Release v1.4.1

Changelog

All notable changes to Code-Index-MCP will be documented in this file.

The format is based on Keep a Changelog,
and this project adheres to Semantic Versioning.

[Unreleased]

[Unreleased]: # placeholder for post-rc5 work

[1.4.1] - 2026-09-12

Prepared corrective release for Code-Index-MCP#97. This section does not imply publication;
protected-main dispatch and independent delivered-artifact acceptance are separate gates.

Fixed

• Installed wheel and non-root container startup, SQLite upgrade and MCP lifecycle checks.
• Repository state, query refusal and generation fencing across interrupted indexing.
• Path, credential, artifact and local-inference policy boundaries.
• SQLite/vector reconciliation, staged corpus provenance and duplicate vector mapping counts.
• Disabled watcher admission, bounded shutdown and repository selectors in the admin UI.
• Signed artifact metadata binds repository identity and archive checksum; restores use fresh output directories.
• Staged reindex cancellation and durable row counts, independent ignore rules, cleanup failures and multi-language search scope.

Verified

• Original pre-review pilot: installed PMCP 2.7.3, Inspector 2.6.0 and admin workflows on Linux/Python 3.12.
• Original bounded synthetic local-inference pilot with durable accounting and query/index contention; runtime repairs require fresh candidate-bound acceptance.
• Version-specific release checks and final review are tracked in docs/operations/v13-release.md.

Limits

• Controlled rollout only; multi-repo and STDIO remain beta. No automatic fleet indexing.
• Other operating systems, Python 3.13+, broad retrieval quality and default reranking
  require separate evidence. Provider immutable revisions were unreported in the pilot.
• Archive-only signatures from earlier versions are rejected in enforce mode; prepare and sign canonical metadata as documented in docs/security/attestation.md.

[1.4.0] — 2026-07-19

Minor feature release that lands the provider-neutral inference stack, the
tree-sitter chunker v4, and safer index rebuild/rollout gating on top of the
1.3.1 hardening surface.

Added

• Provider-neutral inference boundary so semantic/inference backends can be
  swapped behind a stable interface without changing caller contracts (#74).
• Tree-sitter chunker v4 adoption for more accurate and stable code chunking
  across supported languages (#79).
• Collection-resident, provenance-bound inference rollout gate (INFERLIVEGATE)
  that only activates inference for verified, provenance-tracked collections
  (#83).
• Roadmap v12 charting the next feature and hardening milestones (#77) and an
  inference-rollout operations runbook (#86).

Changed

• Chunk-identity hardening via the CHUNKERSAFE guard, atomic index rebuild, and
  crash-ledger drain so interrupted rebuilds recover without corrupt or
  duplicated chunks (#84).
• Inference hygiene tightened end to end (INFERPOLISH) (#82).
• Four Lane A cleanups, including an explicit INDEX_LOCKED readiness state for
  concurrent index operations (#85).
• CI now derives the GHCR image namespace from the repository owner so release
  images publish correctly after the organization transfer (#89).
• Author standardization and CODEOWNERS added for deterministic review routing
  (#87, #88).

Fixed

• Release container images are signed without crane, and the ownerless install
  URLs in the release automation and install scripts were corrected (#92).

[1.3.1] — 2026-07-10 (Unpublished)

Fixed

• Enforced the FastAPI JWT boundary independently from the optional local
  STDIO handshake and removed ambiguous repository-selector fallback.
• Made staged index recovery atomic and fail closed, unified summarization
  results, and bounded sandbox worker lifecycle and request handling.
• Restored deterministic local quality gates, release-critical typing, and
  hermetic test execution across the supported release matrix.
• Split release preparation from protected-main publication and pinned every
  external GitHub Action to an immutable upstream commit.

Release status

• Package, runtime, active documentation, installers, and local build artifacts
  are prepared as 1.3.1 / v1.3.1.
• No tag, GitHub release, container image, attestation, or PyPI package was
  published by this hardening phase.

[1.3.0] — 2026-07-06

Added

• Added the public mcp_server.client Python API with typed local search,
  symbol lookup, reindex, and status operations for programmatic use without
  starting MCP STDIO or FastAPI.
• Added source metadata filters for ordinary code, friction signals, and
  historical GitHub issue context across the direct client, MCP tool handlers,
  and FastAPI /search.

Changed

• Advanced the repo-owned package, runtime, release automation, installer, and
  active public documentation surface from 1.2.0 / v1.2.0 to 1.3.0 /
  v1.3.0.
• Preserved index-it-mcp as the canonical Python distribution while keeping
  code-index-mcp limited to repository, client-local server, and container
  naming surfaces.

[1.2.0] — 2026-04-25

Changed (GAREL — stable surface preparation)

• Prepared the stable 1.2.0 / v1.2.0 repo-owned release surface across
  package metadata, runtime metadata, release automation defaults, active
  install docs, support docs, and Docker installer helpers.
• Preserved v1.2.0-rc8 as historical prerelease soak evidence only while
  routing the actual stable dispatch and GA release evidence to downstream
  GADISP.

