[EPIC] Memory & CPU: full-app performance audit 2026-08 — fix tracking

[h4yfans]

Context

A production user (20 GB Mac) reported excessive RAM usage. The app is designed to stay open all day with every feature in use (inbox, journal, calendar, voice recorder, Agent Chat, graph, canvas, sync). A full static audit of the desktop app was performed on 2026-08-07 (main @ e4c9c90) across 8 subsystems: main-process lifecycle, sync/CRDT, database/indexer/projections, renderer hooks/services, heavy components (graph/editor/canvas/PDF), Agent Chat/MCP, media/voice/notifications, and the IPC boundary.

Every finding below is filed as its own issue, all carrying the audit-2026-08 label (plus memory-footprint). Severity is in each title: [MAJOR] = unbounded growth under normal daily use or a permanent CPU burn · [HIGH] = grows/leaks on a common action · [MEDIUM] = bounded but wasteful · [LOW] = minor/latent · [CLEANUP] = dead code carrying latent cost.

Rules for implementers (AI agents included)

Every child issue starts with the same instruction: first confirm the issue is still valid on current main (line numbers may have drifted; a later commit may have fixed it). Only implement after confirming. If invalid, comment evidence and close. Follow CLAUDE.md conventions, keep changes surgical, add tests, and use the memory snapshot harness (#446) for before/after evidence where applicable.

Most likely explanation of the 20 GB report

Y.Docs pinned forever by stale windowIds (compaction disabled as a side effect) · editors never destroyed + journal remounting an editor per external sync change · agent transcripts never evicted · orphaned Whisper utility processes (hundreds of MB each) · leaked PDF-export renderer processes · full note bodies retained in debugState · offline CRDT buffers.

Related pre-existing issues (folded into this epic)

• Prune completed sync progress and stale conflicts from renderer state #449 — sync progress/conflict pruning (duplicates audit finding; already filed)
• Bound unbounded renderer caches (URL previews, wiki hover, clipboard blob) #448 — unbounded renderer caches incl. URL previews (duplicates audit finding; already filed)
• Cap main-process sync engine Maps (corrupt items, quarantine, CRDT queue, worker bridge) #450, Time out pending agent tool approvals #451, Evict idle BlockNote editors from renderer registry #447, Reduce vault-wide renderer data loaded at app root #445 — partial overlaps, referenced from the corresponding audit issues
• Add memory snapshot harness for worktree vs main benchmarks #446 — memory snapshot harness (verification infrastructure for all of the above)

Issue checklist (121 issues)

🔴 MAJOR — unbounded growth in daily use / permanent CPU burn (32)

