Retain Devin commits from the native watermark second, preserve source
completion across bounded and signal-driven stops, and repair stale initial
analytics cursors without double-counting. Expose pending OMP analytics in
status/doctor/validation and complete all projections under the existing
maintenance lock while preserving published search and canonical identities.
Keep statistics errors and ordering truthful; combine unfiltered conversation
scans without claiming a measured speedup. Extend real CLI coverage for
deferred analytics, WAL appends, replay, interrupted resume and timeout output.
RCH v8c: STAGE=fmt EXIT=0; STAGE=clippy EXIT=0;
STAGE=lib-tests EXIT=0 (225 passed); selected integrations86 passed;
STAGE=goldens EXIT=0 (68 passed). Original OMP helper failed by reading the
wrong error stream; its retained test-only follow-up passed1/1 with
STAGE=fmt EXIT=0, STAGE=clippy EXIT=0 and STAGE=test-connector_omp EXIT=0.
All remaining runtime inputs and application ELF were unchanged.
Full gate is RED: STAGE=ubs EXIT=1 (Rust300s timeout; original Python warning).
The separately reviewed Python line pragma passed its pinned strict scan and
16 controls. This does not clear Rust UBS or authorize publication.
Large-copy stats10.25s/1498792KiB showed no clear improvement.
All26 original issue acceptances remain open; no release or native proof.
Broad receipt SHA256: d9552cf8bd1bf7b31766b141594513c19212c7fd575cc8ebc1a9c149117014ef
OMP receipt SHA256: f51bc7bb92563b1f574779024377f939be13f0e4ee9c4592ffe33a0c758f2135
Application SHA256: 1182c93d1ba643a1988cb628796d6e33a29c2fed6fd81ca16d5f9af4f75d4241
json_document raises ValueError with line/column only, so a malformed
inventory or remote command receipt stays in its existing file. Sync,
discovery, Tailscale baseline, and mirror-reingest all use it. UBS
acceptance asserts that require JSON booleans and exact identity sets
are marked ubs:ignore so the scanner does not rewrite them.
Enable FAD 0.2.4 `shelley` in Cargo.toml/build.rs and document CASS_SHELLEY_DB
defaults, live WAL/SHM watch, CASS_SKIP_SUBAGENTS parent-ID skip, and the
sensitive-container policy. Raw mirroring and remote DB ingest stay disabled
for Shelley; doctor will not promote a Shelley file into a repairable mirror
(GH#415 / 3kde4).
sources reingest --source now selects remote roots instead of only narrowing
the report, preserves local watermarks so later ordinary indexing still finds
local history, fails mixed valid/unknown names before archive creation, hashes
configured paths including a bare `~`, and no longer opens the database before
the index lock (av59c). Live-fleet harness resolves TMPDIR before the
containment check so a symlink cannot plant the private inventory in-tree.
Current-schema archive opens use schema-only admission and skip whole-database
hydration while keeping required migration/repair checks (#443/#450). Semantic
backfill rebuilds the known legacy hash-vector format; on Unix an unchanged
completed backfill can skip canonical replay, bound to archive/WAL/vector and
producer identity. That cache is a maintenance skip hint, never search-serving
authority (#458). Combined remote validation and remaining issue closure are
not claimed.
merge_tailscale_hosts deserializes TailscaleIPs as Option<Vec<IpAddr>> so JSON
null or a missing field skips that peer instead of rejecting the whole status
document. The mixed-peer unit test now includes an online peer with null
addresses.
The live harness compares (source_id, path, line, origin_host, content)
across global, source-scoped, and default-hybrid hits, not just identity
triples. CHANGELOG/CHANGELOG_RESEARCH record the 02:45 UTC review: 91 tests,
nine authenticated machines, tenth still needs auth, UBS MODULE_TIMEOUT.
Final ELF 7241298dc93353fe3aef6456c092bef5ac87c36831e43a84b9c6f990551268d4.
Does not close av59c. Skip .release-format/.
wait_for_child_output_with_timeout now wraps wait_for_child_output_with_limit
(unlimited). When max_bytes is set, each pipe reads at most limit+1 then
drains the rest to sink so a chatty child cannot deadlock on a full pipe;
overflow is InvalidData. Tailscale status already calls the limited helper.
Unix tests: 4-byte limit keeps 1234/abcd, rejects 5-byte stdout or stderr,
and still times out after overflow plus sleep. The live harness catches
Exception (not a short list) so unexpected failures write failure.json
without printing private paths.
