refactor(dogfood): remove retired subsystem

Author: ScriptedAlchemy

.cargo/config.toml

@@ -35,6 +35,3 @@ TRACEDECAY_DATA_DIR = { value = "target/test-profile/.tracedecay", force = false
 # https://nexte.st/docs/installation/pre-built-binaries/
 test-all = "nextest run --workspace --all-features --no-fail-fast"
 test-ci = "nextest run --workspace --all-features --no-fail-fast"
-# Fast local iteration: build the ordinary development binary, then install a
-# stable copy through the same forward-only migration and health-check flow.
-dogfood = "run --quiet --bin tracedecay -- dogfood"

.codex/skills/dogfooding-tracedecay/agents/openai.yaml

@@ -50,8 +50,8 @@ jobs:
 
       # `build.rs` writes this stamp when it drives the npm build; the direct
       # npm build above skips it, so reproduce the exact stamp with the same
-      # Rust module. Downstream consumers (dogfood, freshness checks) require
-      # the artifact to ship a stamp that truthfully matches these sources.
+      # Rust module. The artifact must ship a stamp that truthfully matches
+      # these sources.
       - name: Write dashboard source stamp
         run: |
           rustc --edition 2024 -O build-support/write_dashboard_stamp.rs \
@@ -179,9 +179,8 @@ jobs:
 
   release-version-drift:
     name: Release Version Drift
-    # The dogfood command contract test below exercises the checkout's built
-    # dashboard bundle and its .source-stamp, so this job consumes the same
-    # artifact every Rust job uses instead of rebuilding the dashboard.
+    # This job consumes the dashboard artifact shared by Rust jobs instead of
+    # rebuilding it.
     needs: dashboard-assets
     # Also runs on push so the workflow-contract tests below actually protect
     # master, which is the branch they exist to protect. `on.push.branches` is
@@ -222,9 +221,6 @@ jobs:
           python3 scripts/test-resolve-release-source-profile.py
           python3 scripts/test-scoop-manifest-workflows.py
 
-      - name: Test local dogfood command contract
-        run: bash tests/dogfood_command_test.sh
-
       - name: Check release version drift
         continue-on-error: true
         # PR-only, unchanged. This one queries crates.io and fails whenever

.github/workflows/ci.yml

@@ -72,7 +72,6 @@ fn build_and_embed_dashboard_app() {
     let stamp_path = app_dist.join(".source-stamp");
     println!("cargo::rerun-if-env-changed=TRACEDECAY_DASHBOARD_CONTRACT_SCHEMA_OUT");
     println!("cargo::rerun-if-env-changed=TRACEDECAY_SKIP_DASHBOARD_BUILD");
-    println!("cargo::rerun-if-env-changed=TRACEDECAY_DOGFOOD_DASHBOARD_STAMP_PATH");
     let contract_schema_export =
         std::env::var_os("TRACEDECAY_DASHBOARD_CONTRACT_SCHEMA_OUT").is_some();
     let fresh = dashboard_cache::dist_is_fresh(repository_root, &source_stamp);
@@ -109,15 +108,6 @@ fn build_and_embed_dashboard_app() {
         contract_schema_export || app_dist.join("index.html").exists(),
         "dashboard/app-dist/index.html is missing after build; the dashboard frontend build failed"
     );
-    if let Some(path) = std::env::var_os("TRACEDECAY_DOGFOOD_DASHBOARD_STAMP_PATH") {
-        fs::write(Path::new(&path), &source_stamp).unwrap_or_else(|e| {
-            panic!(
-                "failed to write dogfood dashboard source stamp {}: {e}",
-                Path::new(&path).display()
-            )
-        });
-    }
-
     // Generated manifest: one embedded entry per dist file.
     let mut code = String::from(
         "pub struct AppAsset { pub path: &'static str, pub contents: &'static [u8], pub content_type: &'static str }\n",
@@ -198,14 +188,8 @@ fn main() {
     // worktree was clean. Feeds the generated agent plugins' provenance header
     // (so a stale installed plugin is distinguishable from the binary that
     // should have generated it) and the SemVer build metadata the binary
-    // reports as its own version. Git metadata tracks commits and staging;
-    // dogfood supplies a refreshed stamp for unstaged and untracked changes.
+    // reports as its own version. Git metadata tracks commits and staging.
     let manifest_dir = std::env::var("CARGO_MANIFEST_DIR").expect("CARGO_MANIFEST_DIR");
-    println!("cargo::rerun-if-env-changed=TRACEDECAY_DOGFOOD_BUILD_IDENTITY_STAMP");
-    println!("cargo::rerun-if-env-changed=TRACEDECAY_DOGFOOD_BUILD_IDENTITY_REFRESH");
-    if let Some(path) = std::env::var_os("TRACEDECAY_DOGFOOD_BUILD_IDENTITY_STAMP") {
-        println!("cargo::rerun-if-changed={}", Path::new(&path).display());
-    }
     let identity = resolve(Path::new(&manifest_dir));
     for path in watch_paths(Path::new(&manifest_dir)) {
         println!("cargo::rerun-if-changed={}", path.display());