• [MAJOR][telemetry] Every tracked event synchronously rewrites the entire queue file #988 — [telemetry] Every tracked event synchronously rewrites the entire queue file
• [MAJOR][calendar] Google Calendar sync runner await-race creates an unstoppable duplicate interval #989 — [calendar] Google Calendar sync runner await-race creates an unstoppable duplicate interval
• [MAJOR][sync] debugState retains the full markdown of every written-back note forever #990 — [sync] debugState retains the full markdown of every written-back note forever
• [MAJOR][projections] inbox-stats projector rebuilds the whole stats table on every single inbox event #991 — [projections] inbox-stats projector rebuilds the whole stats table on every single inbox event
• [MAJOR][projections] Every event is enqueued into all 5 lanes; slow embedding lane pins every queued note body; queues unbounded #992 — [projections] Every event is enqueued into all 5 lanes; slow embedding lane pins every queued note body; queues unbounded
• [MAJOR][projections] Full-vault FTS teardown + disk re-scan on every vault open; not abortable, keeps reading the old vault after a switch #993 — [projections] Full-vault FTS teardown + disk re-scan on every vault open; not abortable, keeps reading the old vault after a switch
• [MAJOR][projections] reconcileMissingFiles loads 100k rows and runs synchronous fs.existsSync per note on the main thread #994 — [projections] reconcileMissingFiles loads 100k rows and runs synchronous fs.existsSync per note on the main thread
• [MAJOR][sync] CRDT update queue grows unbounded while paused/offline and silently discards buffered updates at shutdown #995 — [sync] CRDT update queue grows unbounded while paused/offline and silently discards buffered updates at shutdown
• [MAJOR][sync] Full Y.Doc snapshot re-encoded, re-encrypted, and re-uploaded every second while typing #996 — [sync] Full Y.Doc snapshot re-encoded, re-encrypted, and re-uploaded every second while typing
• [MAJOR][crypto] Every vault-key fetch pays a disk read + safeStorage decrypt + OS keychain round-trip; no migrated latch #997 — [crypto] Every vault-key fetch pays a disk read + safeStorage decrypt + OS keychain round-trip; no migrated latch
• [MAJOR][sync] Every full sync schedules a CRDT pull for EVERY note in the vault; full sync runs on every reconnect #998 — [sync] Every full sync schedules a CRDT pull for EVERY note in the vault; full sync runs on every reconnect
• [MAJOR][crdt] Stale windowIds permanently pin Y.Docs: no BrowserWindow-closed hook, eviction and compaction disabled #999 — [crdt] Stale windowIds permanently pin Y.Docs: no BrowserWindow-closed hook, eviction and compaction disabled
• [MAJOR][ipc] 39 unguarded getAllWindows() send loops — destroyed-window throw can roll back sync (regression of #935) #1000 — [ipc] 39 unguarded getAllWindows() send loops — destroyed-window throw can roll back sync (regression of fix(main): route window fan-out sends through guarded broadcastToAllWindows #935)
• [MAJOR][ipc] CRDT hot path converts Uint8Array→number[] per keystroke, both directions, per receiving window #1001 — [ipc] CRDT hot path converts Uint8Array→number[] per keystroke, both directions, per receiving window
• [MAJOR][agent] Cancelled tool approval never settles its promise — leaks an MCP server + open socket per cancellation, blocks quit #1002 — [agent] Cancelled tool approval never settles its promise — leaks an MCP server + open socket per cancellation, blocks quit
• [MAJOR][agent] Agent MCP HTTP server stops without destroying connections — quit hangs, then forced app.exit(1) #1003 — [agent] Agent MCP HTTP server stops without destroying connections — quit hangs, then forced app.exit(1)