Skip .release-format/.
parse_ssh_config now closes the current Host set on Match so conditional
options cannot attach to the preceding literal alias. Host tokens are split
with shell_words (quoted aliases), stop at comments, and reject glob/negate/
unsafe/leading-dash names. Hostname/User/Port/IdentityFile keep the first
value so a later HostName cannot overwrite a quoted address.
sources discover --skip-existing treats a host as configured when the source
name matches or the SSH target host (after user@) matches the discovered
name/hostname, so a Tailscale IPv4 peer that is already operator@example
is not offered again. JSON already_configured uses the same predicate.
will_reindex is true only when indexing will actually run (files > 0).
The discover next-step hint uses cass sources add <user>@<host> --name --path.
Tests: Match+quoted HostName first-wins still surfaces the extra tailnet
peer; --skip-existing --json reports all_existing for a configured target.
The live harness requires source-scoped identities to equal the global hit
set, refuses PYTHONOPTIMIZE, and maps invalid inventory/config to a parser
error without printing private paths.
Skip .release-format/. Does not close av59c.
CHANGELOG notes optional sources discover/setup --tailscale IPv4 merge with
SSH-config fallback. CHANGELOG_RESEARCH records that the new capability is
not covered by the earlier nine-host SSH proof; a frozen remote gate and
private live tailnet run are still pending.
The live harness --tailscale path now compares against SSH-only discover and
requires at least one inventory target that is absent from configured SSH
aliases, so a run cannot pass on SSH-config discovery alone.
Does not close av59c. Skip .release-format/.
sources discover --tailscale --json with an empty PATH keeps the SSH Include
hosts and reports discovery_warning containing "could not start", using a
missing executable directory rather than a fake tailscale binary.
The live-fleet harness gains --tailscale: discovery then requires
--tailscale and an empty discovery_warning. Inventory SSH targets are
expected to be tailnet IPs when that flag is set. Default runs stay
SSH-config-only.
Does not close av59c. Skip .release-format/.
Discovery previously always read ~/.ssh/config and ignored Include files, so a
private override that transport already used produced an empty host list while
direct SSH through the same file worked. Discovery now follows the same
CASS_SSH_CONFIG / ssh_config_override path, concatenates Include fragments with
bounded recursion (depth 16, 256 files, 1 MiB), skips duplicate aliases, roots
relative Includes at ~/.ssh per ssh_config(5), and never executes Match exec.
sources sync --json and sources reingest --json used to print a premature sync
document and then a second indexing document. run_index_with_data now accepts
an optional captured_result so robot sync/reingest emit one nested payload.
Indexing lock refusal reports status index_failed with indexing.code 7 and
keeps the nonzero exit, rather than advertising completed indexing.
The live-fleet harness wraps the operator SSH config with Host
cass-live-unreachable, records discovery-pending ordinals, holds
index-run.lock via fcntl, asserts expected_exit 7/8, numbers append events,
resolves ssh -G users instead of substituting the runner, and checks default
hybrid identity against lexical hits. README documents the opt-in inventory
outside git (example hosts laptop/workstation, not css/csd/yto). CHANGELOG
and CHANGELOG_RESEARCH record the nine-reachable-host proof (18/18/18/27/36
hits; busy exit 7; refused-SSH exit 8) and the 9lz4y rustfmt-only doctor
collector already on main.
Tests: sources_discover_uses_private_ssh_config_override_and_includes and
sources_reingest_json_preserves_index_result_and_busy_exit.
Does not close av59c: UBS MODULE_TIMEOUT, auth-blocked tenth host, and
setup-timeout host selection remain open. Skip .release-format/ scratch.
scripts/e2e/live_fleet_search.py takes --inventory and --cass-bin. The
inventory file must live outside the repo with mode 0600. Each host gets
a fresh cass-live-fleet temp dir and a synthetic Codex rollout session;
only those sessions are transferred. Strict host-key checks, no archive
edits, no file deletes. Console output uses ordinal host labels, never
identities. Unreachable hosts fail the run rather than skip. Skip
.release-format/.
The v0.4.3 CLI surface added aliases (cass index, robot docs topics, current
session shorthands, html export, query, search hit source, line_number
drill-down) and the new robot-trace-ingest flag. The supporting shell
scripts get aligned with the canonical names so the e2e and CI scripts
keep matching what the binary actually accepts.