Known limitations

• This phase did not dispatch the stable release; GitHub Latest and Docker
  latest remain stable-only outputs that are still verified in GADISP.
• Beta, experimental, unsupported, and disabled-by-default support-tier limits
  remain governed by docs/SUPPORT_MATRIX.md; stable surface prep does not
  broaden product topology or runtime claims.

[1.2.0-rc8] — 2026-04-25

Changed (GARECUT — post-remediation RC recut freeze)

• Advanced the active remediated RC recut contract to 1.2.0-rc8 /
  v1.2.0-rc8 across package metadata, runtime metadata, release automation
  defaults, and installer helpers without widening into GA channel changes.
• Froze the rc8 recut evidence and final-decision handoff expectations so a
  blocked or successful prerelease proof can route the next work either back
  through renewed GAREL or into a GARECUT rerun without silently authorizing
  GA.

Known limitations

• v1.2.0-rc8 remains a prerelease RC/public-alpha or beta channel artifact;
• it does not authorize GA wording, GitHub Latest promotion, or stable Docker
  latest; GitHub Latest is not the RC policy source.
• GARECUT dispatch still requires a clean enough release worktree, HEAD == origin/main, and unused local plus remote v1.2.0-rc8 tags before
  gh workflow run may execute.

[1.2.0-rc7] — 2026-04-24

[1.2.0-rc6] — 2026-04-24

Changed (GARC — follow-up RC soak freeze)

• Advanced the active follow-up RC contract to 1.2.0-rc6 / v1.2.0-rc6
  across package metadata, runtime metadata, release automation defaults,
  installer helpers, README status, and the active Docker/MCP configuration
  docs.
• Added explicit follow-up RC soak operator guidance and evidence reduction for
  GARC so dispatch prerequisites, workflow observation fields, and blocked-stop
  handling are frozen before any new release mutation.

Known limitations

• v1.2.0-rc6 remains a prerelease RC/public-alpha or beta channel artifact;
  it does not authorize GA wording, GitHub Latest promotion, or stable Docker
  latest; GitHub Latest is not the RC policy source.
• GARC dispatch still requires a clean worktree plus fresh upstream
  governance/E2E/operations evidence before gh workflow run may execute.

[1.2.0-rc5] — 2026-04-23

Fixed (P27-P33 — v3 multi-repo blocker closeout)

• Added fail-closed readiness handling for missing, empty, stale, building,
  wrong-branch, and unsupported-worktree indexes. Query tools now return
  index_unavailable with safe_fallback: "native_search" instead of
  dispatching against an unsafe index.
• Hardened the v3 repository model around many unrelated repositories on one
  machine, one registered worktree per git common directory, and tracked/default
  branch indexing only.
• Added the P33 production multi-repo matrix for unrelated repo isolation,
  same-repo worktree rejection, wrong-branch safety, stale/missing index
  fallback, incremental repair, rename/delete/revert, force-push recovery, and
  wrong-artifact rejection.

Changed (P34 — public alpha recut)

• Recut the public-alpha release contract to 1.2.0-rc5 / v1.2.0-rc5 across
  package metadata, runtime metadata, release automation, README status,
  Docker/MCP setup docs, and docs/SUPPORT_MATRIX.md.
• Aligned outside-developer docs, operator runbooks, and agent handoffs on the
  readiness contract: indexed MCP results are authoritative only when readiness
  is ready; otherwise users should use native search or follow the returned
  remediation.
• Updated docs/operations/deployment-runbook.md to require P27-P33 gates,
  make alpha-production-matrix, docs truth tests, release metadata tests, and
  clean-checkout wheel/container smoke before public-alpha promotion.

Known limitations

• Same-repo sibling worktrees and non-default branch queries are not independent
  indexed-search contexts in v3; they return index_unavailable with
  safe_fallback: "native_search" until a future release expands the topology
  contract.
• Language/runtime support remains scoped by docs/SUPPORT_MATRIX.md, release
  promotion remains gated by docs/operations/deployment-runbook.md, and the
  public-alpha go/no-go evidence remains linked from
  docs/validation/private-alpha-decision.md.

[1.2.0-rc4] — 2026-04-22

Added (P26 — private alpha evidence and ...

Release v1.4.0

⚠️ Container image moved. Pull from ghcr.io/consiliency/code-index-mcp — the old ghcr.io/viperjuice/code-index-mcp name is frozen at ≤ v1.3.1.

docker pull ghcr.io/consiliency/code-index-mcp:v1.4.0   # or :latest

pip install index-it-mcp now resolves to 1.4.0 (older 2.x uploads were yanked). Images are cosign-signed as of this release.

---

Changelog

All notable changes to Code-Index-MCP will be documented in this file.

The format is based on Keep a Changelog,
and this project adheres to Semantic Versioning.

[Unreleased]

[Unreleased]: # placeholder for post-rc5 work

[1.4.0] — 2026-07-19

Minor feature release that lands the provider-neutral inference stack, the
tree-sitter chunker v4, and safer index rebuild/rollout gating on top of the
1.3.1 hardening surface.

