98 releases 102 tags

RSS feed

• v0.32.2 1f6430f1c7

  Compare

  code-index v0.32.2 Stable

  buildagent released this 2026-09-26 17:02:05 +02:00 | 60 commits to master since this release

  code-index v0.32.2

  Build: v0.32.2+916

  Installer: install.sh and checksum. Both come from this release commit. To pin the installed binaries too, run it with --tag v0.32.2.

  Windows installer: install.ps1 and checksum, from the same release commit. It installs AND updates — the same code does both — verifies the archive against its published .sha256 before unpacking, refuses hostile archive members (absolute paths, .. escapes, symlinks and reparse points, which Expand-Archive does not protect you from), and grants nothing when it installs a package: the bytes go into the machine's store and the approving line is PRINTED for you to run from inside a project. -Help lists the flags; -Tag v0.32.2 pins the binaries.

  Four-binary release: code-index-mcp (MCP stdio bridge — the usual entry), code-index-daemon (long-lived watcher + RPC server, auto-spawned), code-index-plugin-host (bounded worker for plugin packages, spawned by the daemon), and code-index (CLI: init, index, watch, doctor, link, plugin).

  Changes

  This release fixes the mid-session disconnects two Windows users reported, and adds the tool improvements they asked for.

  Daemon robustness

  • Locked writes wait instead of crashing the daemon. The writer now waits out a write lock held by another process (BEGIN IMMEDIATE, backing off from 25 ms to 1 s). Before, it gave up after five retries within about 7 ms and the whole daemon exited. A writer blocked by another process now says so, and SQLITE_LOCKED is no longer retried.
  • Every daemon and MCP exit leaves a reason in .code-index/daemon.exit and daemon.log. Panics are logged with a backtrace. A panic on the MCP main thread now exits instead of leaving the server alive but unresponsive.
  • No more silent long hangs. Each tool call gets one shared daemon budget (default 180 s, CODE_INDEX_TOOL_CALL_BUDGET_SECS), never lower than a raised per-call timeout, and at most one daemon respawn. The reply says when the daemon was replaced and why (daemon_restarted).
  • Plugin workers:
    • They exit when their daemon dies.
    • They retire after 60 s idle.
    • On Linux they are the OOM killer's first choice.
  • On Windows the daemon runs in its own hidden console and process group.
  • code-index index next to a running daemon now defers to it and exits 0 instead of refusing. It never becomes a second writer.
  • Maintenance and logging: files_fts compaction defers while the write lock is held. Undecodable text files warn once per content version instead of on every pass.

  Tool improvements

  • find_callers on a type reports target_is_type with a count of the type's members, or says when it cannot count them. This covers Rust impl blocks and C# partial classes.
  • index_freshness names the lagging paths and says whether results for all other files are current.
  • search_text takes max_lines_per_file (up to 1000) to list every matching line.
  • read_code takes a list of up to 8 targets in one call.
  • envelope: "minimal" is available on every tool. It drops explanatory prose and provenance but keeps every verdict as a field, and saved about 17% on a representative call mix. The default reply is unchanged.
  • Diagnostics:
    • A reason for a missing per-row field now compares the daemon's build with the server's instead of always blaming the daemon.
    • A failing batch entry names its own query.

  Upgrade

  No schema change and no reparse. Replace the binaries. Running daemons are replaced on the next call, and the reply reports the replacement.

  Known limits

  These are tracked as follow-ups:

  • The writer-blocked state is logged but not yet shown in index_freshness or project_overview.
  • Panic-hook cost for plugin panics.
  • The Windows parent-death check treats every error as the parent being gone.
  • Exit codes on signals.

  Validation

  • CI: the release commit passed CI on Linux and on native Windows.
    • Linux ran fmt, clippy, MSRV, the windows-gnu check, the 32-bit and wasm32 ABI tests, cargo deny, the guest crates, strict rustdoc, the workspace suite, the daemon-transport suite and the tier-1 OSS corpus job.
  • Reviews: both halves of the change were independently reviewed. Each finding was fixed together with a test that fails when the fix is removed.
  • Not covered: Linux ARM64 is cross-built and has no native runtime test. This release does not provide macOS or Windows ARM64 archives.

  Downloads

  Four platforms are built for every release. The table below says which ones THIS release published.

  Platform	Archive
  Linux x86_64 (glibc)	code-index-v0.32.2-linux-x86_64.tar.gz
  Linux x86_64 (static/musl)	code-index-v0.32.2-linux-x86_64-musl.tar.gz
  Linux ARM64	code-index-v0.32.2-linux-aarch64.tar.gz
  Windows x64	code-index-v0.32.2-windows-x86_64.zip

  XAML plugin package

  de.h-dv.xaml-0.2.0.cip makes .xaml files carry symbols and references instead of being text-only: x:Class and Click= handlers bind into the paired C# code-behind, x:Name becomes a searchable declaration, and {Binding …} stays unresolved because no bridge can reach it.

