56 releases 58 tags

RSS feed

• v0.4.1 5669573a04

  Compare

  v0.4.1 Stable

  buildagent released this 2026-06-04 15:41:06 +02:00 | 268 commits to master since this release

  Security hardening

  Completes the parser recursion-depth hardening started in v0.4.0.

  v0.4.0 capped every plugin's walk recursion, but the self-recursive type-expression helpers in the Python, C#, and TypeScript plugins were still unbounded. A crafted file with a deeply nested type expression (List[List[...]], List<List<...>>, Array<Array<...>>) is reached via a shallow walk but recurses thousands of levels inside emit_type_ref / emit_receiver_type_refs, overflowing the daemon's worker stack — which catch_unwind cannot intercept.

  Each helper now routes through a depth-aware core guarded by MAX_PARSE_DEPTH. Extraction behavior is unchanged; a deep-nested-type regression test per plugin confirms the guard (verified to SIGABRT with the cap disabled). PHP's type helper is structurally flat and needs no guard.

  With this, all six language parsers are fully guarded against the deeply-nested-input stack-overflow DoS — closing the last residual from the v0.4.0 ultradeep review.

  Changes: v0.4.0...v0.4.1

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • code-index-v0.4.1-x86_64-unknown-linux-gnu.tar.gz
    1 download · 2026-06-04 15:48:13 +02:00 · 13 MiB
  • code-index-v0.4.1-x86_64-unknown-linux-gnu.tar.gz.sha256
    0 downloads · 2026-06-04 15:48:13 +02:00 · 116 B
• v0.4.0 8b245d1a48

  Compare

  v0.4.0 Stable

  buildagent released this 2026-06-04 15:30:50 +02:00 | 269 commits to master since this release

  Highlights

  Ruby is now a fully supported language (sixth indexed language), with Rails-aware extraction — and this release closes a stack-overflow DoS that affected every language parser.

  Ruby plugin

  • Detects .rb / .rake / .gemspec and the extensionless Rakefile / Gemfile.
  • Modules, classes (+ superclass type refs), instance & singleton methods, top-level functions, constants, attr_* fields, require/require_relative imports, bare-call vs receiver method_call refs, and include/extend/prepend mixin refs.
  • Rails-aware associations: has_many / has_one / belongs_to / has_and_belongs_to_many emit a type reference to the associated model class — honoring class_name: and singularizing plural names — so find_references on a model surfaces its association sites.

  Security: parser recursion-depth guard

  A crafted file of deeply nested literals (well under the 2 MiB size cap) could overflow the worker stack and crash the long-lived daemon — and catch_unwind cannot intercept stack exhaustion. All six language plugins now cap recursion depth, so a single malicious file can no longer take down the daemon. Verified with a 2 MiB-stack regression test on 20 000-deep input.

  Parity & tests

  Wired Ruby into qualified-name separators, project-root detection (Gemfile/*.gemspec), entry-point heuristics, ctags cross-validation, and the init template. Ships 25 unit tests, full e2e + Rails-association + parity coverage, and a 5-layer correctness_ruby cross-validation against ripgrep/ctags.

  Reviewed ultradeep by a multi-agent pass (correctness, security, performance, test coverage, cross-language parity, production readiness) with adversarial verification of every finding.

  Changes: v0.3.3...v0.4.0

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v0.3.3 15e7039d37

  Compare

  v0.3.3 Stable

  buildagent released this 2026-06-04 14:29:17 +02:00 | 270 commits to master since this release

  Fix

  Release builds previously set panic = "abort", which silently turned the catch_unwind guard in parse_with_plugin into a no-op: a panicking tree-sitter grammar would SIGABRT the whole long-lived daemon instead of being caught and recorded as a parse_error row. This release switches [profile.release] to panic = "unwind" so that resilience holds in production. The size optimizations (lto, codegen-units, strip) are unchanged.

  Verified end-to-end under the real release profile: a panicking plugin is caught and recorded (IndexStats.parse_errors=1, exit 0); a negative control under panic = "abort" aborts with exit 134, confirming the regression was real.

  Note: this regression is invisible to cargo test — the test harness forces panic = "unwind" regardless of profile.

  Changes: v0.3.2...v0.3.3

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v0.3.2 3fa96a3fda

  Compare

  code-index v0.3.2 Stable

  buildagent released this 2026-05-21 22:04:36 +02:00 | 274 commits to master since this release

  code-index v0.3.2

  Build: v0.3.2+local

  Three-binary release: code-index-mcp (MCP stdio bridge — the usual entry), code-index-daemon (long-lived watcher + RPC server, auto-spawned), and code-index (CLI: init, index, watch, doctor, link).