Added

• Provider-neutral inference boundary so semantic/inference backends can be
  swapped behind a stable interface without changing caller contracts (#74).
• Tree-sitter chunker v4 adoption for more accurate and stable code chunking
  across supported languages (#79).
• Collection-resident, provenance-bound inference rollout gate (INFERLIVEGATE)
  that only activates inference for verified, provenance-tracked collections
  (#83).
• Roadmap v12 charting the next feature and hardening milestones (#77) and an
  inference-rollout operations runbook (#86).

Changed

• Chunk-identity hardening via the CHUNKERSAFE guard, atomic index rebuild, and
  crash-ledger drain so interrupted rebuilds recover without corrupt or
  duplicated chunks (#84).
• Inference hygiene tightened end to end (INFERPOLISH) (#82).
• Four Lane A cleanups, including an explicit INDEX_LOCKED readiness state for
  concurrent index operations (#85).
• CI now derives the GHCR image namespace from the repository owner so release
  images publish correctly after the organization transfer (#89).
• Author standardization and CODEOWNERS added for deterministic review routing
  (#87, #88).

Fixed

• Release container images are signed without crane, and the ownerless install
  URLs in the release automation and install scripts were corrected (#92).

[1.3.1] — 2026-07-10 (Unpublished)

Fixed

• Enforced the FastAPI JWT boundary independently from the optional local
  STDIO handshake and removed ambiguous repository-selector fallback.
• Made staged index recovery atomic and fail closed, unified summarization
  results, and bounded sandbox worker lifecycle and request handling.
• Restored deterministic local quality gates, release-critical typing, and
  hermetic test execution across the supported release matrix.
• Split release preparation from protected-main publication and pinned every
  external GitHub Action to an immutable upstream commit.

Release status

• Package, runtime, active documentation, installers, and local build artifacts
  are prepared as 1.3.1 / v1.3.1.
• No tag, GitHub release, container image, attestation, or PyPI package was
  published by this hardening phase.

[1.3.0] — 2026-07-06

Added

• Added the public mcp_server.client Python API with typed local search,
  symbol lookup, reindex, and status operations for programmatic use without
  starting MCP STDIO or FastAPI.
• Added source metadata filters for ordinary code, friction signals, and
  historical GitHub issue context across the direct client, MCP tool handlers,
  and FastAPI /search.

Changed

• Advanced the repo-owned package, runtime, release automation, installer, and
  active public documentation surface from 1.2.0 / v1.2.0 to 1.3.0 /
  v1.3.0.
• Preserved index-it-mcp as the canonical Python distribution while keeping
  code-index-mcp limited to repository, client-local server, and container
  naming surfaces.

[1.2.0] — 2026-04-25

Changed (GAREL — stable surface preparation)

• Prepared the stable 1.2.0 / v1.2.0 repo-owned release surface across
  package metadata, runtime metadata, release automation defaults, active
  install docs, support docs, and Docker installer helpers.
• Preserved v1.2.0-rc8 as historical prerelease soak evidence only while
  routing the actual stable dispatch and GA release evidence to downstream
  GADISP.

Known limitations

• This phase did not dispatch the stable release; GitHub Latest and Docker
  latest remain stable-only outputs that are still verified in GADISP.
• Beta, experimental, unsupported, and disabled-by-default support-tier limits
  remain governed by docs/SUPPORT_MATRIX.md; stable surface prep does not
  broaden product topology or runtime claims.

[1.2.0-rc8] — 2026-04-25

Changed (GARECUT — post-remediation RC recut freeze)

• Advanced the active remediated RC recut contract to 1.2.0-rc8 /
  v1.2.0-rc8 across package metadata, runtime metadata, release automation
  defaults, and installer helpers without widening into GA channel changes.
• Froze the rc8 recut evidence and final-decision handoff expectations so a
  blocked or successful prerelease proof can route the next work either back
  through renewed GAREL or into a GARECUT rerun without silently authorizing
  GA.

Known limitations

• v1.2.0-rc8 remains a prerelease RC/public-alpha or beta channel artifact;
• it does not authorize GA wording, GitHub Latest promotion, or stable Docker
  latest; GitHub Latest is not the RC policy source.
• GARECUT dispatch still requires a clean enough release worktree, HEAD == origin/main, and unused local plus remote v1.2.0-rc8 tags before
  gh workflow run may execute.

[1.2.0-rc7] — 2026-04-24

[1.2.0-rc6] — 2026-04-24

Changed (GARC — follow-up RC soak freeze)

• Advanced the active follow-up RC contract to 1.2.0-rc6 / v1.2.0-rc6
  across package metadata, runtime metadata, release automation defaults,
  installer helpers, README status, and the active Docker/MCP configuration
  docs.
• Added explicit follow-up RC soak operator guidance and evidence reduction for
  GARC so dispatch prerequisites, workflow observation fields, and blocked-stop
  handling are frozen before any new release mutation.

Known limitations

• v1.2.0-rc6 remains a prerelease RC/public-alpha or beta channel artifact;
  it does not authorize GA wording, GitHub Latest promotion, or stable Docker
  latest; GitHub Latest is not the RC policy source.
• GARC dispatch still requires a clean worktree plus fresh upstream
  governance/E2E/operations evidence before gh workflow run may execute.