  It is NOT installed by installing code-index. Packages are installed into a user-controlled store and approved per project, and installing grants nothing — enable is the grant.

  Download de.h-dv.xaml-0.2.0.cips too and keep the .cips beside the .cip. Packages are signed and an unsigned one is refused (signature_missing) with no flag that accepts it. You do NOT need to anchor us first: this release's publisher key is compiled into the binary, so the install below works on a machine that has anchored nobody. code-index plugin trust list shows it, marked [BUILTIN], and code-index plugin trust remove sha256:1cb03259a8c870b6db02360abd9351e17e67724d1f8c3509d85c4bf6b06fa72c withdraws it — see About that key.

  code-index plugin install de.h-dv.xaml-0.2.0.cip --sha256 sha256:7b572f5cc32ffcd5af550900a451bbef37e255804776d7e3e3e71d2dd7d0aa79
  code-index plugin check   sha256:7b572f5cc32ffcd5af550900a451bbef37e255804776d7e3e3e71d2dd7d0aa79
  code-index plugin enable  sha256:7b572f5cc32ffcd5af550900a451bbef37e255804776d7e3e3e71d2dd7d0aa79 \
      --capabilities bridge_source \
      --bridges 'de.h-dv.xaml/xaml:type->csharp:class,de.h-dv.xaml/xaml:call->csharp:method'
  

  The digest above is the one this release packed and it is what --sha256 pins; de.h-dv.xaml-0.2.0.cip.digest.txt carries it and the extraction identity. A digest that changes between releases means the package changed — re-pin, and read the notes.

  Only .xaml is claimed by this package. The TimeLine package below claims .dataset, .xsql, .shd and .lgd, and the Svelte package below claims .svelte; all other markup remains text-only (searchable, no symbols).

  TimeLine plugin package

  de.h-dv.timeline-0.1.0.cip makes the four TimeLine definition formats carry symbols and references instead of being text-only: .dataset and .xsql through one language, .shd and .lgd through another, both out of a single sandboxed extractor. References resolve INSIDE a definition file; nothing in v1 crosses into the C# that loads it.

  It is NOT installed by installing code-index. Packages are installed into a user-controlled store and approved per project, and installing grants nothing — enable is the grant.

  Download de.h-dv.timeline-0.1.0.cips too and keep the .cips beside the .cip. The same signature rules apply as for the XAML package above, and the same key signs both.

  code-index plugin install de.h-dv.timeline-0.1.0.cip --sha256 sha256:150ceb22ed9757a660d5a2bf58b80c81b60043cc419e5da5dde559d5d6fc9c9f
  code-index plugin check   sha256:150ceb22ed9757a660d5a2bf58b80c81b60043cc419e5da5dde559d5d6fc9c9f
  code-index plugin enable  sha256:150ceb22ed9757a660d5a2bf58b80c81b60043cc419e5da5dde559d5d6fc9c9f \
      --capabilities same_file_candidate,exported_candidate
  

  No --bridges, and that is the package saying so: it declares none, so there is nothing to grant. The digest above is the one this release packed and it is what --sha256 pins; de.h-dv.timeline-0.1.0.cip.digest.txt carries it and the extraction identity.

  The 5 fixtures shipped inside it are synthetic and modelled on the worked examples in the two format specifications. They carry no customer definition.

  Ruby plugin package

  de.h-dv.ruby-0.7.0.cip is the compiled-in Ruby extractor as an EXTERNAL, sandboxed package: tree-sitter-ruby loaded at runtime, the extractor compiled to wasm32-unknown-unknown and byte-reproducible from crates/guest/ruby/, and the same symbols, references, visibility and Rails association names the built-in produces.

  It claims .rbx, not .rb. The compiled-in Ruby plugin owns .rb, .rake, .gemspec, Rakefile and Gemfile, and a package may not claim a file a built-in claims. So installing this changes NOTHING about how your .rb files are indexed — it is the migration proof for running a full language out of a package, published so it can be read and run rather than described. Do not install it expecting to replace built-in Ruby support.

  It is NOT installed by installing code-index. Packages are installed into a user-controlled store and approved per project, and installing grants nothing — enable is the grant.