Touches:
- scripts/e2e/connector_stress.sh, query_parser_e2e.sh,
security_paths_e2e.sh, e2e_logging_acceptance_test.sh,
full_coverage_validation.sh: invoke the new alias-free canonical CLI
forms and consume the v0.4.3 robot envelope fields.
- scripts/test-all.sh, scripts/test-pages-e2e.sh, scripts/tests/run_all.sh:
pick up the new test files (tests/cli_index.rs, doctor_e2e_runner.rs,
e2e_search_index.rs, e2e_tui_smoke_flows.rs, metamorphic_introspect_schema.rs)
in their shard plans.
- scripts/validate-e2e-jsonl.sh: handles the new ingest-trace NDJSON shape.
- scripts/validate_ci.sh: minor flag-set update to match the v0.4.3 CLI.
No production behaviour change here — these are CI/test plumbing edits.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This lands the long-running "doctor v2" effort (tracked in
docs/planning/DOCTOR_V2_RELEASE_CHECKLIST.md). It reshapes `cass doctor`
from a flat "check + auto-fix" command into a typed surface of bounded
operations whose recovery model is **archive-first**: cass-owned evidence
(archives, raw-session mirrors, backups, receipts, source ledgers) is
preserved before any repair runs, and every mutating action goes through a
plan-fingerprint candidate flow that the operator must inspect and approve.
==== New / changed doctor surfaces (`src/doctor.rs`) ====
DoctorCommandSurface now enumerates: Diagnose, Check, Repair, Cleanup,
**ArchiveScan**, **ArchiveNormalize**, Backups, Reconstruct, Restore,
SafeAutoFix, Init.
DoctorExecutionMode adds the corresponding `*DryRun` / `*Apply` pairs for
ArchiveNormalize and tightens the existing Cleanup/Repair modes around
plan-fingerprint matching. DoctorCommandRequest grows `archive_scan` and
`archive_normalize` flags and the plumbing to keep the typed surface
exhaustive (compile-time match coverage on every variant).
Repair, restore, archive-normalize, and cleanup all emit
`operation_outcome` envelopes and machine-readable receipts; the SafeAutoFix
path is preserved as the legacy escape hatch for low-risk derived-only
repairs (Tantivy index rebuild, stale lock removal) and now fails closed if
it detects archive- or source-affecting risk.
==== Source / indexer / storage hardening (`src/sources/*`, `src/indexer/*`, `src/storage/sqlite.rs`) ====
- `src/sources/sync.rs` — `remote_spec_for_scp`, `parse_remote_home_stdout`,
and friends so the SSH/SCP source-mirror path quotes remote operands
consistently and rejects ambiguous remote-home outputs (more than one
candidate path → refuse instead of guessing). Closes the #raw-mirror
scan-root capture-before-parse hole that 5c1dba9e / 5be8a6e9 first surfaced.
- `src/sources/config.rs`, `index.rs`, `install.rs`, `probe.rs`, `setup.rs`
— typed source-provider lifecycle: discovery, probe, install, setup, sync
now share a single error vocabulary the doctor surface understands so its
candidate plans can describe both what they will do and which source the
action is rooted at.
- `src/indexer/mod.rs`, `src/indexer/refresh_ledger.rs` — small fixes to
bind refresh ledgers to source-authority decisions.
- `src/storage/sqlite.rs` — extra integrity probes called by `doctor check`
before any cleanup or archive operation runs.
==== UI / HUD / CLI surface ====
- `src/ui/app.rs` — new `DoctorHudSummary` (parsed from the unified
doctor runtime summary) drives a HUD lane that surfaces archive coverage,
source-mirror state, fallback mode, sole-copy warnings, active repair and
index-maintenance, and the recommended next action. Operators no longer
have to leave the TUI to know whether running a repair is safe.
- `src/lib.rs` — large surface change: every CLI subcommand that touched
doctor surfaces is rewired through the bounded request/response types,
the new archive-scan / archive-normalize subcommands are exposed, the
receipts and plan-fingerprint payloads are emitted on stdout (json/jsonl)
with stderr reserved for fatal envelopes, and the `--robot` mode learns
the new doctor JSON shape (see golden updates).
- `src/update_check.rs` — version-check now feeds into the doctor HUD as
one of the recommended-action sources (an outdated cass that knows about
archive issues should still nudge the operator to upgrade first).
