show failed-mount retry command (17f8f11)
• dashboard: treat omitted-source coverage as current (3b7f846)
• doctor: keep the live runtime finding healthy (#2917) (f69f94d)
• fs: restore stamp-granularity settling reverted by #2957 (#2967) (6e9e71c)
• fs: settle cached stat identities by stamp granularity (#2955) (8b6735b)
• global-db: reset a refused profile authority on its own (#2902) (aa6af67)
• graph-db: bound pinned endpoint row reads (0508ea0)
• graph-db: seal string values over 64 KiB without panicking (#2936) (899e117), Refs #2908
• hooks: bind spool checkpoints and appends to record content (#2901) (cfb7a52)
• hooks: surface hook receipt drain failures on status (#2833) (007a6d5)
• hosts,sessions: Hermes pycache cleanup and session test flakes (4d02e1b)
• hosts,sessions: Hermes pycache cleanup and session test flakes (0f4bd88)
• lcm: retain shipped profile admission (cf4b1a2)
• lcm: store LCM sessions under their store scope (#2864) (9431f86)
• lsp: read managed test runs from their durable record (d15dd4f)
• mcp: bind files omissions to the served generation (2edfa35)
• mcp: classify response-handle errors by type (4e366fd), Refs #2796
• mcp: give tracedecay_files the code-index freshness reader (41038da)
• mcp: probe freshness where every graph read is served (#2921) (3e91b3f)
• mcp: refresh daemon-routed reads (78ad299)
• mcp: refresh routed project reads (e28e53b)
• memory: resample unthrottled after allocator trim (#2859) (cdf251a)
• memory: retain cgroup pressure after allocator trim (e969511)
• memory: retain cgroup pressure after allocator trim (1bdded9)
• opencode: bound hook child lifetime and cancel on disposal (09e6fd3)
• opencode: complete unsupported LSP removal (6a38fe2)
• opencode: diagnose legacy registrations without native MCP (6003e9e)
• opencode: evict empty guidance queues before pending feedback (dabaa02)
• opencode: isolate Core migration and bound session guidance (85c0fcf)
• opencode: retain in-flight guidance until hook settlement (4fb6b29)
• opencode: retain legacy migration detection (e801851)
• opencode: transfer hook ownership when sessions move (8ac6b83)
• privacy: redact escaped structured credentials (907b8ee)
• privacy: redact JSON and TOML values at their parser spans (472b3a5)
• privacy: redact structured secrets at parser spans (c6c2359)
• privacy: scan decoded root array scalars (3750ffc)
• project: normalize profile roots before shard admission (89d5942)
• project: normalize profile roots before shard admission (8d35880)
• project: use daemon identity path authority (d20fa95)
• query: witness artifact restores only on settled ctime (#2954) (ed324f1)
• rusqlite-runtime: reply to exact SQL after recording telemetry (#2937) (880ab70)
• sessions: bound workflow search by observation (e065b17)
• sessions: coalesce search rows by observation (3a1dba4)
• sessions: dedupe only goal facts rendered as goal rows (ac1c77f)
• sessions: dedupe search rows by observation (0a37d40)
• sessions: detect workflow-only predecessor state (a63f375)
• sessions: drop multi-output bookkeeping from occurrence persist (b578761)
• sessions: finish canonical observation search (3446fdd)
• sessions: finish Kimi state in the admitting pass (#2845) (f3cd493)
• sessions: iterate host-unrecorded tool names (8403197)
• sessions: keep workflow facts absent from transcript rows (fe8ab61)
• sessions: make JSONL build gates one-shot in tests (#2929) (fa6678c)
• sessions: order grouped workflow facts canonically (469de67)
• sessions: order projection identity by output (6dc2f29)
• sessions: project one searchable row per observation (29c554f)
• sessions: project snapshot-host task location into session metadata (#2900) (ad14e40)
• sessions: rebuild shipped message projections (48ffb71)
• sessions: replay an applied relation receipt on retry (4fe17ab)
• sessions: replay an applied relation receipt on retry (9b56781)
• sessions: restore codex rows and AND workflow search (#2926) (9bf64e1)
• sessions: retain deduplicated goal observations (b746fcd)
• sessions: retain matched workflow metadata (f1155df)
• sessions: return one search row per observation (05be81d)
• sessions: type grouped workflow results (257b309)
• store-runtime: census every project sessions store up front (#2913) (ea5f7b0), Refs #2898
• store-runtime: clear clippy findings in seal graph build (2c6ae6b)
• tests: make flake checks signal-driven (0e2bdbf)
• tests: make load-sensitive flake checks signal-driven (a69c802)
• tests: remove load-sensitive flake assertions (2f62549)
• windows: link mimalloc and build grammars as UTF-8 on MSVC (#2896) (ecde2a7)