• [MAJOR][agent-chat] messagesByConversation is never evicted — every conversation's full transcript retained for the app lifetime #1004 — [agent-chat] messagesByConversation is never evicted — every conversation's full transcript retained for the app lifetime
• [MAJOR][agent-chat] Every streamed token rebuilds the message array and re-renders every agent consumer #1005 — [agent-chat] Every streamed token rebuilds the message array and re-renders every agent consumer
• [MAJOR][agent-chat] Each tool result rewrites every message of every loaded conversation #1006 — [agent-chat] Each tool result rewrites every message of every loaded conversation
• [MAJOR][agent-chat] SidebarTabs rescans every message of every conversation on every streamed token #1007 — [agent-chat] SidebarTabs rescans every message of every conversation on every streamed token
• [MAJOR][agent] Blocking spawnSync binary detection on every backend call freezes the main process #1008 — [agent] Blocking spawnSync binary detection on every backend call freezes the main process
• [MAJOR][agent] Local backend re-probes the provider — including two full model inferences — on every turn #1009 — [agent] Local backend re-probes the provider — including two full model inferences — on every turn
• [MAJOR][agent-mcp] 65 MCP tools re-registered with zod schemas on every HTTP request (stateless transport) #1010 — [agent-mcp] 65 MCP tools re-registered with zod schemas on every HTTP request (stateless transport)
• [MAJOR][voice] Cancelled recording is still delivered — full decode, WAV encode, vault write, and transcription run anyway #1011 — [voice] Cancelled recording is still delivered — full decode, WAV encode, vault write, and transcription run anyway
• [MAJOR][voice] MediaRecorder constructor/start throw leaves the mic hot and the stream unreachable #1012 — [voice] MediaRecorder constructor/start throw leaves the mic hot and the stream unreachable
• [MAJOR][hooks] use-all-tags re-subscribes its IPC listener on every render (per keystroke in tag autocomplete) #1013 — [hooks] use-all-tags re-subscribes its IPC listener on every render (per keystroke in tag autocomplete)
• [MAJOR][capture-bar] Global keydown listener torn down and re-added on every keystroke; duplicate 'q' binding in split view #1014 — [capture-bar] Global keydown listener torn down and re-added on every keystroke; duplicate 'q' binding in split view
• [MAJOR][graph] Graph is torn down, Sigma+WebGL recreated, and physics fully re-simulated on every note/task save #1015 — [graph] Graph is torn down, Sigma+WebGL recreated, and physics fully re-simulated on every note/task save
• [MAJOR][graph] Physics never settles if a node drag ends outside the window — permanent 60 fps loop #1016 — [graph] Physics never settles if a node drag ends outside the window — permanent 60 fps loop
• [MAJOR][editor] BlockNote/ProseMirror editors are never explicitly destroyed; journal remounts a new editor per external sync change #1017 — [editor] BlockNote/ProseMirror editors are never explicitly destroyed; journal remounts a new editor per external sync change
• [MAJOR][viewers] PDF viewer loads the document twice and renders every page as an unvirtualized thumbnail #1018 — [viewers] PDF viewer loads the document twice and renders every page as an unvirtualized thumbnail
• [MAJOR][tabs] useTabActions does not prevent re-renders — every tab state change re-renders ~77 consumers including the whole AppContent #1019 — [tabs] useTabActions does not prevent re-renders — every tab state change re-renders ~77 consumers including the whole AppContent