==== Tests + golden snapshots ====
- `tests/cli_doctor.rs` (+2086 lines) — behavioral coverage for every new
subcommand, plan-fingerprint mismatch handling, dry-run/apply parity,
archive-coverage gating of mutating ops, and the legacy `cass doctor`
alias mapping into the v2 surface.
- `tests/doctor_e2e_runner.rs`, `tests/util/doctor_e2e_runner.rs`,
`tests/util/doctor_fixture.rs`, `tests/doctor_fixture_factory.rs` —
end-to-end doctor harness updates: synthesizes archive trees, raw-session
mirrors, partial backups, and corrupt SQLite headers; asserts that
archive-normalize and repair never escape into source / archive paths.
- `tests/doctor_release_checklist.rs` (new) — release-gate test that
cross-checks the runbook against the implemented surfaces (every entry in
DOCTOR_V2_RELEASE_CHECKLIST.md must map to a known DoctorCommandSurface
variant; new variants must add a checklist entry).
- `tests/cli_robot.rs`, `tests/cli_status.rs`, `tests/cli_dispatch_coverage.rs`,
`tests/e2e_health.rs` — smaller dispatch-coverage / status / robot
surface-area follow-ups required by the new doctor shape.
- `tests/golden_robot_docs.rs`, `tests/golden_robot_json.rs` — assertion
helpers for the regenerated robot JSON / docs goldens.
- `tests/golden/robot/*.json.golden` and
`tests/golden/robot_docs/*.txt.golden` — regenerated for the new shapes;
`introspect.json.golden` and `introspect_shape.json.golden` carry the
bulk of the diff because they enumerate the full doctor surface +
argument schema.
==== Docs + scripts ====
- `docs/planning/RECOVERY_RUNBOOK.md` — operator runbook (referenced from
the README) describing the archive-first model, plan-fingerprint flow,
source-pruning warnings, sole-copy prompts, and the support-bundle
handoff.
- `docs/planning/DOCTOR_V2_RELEASE_CHECKLIST.md` (new) — release gate; the
new checklist test consumes this file.
- `README.md` — replaces the old single-doctor table with the v2 surface
table and updated examples (`cass doctor check --json`,
`cass doctor repair --plan-fingerprint`, etc.).
- `CHANGELOG.md` — Unreleased entry covering the archive-first
documentation and the doctor migration guidance for existing data dirs.
- `scripts/e2e/doctor_v2.sh`, `scripts/bakeoff/cass_validation_e2e.sh` —
scripted runners for the doctor v2 surface; consumed by the e2e harness
and the cass bakeoff campaign.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Two related advances on top of the doctor command surface landed in
15f6bba3:
1) Structured root-cause incidents
2) V14 → V15 migration safe re-run
src/lib.rs (+1736 LOC):
- New DoctorIncidentRootCauseKind enum with kebab-case Serialize:
derived-index-stale, derived-index-stale-after-db-promotion,
semantic-model-missing-lexical-fallback,
source-pruned-with-mirror-intact, mirror-missing-with-db-sole-copy,
archive-db-unreadable-with-valid-candidate, archive-db-unreadable,
active-lock-blocking-repair, interrupted-repair-state,
storage-pressure-derived-cleanup-available, backup-exclusion-risk,
backup-unverified, previous-repair-failed, unknown
- New DoctorRootCauseIncident struct surfaced through cass doctor
check --json: schema_version, incident_id, root_cause_kind,
severity, affected_asset_classes, archive_risk_level,
derived_risk_level, confidence, evidence_check_ids,
blocked_actions, safe_next_actions
- Replaces the prior "string-typed advisory" output so downstream
tooling (br/bv triage, ops dashboards) can pivot on the typed kind
rather than scraping wording out of free-form text
- Doctor check evaluator now classifies each evidence row into one
of the kinds above, attaches blocked_actions (e.g. cannot run
reconstruct while archive db unreadable) and safe_next_actions
(e.g. run cass doctor cleanup --derived first), and includes the
evidence_check_ids that produced the classification so the report
is auditable end-to-end
src/storage/sqlite.rs (+109 / -33):
- MIGRATION_V15 split: MIGRATION_V15_TAIL_STATE_TABLE keeps the
CREATE TABLE IF NOT EXISTS conversation_tail_state DDL idempotent.
