Summary

• run tracedecay_grep filesystem traversal and reads off the async runtime
• bound concurrent grep scans to two and time each request out after 10 seconds
• cooperatively cancel timed-out or abandoned blocking workers
• prune generated dependency trees and TraceDecay/Git metadata
• skip files larger than 2 MB before reading them

Root cause

tracedecay_grep performed a synchronous WalkBuilder traversal and
std::fs::read directly inside its async MCP handler. On repositories whose
ignore files did not cover generated dependency trees, the walker could enter
large directories such as virtual environments. When a client timed out or
disconnected, the daemon-side scan continued, and concurrent requests could
repeat the same work. The CLI fallback used the same daemon and scanner, so it
could stall behind the original request.

Behavior

• at most two grep scans run concurrently
• the 10-second timeout includes time waiting for a scan permit
• timeout or caller cancellation signals the blocking worker, which checks
  cancellation during traversal, before file reads, and while matching lines
• timeout errors suggest narrowing the request with path_glob
• the shared generated-directory classifier prunes dependency/build output
• .git and .tracedecay are always excluded, including linked-worktree
  .git files
• files larger than 2,000,000 bytes are skipped using metadata before
  std::fs::read

This is intentionally separate from #481. It does not change worktree identity
resolution, daemon lifecycle, project routing, or store migration.

Validation

• TDD regression before the fix: generated .venv match reproduced
• grep handler unit regressions: 3 passed
• shared AST cancellation/off-thread regressions: 2 passed
• MCP generated-directory integration regression: 1 passed
• cargo fmt --all -- --check: passed
• git diff --check: passed
• conventional commit validation: passed
• independent exact-tip audit of
  2b48fb4b94e3bed156c307275ce428351e45f6c8: PASS, no findings

The target worktree was not registered in the local TraceDecay project index,
so semantic impact lookup was unavailable without initializing another store.
Validation stayed bounded to the exact diff and focused compiled regressions.