[1.2.0-rc5] — 2026-04-23

Fixed (P27-P33 — v3 multi-repo blocker closeout)

• Added fail-closed readiness handling for missing, empty, stale, building,
  wrong-branch, and unsupported-worktree indexes. Query tools now return
  index_unavailable with safe_fallback: "native_search" instead of
  dispatching against an unsafe index.
• Hardened the v3 repository model around many unrelated repositories on one
  machine, one registered worktree per git common directory, and tracked/default
  branch indexing only.
• Added the P33 production multi-repo matrix for unrelated repo isolation,
  same-repo worktree rejection, wrong-branch safety, stale/missing index
  fallback, incremental repair, rename/delete/revert, force-push recovery, and
  wrong-artifact rejection.

Changed (P34 — public alpha recut)

• Recut the public-alpha release contract to 1.2.0-rc5 / v1.2.0-rc5 across
  package metadata, runtime metadata, release automation, README status,
  Docker/MCP setup docs, and docs/SUPPORT_MATRIX.md.
• Aligned outside-developer docs, operator runbooks, and agent handoffs on the
  readiness contract: indexed MCP results are authoritative only when readiness
  is ready; otherwise users should use native search or follow the returned
  remediation.
• Updated docs/operations/deployment-runbook.md to require P27-P33 gates,
  make alpha-production-matrix, docs truth tests, release metadata tests, and
  clean-checkout wheel/container smoke before public-alpha promotion.

Known limitations

• Same-repo sibling worktrees and non-default branch queries are not independent
  indexed-search contexts in v3; they return index_unavailable with
  safe_fallback: "native_search" until a future release expands the topology
  contract.
• Language/runtime support remains scoped by docs/SUPPORT_MATRIX.md, release
  promotion remains gated by docs/operations/deployment-runbook.md, and the
  public-alpha go/no-go evidence remains linked from
  docs/validation/private-alpha-decision.md.

[1.2.0-rc4] — 2026-04-22

Added (P26 — private alpha evidence and public alpha decision)

• Added the P26 private-alpha evidence contract:
  docs/validation/private-alpha-decision.md,
  docs/validation/private-alpha-evidence.schema.json, and the ignored
  private-alpha-evidence/ raw-output boundary.
• Added scripts/private_alpha_evidence.py for local private fixture runs across
  python_repo, typescript_js_repo, mixed_docs_code_repo,
  multi_repo_workspace, and large_ignored_vendor_repo before public alpha.
• Documented public-alpha release truth: supported install paths are
  uv sync --locked/STDIO and ghcr.io/viperjuice/code-index-mcp; language
  support is scoped by docs/SUPPORT_MATRIX.md; beta warnings and rollback
  instructions remain in docs/operations/deployment-runbook.md.

[1.2.0-rc3] — 2026-04-21

Changed (P21 — release contract and dependency unification)

• Unified the P21 release contract across runtime metadata, package metadata,
  README status, changelog, and release automation around 1.2.0-rc3.
• Removed active workflow and Docker dependency references to retired
  requirements*.txt inputs in favor of the locked pyproject.toml/uv.lock
  dependency source.
• Expanded release metadata and requirements-consolidation tests to guard the
  P21 contract surfaces consumed by P22.

Added (P25 — blocking release gates and autom...

Release v1.3.1

Changelog

All notable changes to Code-Index-MCP will be documented in this file.

The format is based on Keep a Changelog,
and this project adheres to Semantic Versioning.

[Unreleased]

[Unreleased]: # placeholder for post-rc5 work

[1.3.1] — 2026-07-10 (Unpublished)

Fixed

• Enforced the FastAPI JWT boundary independently from the optional local
  STDIO handshake and removed ambiguous repository-selector fallback.
• Made staged index recovery atomic and fail closed, unified summarization
  results, and bounded sandbox worker lifecycle and request handling.
• Restored deterministic local quality gates, release-critical typing, and
  hermetic test execution across the supported release matrix.
• Split release preparation from protected-main publication and pinned every
  external GitHub Action to an immutable upstream commit.

Release status

• Package, runtime, active documentation, installers, and local build artifacts
  are prepared as 1.3.1 / v1.3.1.
• No tag, GitHub release, container image, attestation, or PyPI package was
  published by this hardening phase.

[1.3.0] — 2026-07-06

Added

• Added the public mcp_server.client Python API with typed local search,
  symbol lookup, reindex, and status operations for programmatic use without
  starting MCP STDIO or FastAPI.
• Added source metadata filters for ordinary code, friction signals, and
  historical GitHub issue context across the direct client, MCP tool handlers,
  and FastAPI /search.

Changed

• Advanced the repo-owned package, runtime, release automation, installer, and
  active public documentation surface from 1.2.0 / v1.2.0 to 1.3.0 /
  v1.3.0.
• Preserved index-it-mcp as the canonical Python distribution while keeping
  code-index-mcp limited to repository, client-local server, and container
  naming surfaces.