Also MAJOR-equivalent, pre-existing: #449 (sync progress/conflict pruning — duplicates an audit finding)

🟠 HIGH — leaks/burns on a common action (37)

• [HIGH][export] PDF-export hidden BrowserWindow leaks a whole renderer process on any failure #1020 — [export] PDF-export hidden BrowserWindow leaks a whole renderer process on any failure
• [HIGH][shutdown] flushWindow leaks an ipcMain listener on timeout and lets any window satisfy any flush #1021 — [shutdown] flushWindow leaks an ipcMain listener on timeout and lets any window satisfy any flush
• [HIGH][calendar] Window focus triggers a full Google Calendar sync with only a 10-second cooldown #1022 — [calendar] Window focus triggers a full Google Calendar sync with only a 10-second cooldown
• [HIGH][database] initDatabase/initIndexDatabase overwrite the previous connection handle without closing it #1023 — [database] initDatabase/initIndexDatabase overwrite the previous connection handle without closing it
• [HIGH][projections] startProjectionRuntime silently discards new projectors when a runtime already exists (stale vault path) #1024 — [projections] startProjectionRuntime silently discards new projectors when a runtime already exists (stale vault path)
• [HIGH][vault] Every embed reference triggers a synchronous config.json read and a full image-table scan #1025 — [vault] Every embed reference triggers a synchronous config.json read and a full image-table scan
• [HIGH][sync] WebSocket reconnect re-pulls CRDT for every cached doc, not just open editors #1026 — [sync] WebSocket reconnect re-pulls CRDT for every cached doc, not just open editors
• [HIGH][sync] AttachmentSyncService activeUploads/activeDownloads entries leak on every failure #1027 — [sync] AttachmentSyncService activeUploads/activeDownloads entries leak on every failure
• [HIGH][sync] UploadQueue re-queues NetworkError items with no attempt cap and no backoff — infinite hot retry while offline #1028 — [sync] UploadQueue re-queues NetworkError items with no attempt cap and no backoff — infinite hot retry while offline
• [HIGH][sync] withRetry retries NetworkError with zero delay when isOnline is not supplied #1029 — [sync] withRetry retries NetworkError with zero delay when isOnline is not supplied
• [HIGH][sync] CRDT writeback runs a full serialize→read→parse→write→reindex cycle every 500 ms of typing #1030 — [sync] CRDT writeback runs a full serialize→read→parse→write→reindex cycle every 500 ms of typing
• [HIGH][sync] setOnTokenRefreshed callback is never cleared on sync-runtime stop — pins the dead runtime graph #1031 — [sync] setOnTokenRefreshed callback is never cleared on sync-runtime stop — pins the dead runtime graph
• [HIGH][agent] Vault-switch race resurrects the previous vault's agent runtime and clobbers the new vault's IPC handlers #1032 — [agent] Vault-switch race resurrects the previous vault's agent runtime and clobbers the new vault's IPC handlers
• [HIGH][agent] Failed agent start leaves a listening MCP server bound to the old vault's DB handles #1033 — [agent] Failed agent start leaves a listening MCP server bound to the old vault's DB handles
• [HIGH][agent] Child process spawn has no 'error' listener — uncaught main-process exception and a permanently stuck turn lock #1034 — [agent] Child process spawn has no 'error' listener — uncaught main-process exception and a permanently stuck turn lock
• [HIGH][agent] stderr never drained for title/summary turns — 64KB pipe buffer deadlocks the child and the turn #1035 — [agent] stderr never drained for title/summary turns — 64KB pipe buffer deadlocks the child and the turn
• [HIGH][agent] No child kill on turn error paths; cleanup() untracks the orphan so killAll can't reach it #1036 — [agent] No child kill on turn error paths; cleanup() untracks the orphan so killAll can't reach it
• [HIGH][agent] Subprocess tracked before the try block — an exception in the gap leaks it forever #1037 — [agent] Subprocess tracked before the try block — an exception in the gap leaks it forever