The two ALTER TABLE conversations ADD COLUMN statements now run
conditionally via franken_table_column_names() so retrying the
migration on a partially-promoted database (where last_message_idx
was added but last_message_created_at was not, or both were added
but conversation_tail_state was not) does not error with
"duplicate column name"
- discover_historical_database_bundles comment block compressed:
the V13 / V14 / lazy-FTS reasoning is preserved but the redundant
"MIGRATION_FRESH_SCHEMA (V13) creates fts_messages eagerly..."
preamble is gone now that the gating logic itself is the
authoritative source of truth
src/doctor.rs (+12 LOC) routes the new incident report through the
typed surface so check / repair / cleanup variants all consume the
same structured payload.
src/indexer/mod.rs (+11) and src/search/asset_state.rs (+13) wire
the new incident types into the existing asset-state classifier so
"derived index stale" vs "derived index stale after db promotion"
flow into the right cleanup recommendation.
Test coverage:
- tests/cli_doctor.rs (+397/-): asserts the JSON shape, kebab-case
variant emission, and that blocked_actions/safe_next_actions are
populated for every kind
- tests/doctor_e2e_runner.rs (+154 LOC) and tests/util/doctor_e2e_runner.rs
(+378/-): drive the full check → repair plan → apply cycle
end-to-end with realistic incident states
- tests/util/doctor_fixture.rs (+117/-): adds fixtures for the
V14→V15 partial-promotion scenarios so the migration safe-rerun
is exercised in CI
- Goldens regenerated for tests/golden/robot/{doctor, doctor_quarantine,
doctor_shape, introspect, introspect_shape}.json.golden and
tests/golden/robot_docs/schemas.txt.golden — these are deterministic
outputs of the new incident schema
Cargo.toml / Cargo.lock / build.rs / README.md: bump franken-agent-
detection pinned rev to 029253c450702a... so the doctor evidence
collector can call into the new connector source-bundle inspection
helper that was added upstream.
scripts/e2e/doctor_v2.sh (+4/-): drive the new
--repair --plan-fingerprint --yes path so the existing E2E shell
script exercises the typed apply boundary, not the legacy --fix flag.
Beads update (.beads/issues.jsonl + .beads/last-touched): mark the
incident-classifier sub-bead in_progress to match the work landing.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Two coordinated additions to the doctor v2 e2e + CLI surface
that together make the doctor's failure paths first-class
testable instead of "should-never-happen" branches.
src/lib.rs (+552 net inserts)
`open_franken_cli_read_db_with_hard_timeout(path, reason,
timeout)`:
A hard-timeout wrapper around the existing
`open_franken_cli_read_db` helper. The naked open path
is dependent on frankensqlite's internal lock-contention
backoff, which can stall a CLI invocation indefinitely
if the DB file is corrupt OR if a runaway process holds
the lock with no SIGINT path. The wrapper:
- spawns a worker thread that runs the open
- sets up a `mpsc::channel`
- blocks on `rx.recv_timeout(timeout)`
- on timeout: returns a typed
`CliError { code: 9, kind: DbOpen, retryable: true }`
with a "open timed out after Ns" message — operator
can then run `cass doctor` to investigate the cause
- on Ok: returns the open conn
- on disconnect (worker thread panic): returns a typed
error rather than a panic-aborted CLI
Pulled out into
`receive_franken_cli_read_db_open_result_with_hard_timeout`
so the worker-side and recv-side can be tested
independently — the timeout / disconnect / Ok arms each
get their own unit test.
Wired into the doctor + status + history command paths
that read from the archive DB so a single corrupt-DB
scenario never wedges the entire CLI.
scripts/e2e/doctor_v2.sh (+10 lines)
`--include-failure-self-test` flag. When set, exports
`CASS_DOCTOR_E2E_INCLUDE_FAILURE_SELF_TEST=1` so the test
binary picks up the intentional-failure scenario.
Default behaviour (flag unset) is unchanged.
tests/util/doctor_e2e_runner.rs (~29 net inserts)
- DoctorE2eCliArgs gains `include_failure_self_test`
boolean.
- `selects(scenario)` widens to include scenarios labeled
`self-test` when the flag is on.
- `DoctorE2eScenarioSpec::expected_runner_status()` ->
`"pass"` for normal scenarios, `"fail"` for self-test
scenarios — pins the contract that the self-test
intentionally fails.