[1.2.0] — 2026-04-25

Changed (GAREL — stable surface preparation)

• Prepared the stable 1.2.0 / v1.2.0 repo-owned release surface across
  package metadata, runtime metadata, release automation defaults, active
  install docs, support docs, and Docker installer helpers.
• Preserved v1.2.0-rc8 as historical prerelease soak evidence only while
  routing the actual stable dispatch and GA release evidence to downstream
  GADISP.

Known limitations

• This phase did not dispatch the stable release; GitHub Latest and Docker
  latest remain stable-only outputs that are still verified in GADISP.
• Beta, experimental, unsupported, and disabled-by-default support-tier limits
  remain governed by docs/SUPPORT_MATRIX.md; stable surface prep does not
  broaden product topology or runtime claims.

[1.2.0-rc8] — 2026-04-25

Changed (GARECUT — post-remediation RC recut freeze)

• Advanced the active remediated RC recut contract to 1.2.0-rc8 /
  v1.2.0-rc8 across package metadata, runtime metadata, release automation
  defaults, and installer helpers without widening into GA channel changes.
• Froze the rc8 recut evidence and final-decision handoff expectations so a
  blocked or successful prerelease proof can route the next work either back
  through renewed GAREL or into a GARECUT rerun without silently authorizing
  GA.

Known limitations

• v1.2.0-rc8 remains a prerelease RC/public-alpha or beta channel artifact;
• it does not authorize GA wording, GitHub Latest promotion, or stable Docker
  latest; GitHub Latest is not the RC policy source.
• GARECUT dispatch still requires a clean enough release worktree, HEAD == origin/main, and unused local plus remote v1.2.0-rc8 tags before
  gh workflow run may execute.

[1.2.0-rc7] — 2026-04-24

[1.2.0-rc6] — 2026-04-24

Changed (GARC — follow-up RC soak freeze)

• Advanced the active follow-up RC contract to 1.2.0-rc6 / v1.2.0-rc6
  across package metadata, runtime metadata, release automation defaults,
  installer helpers, README status, and the active Docker/MCP configuration
  docs.
• Added explicit follow-up RC soak operator guidance and evidence reduction for
  GARC so dispatch prerequisites, workflow observation fields, and blocked-stop
  handling are frozen before any new release mutation.

Known limitations

• v1.2.0-rc6 remains a prerelease RC/public-alpha or beta channel artifact;
  it does not authorize GA wording, GitHub Latest promotion, or stable Docker
  latest; GitHub Latest is not the RC policy source.
• GARC dispatch still requires a clean worktree plus fresh upstream
  governance/E2E/operations evidence before gh workflow run may execute.

[1.2.0-rc5] — 2026-04-23

Fixed (P27-P33 — v3 multi-repo blocker closeout)

• Added fail-closed readiness handling for missing, empty, stale, building,
  wrong-branch, and unsupported-worktree indexes. Query tools now return
  index_unavailable with safe_fallback: "native_search" instead of
  dispatching against an unsafe index.
• Hardened the v3 repository model around many unrelated repositories on one
  machine, one registered worktree per git common directory, and tracked/default
  branch indexing only.
• Added the P33 production multi-repo matrix for unrelated repo isolation,
  same-repo worktree rejection, wrong-branch safety, stale/missing index
  fallback, incremental repair, rename/delete/revert, force-push recovery, and
  wrong-artifact rejection.

Changed (P34 — public alpha recut)

• Recut the public-alpha release contract to 1.2.0-rc5 / v1.2.0-rc5 across
  package metadata, runtime metadata, release automation, README status,
  Docker/MCP setup docs, and docs/SUPPORT_MATRIX.md.
• Aligned outside-developer docs, operator runbooks, and agent handoffs on the
  readiness contract: indexed MCP results are authoritative only when readiness
  is ready; otherwise users should use native search or follow the returned
  remediation.
• Updated docs/operations/deployment-runbook.md to require P27-P33 gates,
  make alpha-production-matrix, docs truth tests, release metadata tests, and
  clean-checkout wheel/container smoke before public-alpha promotion.

Known limitations

• Same-repo sibling worktrees and non-default branch queries are not independent
  indexed-search contexts in v3; they return index_unavailable with
  safe_fallback: "native_search" until a future release expands the topology
  contract.
• Language/runtime support remains scoped by docs/SUPPORT_MATRIX.md, release
  promotion remains gated by docs/operations/deployment-runbook.md, and the
  public-alpha go/no-go evidence remains linked from
  docs/validation/private-alpha-decision.md.

[1.2.0-rc4] — 2026-04-22

Added (P26 — private alpha evidence and public alpha decision)

• Added the P26 private-alpha evidence contract:
  docs/validation/private-alpha-decision.md,
  docs/validation/private-alpha-evidence.schema.json, and the ignored
  private-alpha-evidence/ raw-output boundary.
• Added scripts/private_alpha_evidence.py for local private fixture runs across
  python_repo, typescript_js_repo, mixed_docs_code_repo,
  multi_repo_workspace, and large_ignored_vendor_repo before public alpha.
• Documented public-alpha release truth: supported install paths are
  uv sync --locked/STDIO and ghcr.io/viperjuice/code-index-mcp; language
  support is scoped by docs/SUPPORT_MATRIX.md; beta warnings and rollback
  instructions remain in docs/operations/deployment-runbook.md.