• [HIGH][agent] SIGTERM-only kill with no escalation or reap verification — zombie CLI processes after cancel/quit #1038 — [agent] SIGTERM-only kill with no escalation or reap verification — zombie CLI processes after cancel/quit
• [HIGH][agent-mcp] MCP server has no lifetime 'error' listener — a late server error crashes the main process #1039 — [agent-mcp] MCP server has no lifetime 'error' listener — a late server error crashes the main process
• [HIGH][voice] Whisper utility process orphaned on start timeout — model-holding process leaked, listeners retained #1040 — [voice] Whisper utility process orphaned on start timeout — model-holding process leaked, listeners retained
• [HIGH][updater] 6 independent useAppUpdater instances re-render the whole app on every download-progress tick #1041 — [updater] 6 independent useAppUpdater instances re-render the whole app on every download-progress tick
• [HIGH][hooks] AI folder-suggestion cache is unbounded; its clear function is only called from a test #1042 — [hooks] AI folder-suggestion cache is unbounded; its clear function is only called from a test
• [HIGH][graph] Full sigma.refresh() every physics frame re-runs node+edge reducers over the whole graph #1043 — [graph] Full sigma.refresh() every physics frame re-runs node+edge reducers over the whole graph
• [HIGH][graph] Physics hot loop allocates two Maps and ~2N string keys per tick #1044 — [graph] Physics hot loop allocates two Maps and ~2N string keys per tick
• [HIGH][graph] syncPositions emits 2 graphology events per node per tick #1045 — [graph] syncPositions emits 2 graphology events per node per tick
• [HIGH][graph] LocalGraphPanel recreates the whole Sigma instance (new WebGL context) on every local-graph refetch #1046 — [graph] LocalGraphPanel recreates the whole Sigma instance (new WebGL context) on every local-graph refetch
• [HIGH][editor] MutationObserver re-scans every date pill in the note on every keystroke #1047 — [editor] MutationObserver re-scans every date pill in the note on every keystroke
• [HIGH][editor] Scrolling a note re-renders the whole editor tree twice per scroll event (hover-dismiss setState) #1048 — [editor] Scrolling a note re-renders the whole editor tree twice per scroll event (hover-dismiss setState)
• [HIGH][editor] Active-heading tracking runs N unscoped querySelectors + layout reads per 50 ms while scrolling #1049 — [editor] Active-heading tracking runs N unscoped querySelectors + layout reads per 50 ms while scrolling
• [HIGH][editor] Marquee block-selection measures every block in the note every frame #1050 — [editor] Marquee block-selection measures every block in the note every frame
• [HIGH][editor] Find-in-page walks the whole note DOM per keystroke, undebounced #1051 — [editor] Find-in-page walks the whole note DOM per keystroke, undebounced
• [HIGH][canvas] Card overlay recompute() runs on every Excalidraw onChange (including pan/zoom) with forced layout reads #1052 — [canvas] Card overlay recompute() runs on every Excalidraw onChange (including pan/zoom) with forced layout reads
• [HIGH][folder-view] App-wide cache invalidation refetches folder listings on every note save #1053 — [folder-view] App-wide cache invalidation refetches folder listings on every note save
• [HIGH][dnd] Every dragover re-renders the entire app through DragProvider #1054 — [dnd] Every dragover re-renders the entire app through DragProvider
• [HIGH][app-root] Task workspace at App root recomputes O(views × tasks) on every task change #1055 — [app-root] Task workspace at App root recomputes O(views × tasks) on every task change
• [HIGH][tabs] Tab persistence serializes + JSON.stringifies the whole tab tree on every state change (debounce only covers the write) #1056 — [tabs] Tab persistence serializes + JSON.stringifies the whole tab tree on every state change (debounce only covers the write)