build.rs

@@ -2,7 +2,7 @@
 //! (plan 38 §3, final clause).
 //!
 //! The observation store keeps three append-only, forever-growing evidence
-//! tables that dominated one dogfood `sessions.db`:
+//! tables that dominated one observed `sessions.db`:
 //!
 //! * `observations` — the durable observation payload (`observation_json`,
 //!   1.8 GB measured).

crates/tracedecay-global-db/src/observation/retention.rs

@@ -104,10 +104,8 @@ async fn migrate_observation_schema(
         return Ok(());
     }
 
-    // This full-table rewrite is exactly the operation that interrupted a
-    // real dogfood upgrade on a 15GB `sessions.db` and, before the
-    // `tracedecay_runtime_core::durability` model existed, failed the whole strict
-    // post-update because of it (see `crate::doctor::heal`'s module doc).
+    // This full-table rewrite previously interrupted a 15GB `sessions.db`
+    // during an update.
     // `observations` must stay classified `Recoverable` -- re-derivable by
     // re-running sanitization/projection over recoverable transcript
     // sources -- for that failure to stay non-blocking; assert it here so a

crates/tracedecay-global-db/src/observation/schema.rs

@@ -1,12 +1,9 @@
 //! Store durability classification for the upgrade/migration path.
 //!
-//! Diagnosed failure: `cargo dogfood` on a real 91GB profile failed because
-//! the post-update health pass tried to mount and repair a 15GB
-//! `sessions.db`, which triggered a full-table rewrite of the `observations`
-//! table mid-migration. That rewrite was interrupted, the mount failed, and
-//! because the health pass's `--strict` gate treated *every* warning as
-//! fatal, the whole upgrade failed -- recording
-//! `outcome=forward-recovery-required` and disabling the daemon.
+//! A large profile update tried to mount and repair a 15GB `sessions.db`,
+//! triggering a full-table rewrite of the `observations` table mid-migration.
+//! The rewrite was interrupted and the mount failed, even though the store's
+//! bulk transcript and evidence data could be safely retried later.
 //!
 //! The root cause: the upgrade path treated every store as equally precious.
 //! It is not. This module gives the migration path a typed vocabulary for
@@ -58,19 +55,6 @@ pub enum StoreDurabilityClass {
     Recoverable,
 }
 
-impl StoreDurabilityClass {
-    /// Whether a failure to migrate/mount/repair data of this class is
-    /// worth failing a `--strict` upgrade over. Only [`Self::Durable`] data
-    /// qualifies -- it is the only class this model treats as irreplaceable.
-    ///
-    /// Every other class may be handled best-effort: skipped, retried later,
-    /// or (for [`Self::Derived`]) dropped and rebuilt outright, without
-    /// operator intervention.
-    pub const fn may_block_upgrade(self) -> bool {
-        matches!(self, Self::Durable)
-    }
-}
-
 /// Mirrors [`tracedecay_store::StoreShardScopeV1`]'s cases without carrying
 /// its identifiers, so a caller can classify "the kind of store this is"
 /// without constructing a real project/repository/worktree id first.
@@ -257,13 +241,6 @@ mod tests {
         T::try_from(value.to_owned()).unwrap()
     }
 