[1.2.0-rc3] — 2026-04-21

Changed (P21 — release contract and dependency unification)

• Unified the P21 release contract across runtime metadata, package metadata,
  README status, changelog, and release automation around 1.2.0-rc3.
• Removed active workflow and Docker dependency references to retired
  requirements*.txt inputs in favor of the locked pyproject.toml/uv.lock
  dependency source.
• Expanded release metadata and requirements-consolidation tests to guard the
  P21 contract surfaces consumed by P22.

Added (P25 — blocking release gates and automation)

• Added explicit public alpha gate jobs for dependency sync, focused format/lint,
  unit plus release smoke, integration smoke, Docker build/smoke, docs truth, and
  required-gate aggregation.
• Added release automation preflight refusal before version mutation, release
  branch creation, artifact build, tag creation, GitHub release creation, PyPI
  publish, or container publish.
• Documented the operator gate checklist and private-alpha authenticated
  attestation fallback for missing ATTESTATION_GH_TOKEN or repository
  attestation settings.

[1.2.0-rc2] — 2026-04-20

Fixed (P20 — sandbox/OpenBLAS hotfix, observability bugs)

• (P20 SL-0) Raised CapabilitySet.mem_mb default from 512 to 2048
  so sandbox-default-on plugins that transitively import numpy/OpenBLAS
  no longer abort on RLIMIT_AS. Closes IF-0-P20-3.
• (P20 SL-2b) Prometheus /metrics endpoint now exposes
  mcp_tool_calls_total, mcp_rate_limit_sleeps_total, and
  mcp_artifact_errors_by_class_total. Previously a registry split
  meant the counters lived on the default REGISTRY while the exporter
  served a private one.
• (P20 SL-2b) SecretRedactionResponseMiddleware is now applied
  on subprocess uvicorn boot. Previously it was registered in a startup
  hook that ran after FastAPI sealed its middleware stack, so subprocess
  gateways never redacted Bearer ... tokens in HTTP responses.

Added (P20 — validation harness, runbook, observability smoke)

• (P20 SL-1) New tests/integration/multi_repo/ harness — pytest
  fixture spawns ≥2 live uvicorn gateway subprocesses sharing one
  registry; tests cover concurrency (200 entries), cross-repo delta
  resolution, and dispatcher repo_id isolation. Closes IF-0-P20-1.
• (P20 SL-2) New tests/integration/obs/ smoke — docker-compose
  Prom+Loki stack proves JSON log parse rate, counter scrape, and
  secret redaction over HTTP. Skips clea...

Release v1.3.0

Changelog for v1.3.0

What's Changed

• Run v8 modernization roadmap and prepare v1.3.0 (#69) (Jenner Torrence)
• docs(readme): add plain-English intro, remove internal jargon (#65) (Sthefany-Martins)
• Fix v6 release gate formatting (ViperJuice)
• phase-loop closeout: MRREADY (ViperJuice)
• phase-loop closeout: MRE2E (ViperJuice)
• phase-loop closeout: CIFLOW (ViperJuice)
• phase-loop closeout: WATCH (ViperJuice)
• phase-loop closeout: IDXSAFE (ViperJuice)
• phase-loop closeout: ARTPUB (ViperJuice)
• Retire GARECUT after stable GA dispatch (Jenner Torrence)
• Record GADISP stable release evidence (#60) (Jenner Torrence)
• Narrow GADISP to dispatch-only plan (#58) (Jenner Torrence)
• Plan GADISP stable dispatch (#57) (Jenner Torrence)
• Prepare stable GAREL release surfaces (#56) (Jenner Torrence)
• Refresh GAREL stable surface plan (ViperJuice)
• Accept download-artifact warning for GA dispatch (#54) (Jenner Torrence)
• Defer GA after GAREL evidence review (#53) (Jenner Torrence)
• Record rc8 recut evidence (#52) (Jenner Torrence)
• Prepare rc8 recut baseline (#50) (Jenner Torrence)
• Prepare rc7 recut baseline (ViperJuice)
• Refresh GARC plan after branch sync (ViperJuice)
• Fix index workflow PR checks (ViperJuice)
• Fix rc6 release gate drift (ViperJuice)
• Refresh GARC blocker plan state (ViperJuice)
• Add GA hardening release readiness evidence (ViperJuice)
• docs: record rc5 release evidence (ViperJuice)
• docs: register rc5 release evidence (ViperJuice)
• style: format release gate test (ViperJuice)
• fix: harden release changelog output (ViperJuice)
• Complete RC5 release gate parity (ViperJuice)
• Complete P34 public alpha recut (ViperJuice)
• Refresh index metadata (ViperJuice)
• Implement artifact identity hydration freshness phase (ViperJuice)
• Implement P29 incremental indexing repair (ViperJuice)
• Harden rc4 release readiness (ViperJuice)
• Update workflow actions for Node 24 (ViperJuice)
• Make cross-platform CI manual only (ViperJuice)
• Silence optional attestation skip warning (ViperJuice)
• Stop scheduled workflow noise (ViperJuice)
• Prepare rc4 release gates (ViperJuice)
• Add P26 private alpha evidence gate (ViperJuice)
• chore: add P24 and P25 release gates (ViperJuice)
• Document rc3 release and support truth (ViperJuice)
• docs: add P22 phase plan (ViperJuice)
• chore: unify P21 release contract (ViperJuice)
• chore: refresh index metadata (post-phase scheduler bump) (ViperJuice)
• merge(p20,sl-cleanup): align tests with rc2 + SL-2b _EXPORTER_REGISTRY (ViperJuice)
• chore: refresh index metadata (mid-phase scheduler bump) (ViperJuice)
• fix(p20,sl-cleanup): align tests with rc2 + SL-2b _EXPORTER_REGISTRY (ViperJuice)
• merge(p20,sl-docs): catalog rescan + p18/sandbox cross-links + SL-0 escapee fix + plan amendments (ViperJuice)
• docs(p20,sl-docs): catalog rescan + p18/sandbox cross-links + sl0 escapee fix + plan amendments (ViperJuice)
• merge(p20,sl-4): cut v1.2.0-rc2 — P20 GA-track ready-for-operator (ViperJuice)