Also HIGH-equivalent, pre-existing: #448 (URL preview cache — duplicates an audit finding)

🟡 MEDIUM — bounded but wasteful (32)

• [MEDIUM][main] Three independent 60-second DB pollers run for the whole app lifetime; two do work when idle #1057 — [main] Three independent 60-second DB pollers run for the whole app lifetime; two do work when idle
• [MEDIUM][main] Window resize sync-writes the whole pretty-printed config every 400 ms; maximize bypasses the debounce #1058 — [main] Window resize sync-writes the whole pretty-printed config every 400 ms; maximize bypasses the debounce
• [MEDIUM][sync] 4 COUNT(*) scans per queue enqueue and a SQLite read per WS message for isPaused #1059 — [sync] 4 COUNT(*) scans per queue enqueue and a SQLite read per WS message for isPaused
• [MEDIUM][sync] manifest-check materializes and JSON.stringifies every synced row in the vault, mostly wasted #1060 — [sync] manifest-check materializes and JSON.stringifies every synced row in the vault, mostly wasted
• [MEDIUM][sync] Module-level per-note maps grow for the session and survive vault switches #1061 — [sync] Module-level per-note maps grow for the session and survive vault switches
• [MEDIUM][sync] Attachment transfer progress broadcast per chunk, unthrottled, to every window; concurrent transfers clobber the shared callback #1062 — [sync] Attachment transfer progress broadcast per chunk, unthrottled, to every window; concurrent transfers clobber the shared callback
• [MEDIUM][settings] Every settings write echoes settings:changed back to the originating window (7 sites; sync apply sends 3 per window) #1063 — [settings] Every settings write echoes settings:changed back to the originating window (7 sites; sync apply sends 3 per window)
• [MEDIUM][agent] Full history is decrypted, zod-parsed, and re-assembled multiple times per message #1064 — [agent] Full history is decrypted, zod-parsed, and re-assembled multiple times per message
• [MEDIUM][agent] Streaming deltas broadcast to all windows; only the conversation's window needs them #1065 — [agent] Streaming deltas broadcast to all windows; only the conversation's window needs them
• [MEDIUM][ai-inline] Chat server: no abort wiring, never stopped at quit, unbounded request body, error path orphans the listening socket #1066 — [ai-inline] Chat server: no abort wiring, never stopped at quit, unbounded request body, error path orphans the listening socket
• [MEDIUM][voice] AudioContext leaked when recorder waveform setup throws #1067 — [voice] AudioContext leaked when recorder waveform setup throws
• [MEDIUM][inbox] AudioContext leaked on every failed playback-waveform decode #1068 — [inbox] AudioContext leaked on every failed playback-waveform decode
• [MEDIUM][voice] Waveform loop does 60 fps DSP but uses 20 fps of it; fftSize 8× larger than needed #1069 — [voice] Waveform loop does 60 fps DSP but uses 20 fps of it; fftSize 8× larger than needed
• [MEDIUM][voice] Voice-memo preparation transiently allocates ~100 MB on the renderer main thread #1070 — [voice] Voice-memo preparation transiently allocates ~100 MB on the renderer main thread
• [MEDIUM][snooze] One 60s interval + one document listener per snoozed row #1071 — [snooze] One 60s interval + one document listener per snoozed row
• [MEDIUM][calendar] No midnight rollover — "Today" and calendar ranges go stale in an all-day session #1072 — [calendar] No midnight rollover — "Today" and calendar ranges go stale in an all-day session
• [MEDIUM][canvas] Full scene serialize + JSON round-trip every 800 ms of interaction; three copies of the scene in memory #1073 — [canvas] Full scene serialize + JSON round-trip every 800 ms of interaction; three copies of the scene in memory
• [MEDIUM][hooks] Global shortcut hooks re-register window keydown listeners on every tab/inbox state change #1074 — [hooks] Global shortcut hooks re-register window keydown listeners on every tab/inbox state change
• [MEDIUM][sync] setMaxListeners(50) on three sync emitters masks future listener-leak regressions #1075 — [sync] setMaxListeners(50) on three sync emitters masks future listener-leak regressions
• [MEDIUM][agent-chat] Mention picker fires two undebounced IPC searches per keystroke #1076 — [agent-chat] Mention picker fires two undebounced IPC searches per keystroke
• [MEDIUM][viewers] Image viewer re-renders per mousemove while panning #1077 — [viewers] Image viewer re-renders per mousemove while panning
• [MEDIUM][projections] Queue mechanics: O(n) Array.shift dequeue, per-file global drain barrier, spinnable drain loop blocking vault close #1078 — [projections] Queue mechanics: O(n) Array.shift dequeue, per-file global drain barrier, spinnable drain loop blocking vault close
• [MEDIUM][vault] getConfig() is a synchronous disk read with a process-wide side effect, called on hot paths #1079 — [vault] getConfig() is a synchronous disk read with a process-wide side effect, called on hot paths
• [MEDIUM][graph] getLocalGraph builds the entire vault graph, then filters to depth #1080 — [graph] getLocalGraph builds the entire vault graph, then filters to depth
• [MEDIUM][image] ImageProcessingBridge pendingRequests has no cap — bursts queue Buffers and timers in main #1081 — [image] ImageProcessingBridge pendingRequests has no cap — bursts queue Buffers and timers in main
• [MEDIUM][agent-chat] Reducer allocation churn: full re-sort per message event, O(N) reduce per tool call, unbounded icon promise cache #1082 — [agent-chat] Reducer allocation churn: full re-sort per message event, O(N) reduce per tool call, unbounded icon promise cache
• [MEDIUM][projections] Embedding-projector state hygiene: pendingEmbedding only drained on vault open; module-global vault path provider never reset #1083 — [projections] Embedding-projector state hygiene: pendingEmbedding only drained on vault open; module-global vault path provider never reset
• [MEDIUM][crdt] SYNC_STEP_1 opens a doc with no windowId — actively-used doc is eligible for mid-edit eviction #1084 — [crdt] SYNC_STEP_1 opens a doc with no windowId — actively-used doc is eligible for mid-edit eviction
• [MEDIUM][crdt] Renderer CRDT events use one global channel — every provider filters every note's updates #1085 — [crdt] Renderer CRDT events use one global channel — every provider filters every note's updates
• [MEDIUM][telemetry] log-ship ring buffer reallocates and re-parses up to 200 timestamps on every warn/error line #1086 — [telemetry] log-ship ring buffer reallocates and re-parses up to 200 timestamps on every warn/error line
• [MEDIUM][shortcuts] Saving keyboard settings silently kills the quick-capture fallback global shortcut #1087 — [shortcuts] Saving keyboard settings silently kills the quick-capture fallback global shortcut
• [MEDIUM][editor] File drag-over re-measures blocks and re-renders the editor per dragover event #1088 — [editor] File drag-over re-measures blocks and re-renders the editor per dragover event

⚪ LOW — minor / latent (17)