Performance Improvements

• code-index: admit the selected graph page plan (a7ba768)
• code-index: bound graph builds by streamed pages (603e33a)
• code-index: content-address graph output pages (5f5aa94)
• code-index: materialize only changed refresh pages (952a2fa)
• code-index: read each sealed segment once per text build (#2943) (dcbf5e8)
• code-index: read only changed graph pages (55abc94)
• code-index: reuse changed resolution outputs (cbbbf69)
• code-index: reuse unchanged graph page segments (da2aa88)
• code-index: seal cross-file evidence per file (#2951) (455d41d), Refs #2906
• code-index: size streamed graph spill state (2b20c78)
• code-index: stream changed graph pages (aecef2a)
• global-db: seek resumed audit suffixes by rowid range (#2950) (3b1dbdc)
• graph-db: measure engine memory once per store epoch (#2895) (13c58ac)
• graph-db: point-read unchanged layer endpoints (86f5214)
• mcp: read project-info symbols from the census (f21f20e)
• rusqlite: reuse the warmest reader connection first (896d03f)
• rusqlite: reuse the warmest reader connection first (2092613)
• sessions: carry JSONL resume digests, bound prior context (#2837) (796da2c)
• sessions: keep writer reads on covering-index paths (#2928) (163531f)
• store-runtime: census only unadmitted session stores (#2957) (08f8fac)
• store-runtime: size the writer page cache from the schema (#2948) (f0df9bc)

Build System

• sdk: move the TypeScript SDK to 0.13.0 (ed40b09)

---

This PR was generated with Release Please. See documentation.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 82c16b4

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 1 new potential issue.

🐛 1 issue in files not directly in the diff

🐛 Release builds blocked by stale lockfile

With the workspace at beta.66, Cargo.lock records beta.65 for three workspace packages. Locked Cargo builds and the release integrity check fail.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 1 new potential issue.

⚠️ 1 issue in files not directly in the diff

⚠️ Release lockfile blocks locked builds

With workspace version 1.0.0-beta.66, the three reverted Cargo.lock entries remain at 1.0.0-beta.65. The release integrity check fails, and cargo --locked cannot build the release.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 1 new potential issue.

⚠️ 1 issue in files not directly in the diff

⚠️ Release builds reject the stale lockfile

With workspace packages at beta.66, Cargo.lock records beta.65 for three packages. The release integrity check fails, and locked builds cannot use the release manifest.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 1 new potential issue.

⚠️ 1 issue in files not directly in the diff

⚠️ Release lockfile blocks locked builds

With Cargo.toml at beta.66, Cargo.lock lists three workspace packages at beta.65. The release integrity check rejects the mismatch, and locked builds cannot proceed.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 1 new potential issue.

🐛 1 issue in files not directly in the diff

🐛 Release builds reject stale crate versions

With the workspace at beta.66, Cargo.lock still pins three workspace crates to beta.65. Cargo rejects --locked builds, blocking the release pipeline.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 1 new potential issue.

🐛 1 issue in files not directly in the diff

🐛 Stale lock versions block beta release

With the workspace at beta.66, Cargo.lock records beta.65 for three product crates. The release integrity check fails, and --locked release builds cannot resolve the workspace.

1 flag not posted on this PR by your GitHub settings — view it in Devin Review. (Configure)

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 1 new potential issue.

🐛 1 issue in files not directly in the diff

🐛 Stale lockfile blocks beta.66 release

With Cargo.toml at beta.66, Cargo.lock records beta.65 for all three versioned workspace crates. The release integrity check rejects the mismatch, and cargo --locked cannot build the release.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 1 new potential issue.

🐛 1 issue in files not directly in the diff

🐛 Stale versions block locked release builds

With workspace manifests at beta.66, Cargo.lock still records beta.65 for three local crates. Cargo refuses --locked builds, and the release integrity gate rejects the release.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 1 new potential issue.

🐛 1 issue in files not directly in the diff

🐛 Stale lockfile blocks beta release builds

With the workspace at beta.66, Cargo.lock still records beta.65 for three workspace crates. Cargo rejects the mismatch under --locked, so the beta release cannot build.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 1 new potential issue.

⚠️ 1 issue in files not directly in the diff

⚠️ Release lockfile blocks version checks

With the workspace at beta.66, Cargo.lock records beta.65 for three released crates. The release integrity gate rejects the mismatch, blocking the release.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 1 new potential issue.

🐛 1 issue in files not directly in the diff

🐛 Stale package versions block release builds

With the workspace at beta.66, Cargo.lock still pins tracedecay, tracedecay-cli, and tracedecay-project to beta.65. Cargo's locked builds reject the mismatch, blocking CI and release artifacts.

[devin-ai-integration]

Devin Review found 1 new potential issue.

🐛 1 issue in files not directly in the diff

🐛 Locked release builds reject stale package versions

With Cargo.toml at beta.66, Cargo.lock records beta.65 for tracedecay, tracedecay-cli, and tracedecay-project. Locked CI and release builds fail before producing a binary.

1 flag not posted on this PR by your GitHub settings — view it in Devin Review. (Configure)

[ScriptedAlchemy]

🤖 Created releases:

• v1.0.0-beta.66

🌻