Release v1.2.0

Changelog for v1.2.0

What's Changed

• Narrow GADISP to dispatch-only plan (#58) (Jenner Torrence)
• Plan GADISP stable dispatch (#57) (Jenner Torrence)
• Prepare stable GAREL release surfaces (#56) (Jenner Torrence)
• Refresh GAREL stable surface plan (ViperJuice)
• Accept download-artifact warning for GA dispatch (#54) (Jenner Torrence)
• Defer GA after GAREL evidence review (#53) (Jenner Torrence)
• Record rc8 recut evidence (#52) (Jenner Torrence)
• Prepare rc8 recut baseline (#50) (Jenner Torrence)
• Prepare rc7 recut baseline (ViperJuice)
• Refresh GARC plan after branch sync (ViperJuice)
• Fix index workflow PR checks (ViperJuice)
• Fix rc6 release gate drift (ViperJuice)
• Refresh GARC blocker plan state (ViperJuice)
• Add GA hardening release readiness evidence (ViperJuice)
• docs: record rc5 release evidence (ViperJuice)
• docs: register rc5 release evidence (ViperJuice)
• style: format release gate test (ViperJuice)
• fix: harden release changelog output (ViperJuice)
• Complete RC5 release gate parity (ViperJuice)
• Complete P34 public alpha recut (ViperJuice)
• Refresh index metadata (ViperJuice)
• Implement artifact identity hydration freshness phase (ViperJuice)
• Implement P29 incremental indexing repair (ViperJuice)
• Harden rc4 release readiness (ViperJuice)
• Update workflow actions for Node 24 (ViperJuice)
• Make cross-platform CI manual only (ViperJuice)
• Silence optional attestation skip warning (ViperJuice)
• Stop scheduled workflow noise (ViperJuice)
• Prepare rc4 release gates (ViperJuice)
• Add P26 private alpha evidence gate (ViperJuice)
• chore: add P24 and P25 release gates (ViperJuice)
• Document rc3 release and support truth (ViperJuice)
• docs: add P22 phase plan (ViperJuice)
• chore: unify P21 release contract (ViperJuice)
• chore: refresh index metadata (post-phase scheduler bump) (ViperJuice)
• merge(p20,sl-cleanup): align tests with rc2 + SL-2b _EXPORTER_REGISTRY (ViperJuice)
• chore: refresh index metadata (mid-phase scheduler bump) (ViperJuice)
• fix(p20,sl-cleanup): align tests with rc2 + SL-2b _EXPORTER_REGISTRY (ViperJuice)
• merge(p20,sl-docs): catalog rescan + p18/sandbox cross-links + SL-0 escapee fix + plan amendments (ViperJuice)
• docs(p20,sl-docs): catalog rescan + p18/sandbox cross-links + sl0 escapee fix + plan amendments (ViperJuice)
• merge(p20,sl-4): cut v1.2.0-rc2 — P20 GA-track ready-for-operator (ViperJuice)