- New `failure_self_test_doctor_e2e_scenario()` returns a
DoctorE2eScenarioSpec named `intentional-failure-self-test`
with label `self-test` and required JSON pointers that
deliberately won't be satisfied.
tests/doctor_e2e_runner.rs (~42 net inserts)
`doctor_e2e_include_failure_self_test_selects_intentional_failure`
test: parses CLI args including the flag, builds the
scenario set with the flag-driven extension, asserts the
intentional-failure scenario is selected, and asserts
the runner records a `"fail"` status for it.
Pins the contract that the doctor v2 e2e harness can prove
its own failure-detection — running `--include-failure-self-test`
on a healthy build produces a deliberately-failing scenario
that the runner correctly reports as failed (not silently
masked).
`.beads/issues.jsonl` + `.beads/last-touched` advance one
paired touch as the metadata mirror.
Summary:
- Migrates cass semantic indexing/search internals from legacy CVVI/HNSW wrappers to frankensearch-owned FSVI and ANN primitives.
- Replaces remaining in-repo lexical helper implementations with frankensearch lexical APIs where applicable.
- Aligns daemon/indexer/perf suites with on-disk FSVI behavior, normalized vectors, and doc-id metadata parsing.
Details:
- search/query integration:
- switches query sanitization/boolean parsing/wildcard handling and tantivy query construction to cass_* helpers from frankensearch::lexical.
- removes legacy local bridge/index conversion paths and local parser helpers superseded by frankensearch.
- keeps cass-specific orchestration and filter mapping while delegating lexical mechanics.
- vector index facade:
- retires CVVI-specific structures in favor of frankensearch::index VectorIndex/Writer/SearchParams exports.
- standardizes index filenames to index-<embedder>.fsvi.
- preserves cass role-code/filter helper APIs around the new backend.
- ANN module:
- shrinks local ann_index module to diagnostics/stat payloads and path helpers.
- removes in-tree HNSW graph build/search logic now provided by frankensearch.
- semantic indexer/worker/model manager:
- builds FSVI directly via create_with_revision + write_record + finish.
- uses SemanticDocId serialization and VectorIndex::open for runtime loading and dedup hash recovery.
- updates rebuild checks to read embedder metadata from FSVI headers.
- indexer/connectors/source robustness:
- tantivy preflight now uses cass-compatible reader open helper.
- local root skip behavior only triggers when root is actually missing.
- franken-agent-detection integration now does targeted connector probing with UnknownConnectors fallback handling.
- OpenCode timestamp normalization now handles plausible seconds vs milliseconds safely.
- source install disk probe avoids HOME tilde expansion races under concurrent tests.
- benches/tests:
- regex cache bench now calls frankensearch lexical cache functions directly.
- search/memory/perf benches and property tests now generate on-disk FSVI fixtures with normalized vectors.
- semantic e2e checks updated from .cvvi expectations to .fsvi.
- semantic e2e script now verifies .fsvi artifacts.
Why:
- Consolidates core search behavior in frankensearch to reduce duplicated implementations and divergence risk.
- Moves cass onto a single canonical vector artifact format and runtime path.
- Keeps benchmark/test coverage aligned with production code paths to catch regressions in the new backend.
Implement sources_sync.sh from scratch using e2e_log.sh (was empty).
Add e2e_log.sh sourcing and standard event emission to cli_flow.sh,
semantic_index.sh, and cass_daemon_e2e.sh while preserving their
existing custom JSONL logging (Option A compatibility layer).
All scripts now emit structured JSONL to test-results/e2e/ in addition
to their custom output locations. Remove sources_sync.sh from .gitignore
since it is no longer a stub.
Closes br-20bz.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Two bugs were preventing the daemon E2E test from working:
1. Semantic indexing needed --full flag - incremental scan found no
messages because the test data timestamps were considered "old"
2. Test data filename pattern was wrong - Codex connector expects
rollout-*.jsonl, not daemon-e2e.jsonl
Also add scripts/e2e/daemon_fallback.sh wrapper so the daemon test
is included in the orchestrated E2E runner (run_all.sh picks up
scripts/e2e/*.sh).
Part of T7.3: E2E daemon fallback + health script
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Major improvements to the semantic search subsystem:
- Add fastembed-based reranker for improved result relevance
- Implement model manager for dynamic embedding model selection
- Expand indexer semantic capabilities with batch processing
- Enhance TUI with reranker-aware result presentation
- Add e2e test script for semantic indexing validation
The reranker module provides a secondary ranking pass that
significantly improves search result quality for ambiguous queries.
Co-Authored-By: Claude <noreply@anthropic.com>
Dicklesworthstone