  Download de.h-dv.ruby-0.7.0.cips too and keep the .cips beside the .cip. The same signature rules apply as for the packages above, and one key signs every package in this release.

  code-index plugin install de.h-dv.ruby-0.7.0.cip --sha256 sha256:5779e34c30d88e213d71091b725b2f3363dfdac53c9f58b85604577db08ad9e3
  code-index plugin check   sha256:5779e34c30d88e213d71091b725b2f3363dfdac53c9f58b85604577db08ad9e3 --derived-names
  code-index plugin enable  sha256:5779e34c30d88e213d71091b725b2f3363dfdac53c9f58b85604577db08ad9e3 --derived-names \
      --capabilities same_file_candidate,exported_candidate,reachability_anchor,qualified_candidate,type_position_candidate,member_candidate
  

  --derived-names is required on check as well as on enable, and without it check REPORTS FAILED. Rails' has_many :posts emits a type reference named Post at the span of the literal :posts, so the name was not copied out of the source it points at; validation is all-or-nothing per file, so the authority is what admits the whole file rather than the one row. Withhold it and you keep the package with every Rails file refused — that is a supported answer, not a broken install.

  No --bridges: Ruby resolves inside its own language, so the package declares none. The six capabilities above are exactly what its manifest requests and enable refuses a grant wider than the request; grant fewer and the index stays searchable but resolves less, because every candidate pool a reference could be admitted to is one of them.

  The digest above is the one this release packed and it is what --sha256 pins; de.h-dv.ruby-0.7.0.cip.digest.txt carries it and the extraction identity.

  The 5 fixtures shipped inside it were generated from the COMPILED-IN Ruby extractor, by a different author from the port they grade, and plugin check compares the package's facts against them exhaustively.

  Svelte plugin package

  de.h-dv.svelte-0.1.0.cip makes .svelte files carry symbols and references instead of being text-only: the TEMPLATE half of a single-file component — markup, mustaches, {#snippet} declarations and {@render} uses — out of one sandboxed extractor over the tree-sitter-svelte-ng grammar.

  It claims .svelte and NOTHING ELSE. .svelte.ts and .svelte.js are deliberately not claimed and this package declares no [[displaces]]: those files are Svelte 5 runes modules, valid TypeScript and valid JavaScript, which the built-in plugins already index correctly. Claiming them would take files away from a producer that reads them in order to read them worse.

  It is NOT installed by installing code-index. Packages are installed into a user-controlled store and approved per project, and installing grants nothing — enable is the grant.

  Download de.h-dv.svelte-0.1.0.cips too and keep the .cips beside the .cip. The same signature rules apply as for the packages above, and one key signs every package in this release.

  code-index plugin install de.h-dv.svelte-0.1.0.cip --sha256 sha256:4b10a478532d67f3694995373e1a64d397611af5c4f2615c085b006628b3322f
  code-index plugin check   sha256:4b10a478532d67f3694995373e1a64d397611af5c4f2615c085b006628b3322f
  code-index plugin enable  sha256:4b10a478532d67f3694995373e1a64d397611af5c4f2615c085b006628b3322f \
      --capabilities same_file_candidate
  

  One capability, and that is the package asking for exactly what it can use. Every symbol this version emits is a {#snippet}, whose visibility is file: reachable by name anywhere in its own component and nowhere else. exported_candidate would admit an empty set, so it is not requested — and enable refuses a grant wider than the manifest asks for, so the line above cannot be padded. No --bridges: this package declares none.

  The digest above is the one this release packed and it is what --sha256 pins; de.h-dv.svelte-0.1.0.cip.digest.txt carries it and the extraction identity.

  The 4 fixtures shipped inside it are synthetic: one positive control in which every rule fires, two that are bait for all of them with an empty expectation, and one malformed source. None carries anybody's component.

  About that key

  sha256:1cb03259a8c870b6db02360abd9351e17e67724d1f8c3509d85c4bf6b06fa72c is a long-lived Ed25519 key held as a secret in this project's CI, used to sign released packages automatically, and it is compiled into the binaries in this release. It signs every package above. That trusts this project's release pipeline, not only its maintainers: anyone who can run a release workflow here can produce a package that verifies under it. It adds nothing you had not already granted — the bytes are inside the program you are running, so forging that anchor means forging the binary — but you are entitled to know it is there before a package installs rather than after.

  There is no expiry — deliberately, because offline installations must not break on a timer — and withdrawal is on your side and works: code-index plugin trust remove sha256:1cb03259a8c870b6db02360abd9351e17e67724d1f8c3509d85c4bf6b06fa72c. A compiled-in key has no file to delete, so that writes one instead, carrying denied = true; the key stops verifying at the next load, plugin trust list shows it marked [DENIED], and deleting that file (the command prints its path) is the only undo. If the key is ever rotated, the new fingerprint is published here and in tests/packages/first-party.fingerprint, and a build that predates the rotation will not trust it.

  You may anchor it yourself instead — code-index plugin trust add code-index-publisher.pub --fingerprint sha256:1cb03259a8c870b6db02360abd9351e17e67724d1f8c3509d85c4bf6b06fa72c --name 'a label you choose', with code-index-publisher.pub from this release's assets. Your file replaces the compiled-in entry, and the --name is a label YOU choose: nothing in the package, the key file or the signature can name its own publisher.

  macOS is not currently built. No x86_64-apple-darwin or aarch64-apple-darwin archive is published — macOS users should build from source (cargo build --release). This is a deliberate deferral, tracked in #59; no date is promised.