• [LOW][hooks] Untracked timers and rAF handles across renderer hooks (14 sites) #1089 — [hooks] Untracked timers and rAF handles across renderer hooks (14 sites)
• [LOW][main] Launch-timeline vault-status subscription never unsubscribes if the vault fails to open #1090 — [main] Launch-timeline vault-status subscription never unsubscribes if the vault fails to open
• [LOW][ipc] validate.ts error-throttle map has no cap or sweep #1091 — [ipc] validate.ts error-throttle map has no cap or sweep
• [LOW][sync] worker-bridge stop() leaves a once('exit') listener on the timeout path #1092 — [sync] worker-bridge stop() leaves a once('exit') listener on the timeout path
• [LOW][main] persistWindowBoundsTimer is a module global shared by all windows — cross-window cancellation drops geometry saves #1093 — [main] persistWindowBoundsTimer is a module global shared by all windows — cross-window cancellation drops geometry saves
• [LOW][sync] Permanent wakeup sources: NetworkMonitor 5s poll and 60s pull tick regardless of activity #1094 — [sync] Permanent wakeup sources: NetworkMonitor 5s poll and 60s pull tick regardless of activity
• [LOW][sync] offline-clock logs an object payload per task field change while offline #1095 — [sync] offline-clock logs an object payload per task field change while offline
• [LOW][sync] Minor allocation churn: new pinned https.Agent per WS reconnect; vault UUID re-resolved per HTTP request #1096 — [sync] Minor allocation churn: new pinned https.Agent per WS reconnect; vault UUID re-resolved per HTTP request
• [LOW][crdt] Superseded Y.Doc skipped (not destroyed) when a doc is reopened during async close #1097 — [crdt] Superseded Y.Doc skipped (not destroyed) when a doc is reopened during async close
• [LOW][ipc] window-rpc listener lingers to timeout on sender mismatch; multi-window flush can trip the ipcMain listener cap #1098 — [ipc] window-rpc listener lingers to timeout on sender mismatch; multi-window flush can trip the ipcMain listener cap
• [LOW][notifications] Notification objects retained with click closures; renderer fires duplicates without close() #1099 — [notifications] Notification objects retained with click closures; renderer fires duplicates without close()
• [LOW][onboarding] First-run tour: orphaned rAF, driver.js instance never destroyed, side effect with no undo #1100 — [onboarding] First-run tour: orphaned rAF, driver.js instance never destroyed, side effect with no undo
• [LOW][hint-mode] Context value not memoized; capture-phase keydown re-registered per hint keystroke #1101 — [hint-mode] Context value not memoized; capture-phase keydown re-registered per hint keystroke
• [LOW][undo] useUndoTracker subscriber is a no-op and reads mutate module state during render #1102 — [undo] useUndoTracker subscriber is a no-op and reads mutate module state during render
• [LOW][viewers] Audio player re-renders ~4×/s during playback; misc render-phase setState in image viewer #1103 — [viewers] Audio player re-renders ~4×/s during playback; misc render-phase setState in image viewer
• [LOW][editor] Split-view: both editors attach their link-click handler to the same first .bn-editor #1104 — [editor] Split-view: both editors attach their link-click handler to the same first .bn-editor
• [LOW][tabs] No cap on open tabs; tab activation schedules smooth scrollIntoView up to 3× #1105 — [tabs] No cap on open tabs; tab activation schedules smooth scrollIntoView up to 3×

💀 CLEANUP — dead code carrying latent cost (3)

• [CLEANUP][hooks] use-journal-scroll is dead code with hazardous behavior if ever wired up #1106 — [hooks] use-journal-scroll is dead code with hazardous behavior if ever wired up
• [CLEANUP][hooks] use-ai-connections is dead code: a 500 ms polling interval around a mock service #1107 — [hooks] use-ai-connections is dead code: a 500 ms polling interval around a mock service
• [CLEANUP][agent] AgentRuntime.inFlight is dead — no AbortController is ever registered; backend cancel() methods are no-ops #1108 — [agent] AgentRuntime.inFlight is dead — no AbortController is ever registered; backend cancel() methods are no-ops

Follow-up findings (15) — surfaced while fixing the audit, filed separately

These are not original audit findings. Each was discovered by an implementer while fixing one of the issues above, and deliberately left unfixed so that PR would stay surgical. All 15 were verified against origin/main @ 2ba7f5950 on 2026-08-12 before filing, and all carry the audit-2026-08-followup label.

Several outrank the issue they were found next to — the first two are correctness, not memory.

