* chore(doctor): trace the standalone original-state capture phase
* fix(doctor): narrow the install root inside the traced capture
* perf(doctor): snapshot the pre-repair capture under maintenance custody
Use one database backup worker and local metadata sizing for standalone
Doctor. Maintenance custody selects safe in-process discovery copies and
generation sealing; existing process-local handles transparently retain
isolated acquisition, preserving capture availability for embedded callers.
Keep updater acquisition unchanged when omitted, along with both inventory
passes, payload verification, generation sealing, and manifest schema v2.
Validation: backup 14/14, Doctor fleet 6/6, unchanged fresh-preview 40/40,
recovery status 29/29, read-only 42/42, snapshot admission 9/9; core and
core-test type lanes, lint, formatting, artifact build, and fresh review.
Built-CLI sampling retains one backup worker, two workshop read-only
workers, and no node --eval children; macOS ACL helpers remain unchanged.
* fix(doctor): retire standalone captures older than 30 days
Retire only sealed schema-v2 baseline Doctor UUID captures older than
30 days with no outcome or update-run record. Preserve the current run,
symlinks, incomplete captures, update captures, and privacy markers.
Report every removal and retain failed removals with a warning. Document
the retention window and recommend verified backups for long-term copies.
Validation: backup and retention tests 14/14 (47.041s wall), existing
Doctor fleet run 6/6 (55.933s wall), unchanged fresh-preview 40/40,
focused recovery/read-only suites, type lanes, lint, formatting, build,
built-CLI sampler, and independent review. No CI run was dispatched.
* fix(doctor): size the maintenance capture deadline from the discovered inventory
* fix(doctor): drop the unused retention export
* fix(doctor): bound in-process maintenance copies and keep inventory reads cancellable
* fix(build): keep the capture acquisition type out of the owner cycle
0b08491459