  Wire into Claude Code

  { "mcpServers": { "code-index": { "command": "/usr/local/bin/code-index-mcp", "args": ["--root", "/path/to/your/project"] } } }
  

  SHA256 checksums (.sha256 files) available for every archive.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • code-index-publisher.pub
    0 downloads · 2026-09-26 18:58:51 +02:00 · 64 B
  • code-index-v0.32.2-linux-aarch64.tar.gz
    0 downloads · 2026-09-26 18:58:26 +02:00 · 22 MiB
  • code-index-v0.32.2-linux-aarch64.tar.gz.sha256
    1 download · 2026-09-26 18:58:30 +02:00 · 106 B
  • code-index-v0.32.2-linux-x86_64-musl.tar.gz
    0 downloads · 2026-09-26 18:58:35 +02:00 · 24 MiB
  • code-index-v0.32.2-linux-x86_64-musl.tar.gz.sha256
    1 download · 2026-09-26 18:58:39 +02:00 · 110 B
  • code-index-v0.32.2-linux-x86_64.tar.gz
    1 download · 2026-09-26 18:58:43 +02:00 · 24 MiB
  • code-index-v0.32.2-linux-x86_64.tar.gz.sha256
    1 download · 2026-09-26 18:58:47 +02:00 · 105 B
  • code-index-v0.32.2-windows-x86_64.zip
    2 downloads · 2026-09-26 19:00:00 +02:00 · 24 MiB
  • code-index-v0.32.2-windows-x86_64.zip.sha256
    2 downloads · 2026-09-26 19:00:05 +02:00 · 105 B
  • de.h-dv.ruby-0.7.0.cip
    0 downloads · 2026-09-26 18:58:55 +02:00 · 2.1 MiB
  • de.h-dv.ruby-0.7.0.cip.digest.txt
    0 downloads · 2026-09-26 18:58:59 +02:00 · 658 B
  • de.h-dv.ruby-0.7.0.cips
    0 downloads · 2026-09-26 18:59:07 +02:00 · 112 B
  • de.h-dv.ruby-0.7.0.cip.sha256
    1 download · 2026-09-26 18:59:03 +02:00 · 89 B
  • de.h-dv.svelte-0.1.0.cip
    0 downloads · 2026-09-26 18:59:11 +02:00 · 90 KiB
  • de.h-dv.svelte-0.1.0.cip.digest.txt
    0 downloads · 2026-09-26 18:59:16 +02:00 · 658 B
  • de.h-dv.svelte-0.1.0.cips
    0 downloads · 2026-09-26 18:59:24 +02:00 · 112 B
  • de.h-dv.svelte-0.1.0.cip.sha256
    1 download · 2026-09-26 18:59:20 +02:00 · 91 B
  • de.h-dv.timeline-0.1.0.cip
    0 downloads · 2026-09-26 18:59:28 +02:00 · 97 KiB
  • de.h-dv.timeline-0.1.0.cip.digest.txt
    0 downloads · 2026-09-26 18:59:32 +02:00 · 658 B
  • de.h-dv.timeline-0.1.0.cips
    0 downloads · 2026-09-26 18:59:40 +02:00 · 112 B
  • de.h-dv.timeline-0.1.0.cip.sha256
    1 download · 2026-09-26 18:59:36 +02:00 · 93 B
  • de.h-dv.xaml-0.2.0.cip
    0 downloads · 2026-09-26 18:59:44 +02:00 · 60 KiB
  • de.h-dv.xaml-0.2.0.cip.digest.txt
    0 downloads · 2026-09-26 18:59:48 +02:00 · 658 B
  • de.h-dv.xaml-0.2.0.cips
    0 downloads · 2026-09-26 18:59:56 +02:00 · 112 B
  • de.h-dv.xaml-0.2.0.cip.sha256
    1 download · 2026-09-26 18:59:52 +02:00 · 89 B
  • install.ps1
    0 downloads · 2026-09-26 19:00:09 +02:00 · 45 KiB
  • install.ps1.sha256
    1 download · 2026-09-26 19:00:13 +02:00 · 78 B
  • install.sh
    0 downloads · 2026-09-26 19:00:17 +02:00 · 29 KiB
  • install.sh.sha256
    1 download · 2026-09-26 19:00:21 +02:00 · 77 B
  • registry.v1.json
    2 downloads · 2026-09-26 19:00:25 +02:00 · 6.4 KiB
  • registry.v1.json.sha256
    1 download · 2026-09-26 19:00:29 +02:00 · 83 B
  • registry.v1.json.sig
    0 downloads · 2026-09-26 19:00:33 +02:00 · 112 B