-    #[test]
-    fn only_durable_may_block_an_upgrade() {
-        assert!(StoreDurabilityClass::Durable.may_block_upgrade());
-        assert!(!StoreDurabilityClass::Derived.may_block_upgrade());
-        assert!(!StoreDurabilityClass::Recoverable.may_block_upgrade());
-    }
-
     #[test]
     fn profile_and_profile_memory_and_project_are_durable() {
         assert_eq!(
@@ -290,9 +267,6 @@ mod tests {
             shard_kind_durability_class(StoreShardKind::ProjectSessions),
             StoreDurabilityClass::Recoverable
         );
-        // The diagnosed bug: mounting/migrating a sessions store must never
-        // be able to block a strict upgrade.
-        assert!(!shard_kind_durability_class(StoreShardKind::ProjectSessions).may_block_upgrade());
     }
 
     #[test]

crates/tracedecay-runtime-core/src/durability.rs

@@ -9,7 +9,7 @@
 //! * FTS shadow tables over each (`lcm_raw_messages_fts`,
 //!   `session_messages_fts`), maintained by triggers.
 //!
-//! One dogfood `sessions.db` reached 15 GB carrying both full copies plus their
+//! One observed `sessions.db` reached 15 GB carrying both full copies plus their
 //! FTS shadows. Plan 38 §4 ("one content copy") makes carrying both raw and
 //! projected content indefinitely a defect: the projection must reference the
 //! raw content or be superseded once durable. Plan 38 §3 ("session retention

crates/tracedecay-sessions/src/runtime/lcm/retention.rs

@@ -1350,7 +1350,7 @@ mod tests {
     }
 
     #[tokio::test]
-    async fn dogfood_recovery_transcript_fact_failure_rolls_back_entire_batch() {
+    async fn transcript_fact_failure_rolls_back_entire_batch() {
         let directory = tempfile::tempdir().unwrap();
         let connection = tracedecay_runtime_core::db::engine::TestConnection::open(
             &directory.path().join("sessions.db"),

crates/tracedecay-sessions/src/runtime/transcript_backfill.rs

@@ -13,8 +13,8 @@ const LIVE_PROJECTS = [
   { path: '/fast/projects/tracedecay', tokens_saved: 2_939_894_592 },
   { path: '/w/sqlite-storage-runtime-current', tokens_saved: 2_140_723_247 },
   { path: '/w/sqlite-storage-runtime', tokens_saved: 2_101_200_356 },
-  { path: '/w/dogfood-live-repair', tokens_saved: 2_078_590_272 },
-  { path: '/w/dogfood-hardening', tokens_saved: 1_946_100_344 },
+  { path: '/w/live-repair', tokens_saved: 2_078_590_272 },
+  { path: '/w/runtime-hardening', tokens_saved: 1_946_100_344 },
   { path: '/w/pr8-migration', tokens_saved: 1_831_192_520 },
   { path: '/w/pr8-acceptance-runner', tokens_saved: 1_824_171_535 },
   { path: '/w/pr8-live-tools', tokens_saved: 1_824_065_209 },
@@ -51,7 +51,7 @@ describe('summarizeProjectSpread', () => {
       '/fast/projects/tracedecay',
       '/w/sqlite-storage-runtime-current',
       '/w/sqlite-storage-runtime',
-      '/w/dogfood-live-repair',
+      '/w/live-repair',
     ]);
     expect(spread.deviations[0]!.deviation).toBeLessThan(-0.5);
     expect(spread.deviations[1]!.deviation).toBeGreaterThan(0.5);