  Downloads

  Platform	Archive
  Linux x86_64	code-index-v0.3.2-linux-x86_64.tar.gz
  Linux ARM64	code-index-v0.3.2-linux-aarch64.tar.gz
  Windows x64	code-index-v0.3.2-windows-x86_64.zip

  Wire into Claude Code

  { "mcpServers": { "code-index": { "command": "/usr/local/bin/code-index-mcp", "args": ["--root", "/path/to/your/project"] } } }
  

  SHA256 checksums (.sha256 files) available for every archive.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • code-index-v0.3.2-linux-aarch64.tar.gz
    0 downloads · 2026-05-21 22:11:22 +02:00 · 11 MiB
  • code-index-v0.3.2-linux-aarch64.tar.gz.sha256
    0 downloads · 2026-05-21 22:11:27 +02:00 · 105 B
  • code-index-v0.3.2-linux-x86_64.tar.gz
    0 downloads · 2026-05-21 22:11:40 +02:00 · 11 MiB
  • code-index-v0.3.2-linux-x86_64.tar.gz.sha256
    0 downloads · 2026-05-21 22:11:44 +02:00 · 104 B
  • code-index-v0.3.2-windows-x86_64.zip
    0 downloads · 2026-05-21 22:11:35 +02:00 · 11 MiB
  • code-index-v0.3.2-windows-x86_64.zip.sha256
    0 downloads · 2026-05-21 22:11:31 +02:00 · 103 B
• v0.3.1 52f0535fc5

  Compare

  code-index v0.3.1 Stable

  buildagent released this 2026-05-20 12:19:09 +02:00 | 276 commits to master since this release

  code-index v0.3.1

  Build: v0.3.1+local

  Three-binary release: code-index-mcp (MCP stdio bridge — the usual entry), code-index-daemon (long-lived watcher + RPC server, auto-spawned), and code-index (CLI: init, index, watch, doctor, link).

  Downloads

  Platform	Archive
  Linux x86_64	code-index-v0.3.1-linux-x86_64.tar.gz
  Linux ARM64	code-index-v0.3.1-linux-aarch64.tar.gz
  Windows x64	code-index-v0.3.1-windows-x86_64.zip

  Wire into Claude Code

  { "mcpServers": { "code-index": { "command": "/usr/local/bin/code-index-mcp", "args": ["--root", "/path/to/your/project"] } } }
  

  SHA256 checksums (.sha256 files) available for every archive.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • code-index-v0.3.1-linux-aarch64.tar.gz
    0 downloads · 2026-05-20 12:25:30 +02:00 · 11 MiB
  • code-index-v0.3.1-linux-aarch64.tar.gz.sha256
    0 downloads · 2026-05-20 12:25:26 +02:00 · 105 B
  • code-index-v0.3.1-linux-x86_64.tar.gz
    0 downloads · 2026-05-20 12:25:44 +02:00 · 11 MiB
  • code-index-v0.3.1-linux-x86_64.tar.gz.sha256
    0 downloads · 2026-05-20 12:25:48 +02:00 · 104 B
  • code-index-v0.3.1-windows-x86_64.zip
    0 downloads · 2026-05-20 12:25:39 +02:00 · 11 MiB
  • code-index-v0.3.1-windows-x86_64.zip.sha256
    0 downloads · 2026-05-20 12:25:35 +02:00 · 103 B
• v0.3.0 be340898c8

  Compare

  code-index v0.3.0 Stable

  buildagent released this 2026-05-12 09:58:37 +02:00 | 281 commits to master since this release

  code-index v0.3.0

  Build: v0.3.0+local

  Three-binary release: code-index-mcp (MCP stdio bridge — the usual entry), code-index-daemon (long-lived watcher + RPC server, auto-spawned), and code-index (CLI: init, index, watch, doctor, link).

  Downloads

  Platform	Archive
  Linux x86_64	code-index-v0.3.0-linux-x86_64.tar.gz
  Linux ARM64	code-index-v0.3.0-linux-aarch64.tar.gz
  Windows x64	code-index-v0.3.0-windows-x86_64.zip

  Wire into Claude Code

  { "mcpServers": { "code-index": { "command": "/usr/local/bin/code-index-mcp", "args": ["--root", "/path/to/your/project"] } } }
  

  SHA256 checksums (.sha256 files) available for every archive.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • code-index-v0.3.0-linux-aarch64.tar.gz
    0 downloads · 2026-05-12 10:05:10 +02:00 · 11 MiB
  • code-index-v0.3.0-linux-aarch64.tar.gz.sha256
    0 downloads · 2026-05-12 10:05:14 +02:00 · 105 B
  • code-index-v0.3.0-linux-x86_64.tar.gz
    0 downloads · 2026-05-12 10:05:19 +02:00 · 11 MiB
  • code-index-v0.3.0-linux-x86_64.tar.gz.sha256
    2 downloads · 2026-05-12 10:05:23 +02:00 · 104 B
  • code-index-v0.3.0-windows-x86_64.zip
    0 downloads · 2026-05-12 10:05:06 +02:00 · 11 MiB
  • code-index-v0.3.0-windows-x86_64.zip.sha256
    0 downloads · 2026-05-12 10:05:01 +02:00 · 103 B