98 releases 102 tags

RSS feed

• v0.24.0 4a72738211

  Compare

  code-index v0.24.0 Stable

  buildagent released this 2026-09-02 09:33:19 +02:00 | 502 commits to master since this release

  code-index v0.24.0

  Build: v0.24.0+538

  Four-binary release: code-index-mcp (MCP stdio bridge — the usual entry), code-index-daemon (long-lived watcher + RPC server, auto-spawned), code-index-plugin-host (sandboxed worker for plugin packages, spawned by the daemon), and code-index (CLI: init, index, watch, doctor, link, plugin).

  Epic #75's runtime plugin architecture, phase 4 (#80), plus the review
  round that followed it and the fixes that round demanded.

  The customer-facing change is that the XAML plugin can now be
  obtained: the reference package is packed in CI by the shipped binary
  and published beside the archives with its digest. No release has ever
  carried one.

  Security, all of it found by asking what the shipped binary actually
  contains: eighteen debug_assert!s guarded invariants that do not
  exist under --release, and two of them mattered — the binary
  installed a seccomp filter that ALLOWED socket, and it minted
  builtin language ids that reach grant_all. derived_name is now an
  authority a project grants rather than one every package holds, with a
  detection bit so a fabricated edge can be enumerated after the fact.
  Three package-path guards became refusals.

  Honesty: plugin rollback refuses instead of exiting zero on a
  rollback it did not perform; context_pack's with_source is
  measured rather than derived behind an assertion release deletes;
  refs_resolved reports the rows the resolver actually changed.

  Gates the round added because it needed them: a rustdoc gate (backlog
  131 -> 0, five genuinely broken citations inside it), a README gate
  that caught this very version bump, a fork lock covering whole test
  targets, and three cost bounds on the plugin path — which nothing
  could see before, because the corpus ratchet counts SQLite opcodes and
  the corpus installs no packages.

  Measured, since the direction rests on it: a language plugin's wire
  cost is additive at ~3.5-4% of a real file, and a plugin fleet runs at
  0.97-1.09x of builtins at machine width.

  Verified: fmt, clippy (host + windows-gnu), rustdoc at zero warnings,
  cargo check --locked, MSRV 1.98, 2448 tests, daemon transport leg,
  precision_gate 7/7 phantom_count 0, release_gate, corpus ratchet with
  baseline.json unmoved at 534084b856c22566c48e386bc41ed67e and never
  blessed.

  Downloads

  Four platforms are built for every release. The table below says which ones THIS release published.

  Platform	Archive
  Linux x86_64 (glibc)	code-index-v0.24.0-linux-x86_64.tar.gz
  Linux x86_64 (static/musl)	not published for this release
  Linux ARM64	code-index-v0.24.0-linux-aarch64.tar.gz
  Windows x64	code-index-v0.24.0-windows-x86_64.zip

  No static (musl) archive was published for v0.24.0. That leg is best-effort: it either failed to build or its code-index-plugin-host failed the release plugin smoke/timeout/trap test, and an archive whose plugin host has not been proved on its own target is not one this project ships. Use the glibc archive.

  XAML plugin package

  de.h-dv.xaml-0.1.0.cip makes .xaml files carry symbols and references instead of being text-only: x:Class and Click= handlers bind into the paired C# code-behind, x:Name becomes a searchable declaration, and {Binding …} stays unresolved because no bridge can reach it.

  It is NOT installed by installing code-index. Packages are installed into a user-controlled store and approved per project, and installing grants nothing — enable is the grant:

  code-index plugin install de.h-dv.xaml-0.1.0.cip --sha256 sha256:584fe7183b234e7133fa7d257cc8a8d687f38bfb43d235cfda657ba13b1186dd
  code-index plugin check   sha256:584fe7183b234e7133fa7d257cc8a8d687f38bfb43d235cfda657ba13b1186dd
  code-index plugin enable  sha256:584fe7183b234e7133fa7d257cc8a8d687f38bfb43d235cfda657ba13b1186dd \n    --capabilities bridge_source \n    --bridges 'de.h-dv.xaml/xaml:type->csharp:class,de.h-dv.xaml/xaml:call->csharp:method'
  

  The digest above is the one this release packed and it is what --sha256 pins; de.h-dv.xaml-0.1.0.cip.digest.txt carries it and the extraction identity. A digest that changes between releases means the package changed — re-pin, and read the notes.

  Only .xaml is claimed. .dataset and other markup remain text-only (searchable, no symbols).

  macOS is not currently built. No x86_64-apple-darwin or aarch64-apple-darwin archive is published — macOS users should build from source (cargo build --release). This is a deliberate deferral, tracked in #59; no date is promised.

  Wire into Claude Code

  { "mcpServers": { "code-index": { "command": "/usr/local/bin/code-index-mcp", "args": ["--root", "/path/to/your/project"] } } }
  

  SHA256 checksums (.sha256 files) available for every archive.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • code-index-v0.24.0-linux-aarch64.tar.gz
    0 downloads · 2026-09-02 09:51:35 +02:00 · 18 MiB
  • code-index-v0.24.0-linux-aarch64.tar.gz.sha256
    0 downloads · 2026-09-02 09:51:39 +02:00 · 106 B
  • code-index-v0.24.0-linux-x86_64.tar.gz
    0 downloads · 2026-09-02 09:51:06 +02:00 · 20 MiB
  • code-index-v0.24.0-linux-x86_64.tar.gz.sha256
    0 downloads · 2026-09-02 09:51:10 +02:00 · 105 B
  • code-index-v0.24.0-windows-x86_64.zip
    0 downloads · 2026-09-02 09:51:19 +02:00 · 28 MiB
  • code-index-v0.24.0-windows-x86_64.zip.sha256
    0 downloads · 2026-09-02 09:51:14 +02:00 · 104 B
  • de.h-dv.xaml-0.1.0.cip
    1 download · 2026-09-02 09:51:23 +02:00 · 60 KiB
  • de.h-dv.xaml-0.1.0.cip.digest.txt
    1 download · 2026-09-02 09:51:27 +02:00 · 658 B
  • de.h-dv.xaml-0.1.0.cip.sha256
    0 downloads · 2026-09-02 09:51:31 +02:00 · 89 B