🔴 MAJOR

• [MAJOR][crdt] Pending write-back timer holds a stale Y.Doc — a note closed and reopened mid-debounce overwrites the vault markdown with old content #1280 — [crdt] Pending write-back timer holds a stale Y.Doc — a note closed and reopened mid-debounce overwrites the vault markdown with old content
• [MAJOR][sync] Abandoned worker thread's permanent exit handler nulls out the freshly started worker, wedging sync crypto on 'Worker not started' #1281 — [sync] Abandoned worker thread's permanent exit handler nulls out the freshly started worker, wedging sync crypto on 'Worker not started'

🟠 HIGH

• [HIGH][notifications] deleteReminder and bulkDismissReminders leave the delivered OS notification banner on screen #1284 — [notifications] deleteReminder and bulkDismissReminders leave the delivered OS notification banner on screen
• [HIGH][tabs] Open-to-the-side races the split: setTimeout(0) after splitView can open the tab in the wrong pane #1289 — [tabs] Open-to-the-side races the split: setTimeout(0) after splitView can open the tab in the wrong pane
• [HIGH][tabs] Tab state persists only to localStorage; QuotaExceededError is swallowed and the session is silently lost #1292 — [tabs] Tab state persists only to localStorage; QuotaExceededError is swallowed and the session is silently lost

🟡 MEDIUM

• [MEDIUM][crdt] close() and compactDoc() can overlap on the same doc entry — neither excludes the other #1285 — [crdt] close() and compactDoc() can overlap on the same doc entry — neither excludes the other
• [MEDIUM][viewers] Wheel zoom drifts off exact 1, so returning to a displayed 100% never recenters the pan offset #1286 — [viewers] Wheel zoom drifts off exact 1, so returning to a displayed 100% never recenters the pan offset
• [MEDIUM][undo] popUndoEntry() skips the expiry filter, so undo() can execute an entry past its 10s window #1288 — [undo] popUndoEntry() skips the expiry filter, so undo() can execute an entry past its 10s window
• [MEDIUM][telemetry] shouldEmitThrottled's key map grows past MAX_TRACKED_KEYS when nothing has expired #1291 — [telemetry] shouldEmitThrottled's key map grows past MAX_TRACKED_KEYS when nothing has expired
• [MEDIUM][sync] getOrCreateVaultUuid() is uncached — 10 call sites beyond the HTTP header path re-run the SELECT #1293 — [sync] getOrCreateVaultUuid() is uncached — 10 call sites beyond the HTTP header path re-run the SELECT

⚪ LOW

• [LOW][sync] createPinnedAgent picks its placeholder-pin branch from the configured host but verifies pins for the connecting hostname #1279 — [sync] createPinnedAgent picks its placeholder-pin branch from the configured host but verifies pins for the connecting hostname
• [LOW][testing] createMockWs omits connectionGeneration, so the shared sync-engine mock diverges from the real WebSocketManager #1282 — [testing] createMockWs omits connectionGeneration, so the shared sync-engine mock diverges from the real WebSocketManager
• [LOW][i18n] Inbox snooze notification and toast strings are hard-coded English and never translate #1283 — [i18n] Inbox snooze notification and toast strings are hard-coded English and never translate
• [LOW][docs] Keyboard shortcuts page says hint mode shows numeric badges, but labels are letters #1287 — [docs] Keyboard shortcuts page says hint mode shows numeric badges, but labels are letters
• [LOW][a11y] Tab activation scrolls with behavior: smooth with no prefers-reduced-motion gate #1290 — [a11y] Tab activation scrolls with behavior: smooth with no prefers-reduced-motion gate

Suggested fix order (highest impact/effort first)

1. Stale windowIds pin Y.Docs (see MAJOR list) → 2. Graph rebuild + stuck physics loop → 3. Unguarded getAllWindows fan-outs → 4. Editor destroy verification (Evict idle BlockNote editors from renderer registry #447 related) → 5. debugState deletion → 6. Per-second snapshot push → 7. spawnSync per turn → 8. Agent transcript eviction + per-token rendering → 9. Telemetry sync writes → 10. Voice cancel/mic-hot fixes.