Release v1.2.0-rc8

Changelog for v1.2.0-rc8

What's Changed

• Prepare rc8 recut baseline (#50) (Jenner Torrence)
• Prepare rc7 recut baseline (ViperJuice)
• Refresh GARC plan after branch sync (ViperJuice)
• Fix index workflow PR checks (ViperJuice)
• Fix rc6 release gate drift (ViperJuice)
• Refresh GARC blocker plan state (ViperJuice)
• Add GA hardening release readiness evidence (ViperJuice)
• docs: record rc5 release evidence (ViperJuice)
• docs: register rc5 release evidence (ViperJuice)
• style: format release gate test (ViperJuice)
• fix: harden release changelog output (ViperJuice)
• Complete RC5 release gate parity (ViperJuice)
• Complete P34 public alpha recut (ViperJuice)
• Refresh index metadata (ViperJuice)
• Implement artifact identity hydration freshness phase (ViperJuice)
• Implement P29 incremental indexing repair (ViperJuice)
• Harden rc4 release readiness (ViperJuice)
• Update workflow actions for Node 24 (ViperJuice)
• Make cross-platform CI manual only (ViperJuice)
• Silence optional attestation skip warning (ViperJuice)
• Stop scheduled workflow noise (ViperJuice)
• Prepare rc4 release gates (ViperJuice)
• Add P26 private alpha evidence gate (ViperJuice)
• chore: add P24 and P25 release gates (ViperJuice)
• Document rc3 release and support truth (ViperJuice)
• docs: add P22 phase plan (ViperJuice)
• chore: unify P21 release contract (ViperJuice)
• chore: refresh index metadata (post-phase scheduler bump) (ViperJuice)
• merge(p20,sl-cleanup): align tests with rc2 + SL-2b _EXPORTER_REGISTRY (ViperJuice)
• chore: refresh index metadata (mid-phase scheduler bump) (ViperJuice)
• fix(p20,sl-cleanup): align tests with rc2 + SL-2b _EXPORTER_REGISTRY (ViperJuice)
• merge(p20,sl-docs): catalog rescan + p18/sandbox cross-links + SL-0 escapee fix + plan amendments (ViperJuice)
• docs(p20,sl-docs): catalog rescan + p18/sandbox cross-links + sl0 escapee fix + plan amendments (ViperJuice)
• merge(p20,sl-4): cut v1.2.0-rc2 — P20 GA-track ready-for-operator (ViperJuice)

Release v1.2.0-rc7

Changelog for v1.2.0-rc7

What's Changed

• Prepare rc7 recut baseline (ViperJuice)
• Refresh GARC plan after branch sync (ViperJuice)
• Fix index workflow PR checks (ViperJuice)
• Fix rc6 release gate drift (ViperJuice)
• Refresh GARC blocker plan state (ViperJuice)
• Add GA hardening release readiness evidence (ViperJuice)
• docs: record rc5 release evidence (ViperJuice)
• docs: register rc5 release evidence (ViperJuice)
• style: format release gate test (ViperJuice)
• fix: harden release changelog output (ViperJuice)
• Complete RC5 release gate parity (ViperJuice)
• Complete P34 public alpha recut (ViperJuice)
• Refresh index metadata (ViperJuice)
• Implement artifact identity hydration freshness phase (ViperJuice)
• Implement P29 incremental indexing repair (ViperJuice)
• Harden rc4 release readiness (ViperJuice)
• Update workflow actions for Node 24 (ViperJuice)
• Make cross-platform CI manual only (ViperJuice)
• Silence optional attestation skip warning (ViperJuice)
• Stop scheduled workflow noise (ViperJuice)
• Prepare rc4 release gates (ViperJuice)
• Add P26 private alpha evidence gate (ViperJuice)
• chore: add P24 and P25 release gates (ViperJuice)
• Document rc3 release and support truth (ViperJuice)
• docs: add P22 phase plan (ViperJuice)
• chore: unify P21 release contract (ViperJuice)
• chore: refresh index metadata (post-phase scheduler bump) (ViperJuice)
• merge(p20,sl-cleanup): align tests with rc2 + SL-2b _EXPORTER_REGISTRY (ViperJuice)
• chore: refresh index metadata (mid-phase scheduler bump) (ViperJuice)
• fix(p20,sl-cleanup): align tests with rc2 + SL-2b _EXPORTER_REGISTRY (ViperJuice)
• merge(p20,sl-docs): catalog rescan + p18/sandbox cross-links + SL-0 escapee fix + plan amendments (ViperJuice)
• docs(p20,sl-docs): catalog rescan + p18/sandbox cross-links + sl0 escapee fix + plan amendments (ViperJuice)
• merge(p20,sl-4): cut v1.2.0-rc2 — P20 GA-track ready-for-operator (ViperJuice)

Release v1.2.0-rc6

Changelog for v1.2.0-rc6

What's Changed

• Refresh GARC plan after branch sync (ViperJuice)
• Fix index workflow PR checks (ViperJuice)
• Fix rc6 release gate drift (ViperJuice)
• Refresh GARC blocker plan state (ViperJuice)
• Add GA hardening release readiness evidence (ViperJuice)
• docs: record rc5 release evidence (ViperJuice)
• docs: register rc5 release evidence (ViperJuice)
• style: format release gate test (ViperJuice)
• fix: harden release changelog output (ViperJuice)
• Complete RC5 release gate parity (ViperJuice)
• Complete P34 public alpha recut (ViperJuice)
• Refresh index metadata (ViperJuice)
• Implement artifact identity hydration freshness phase (ViperJuice)
• Implement P29 incremental indexing repair (ViperJuice)
• Harden rc4 release readiness (ViperJuice)
• Update workflow actions for Node 24 (ViperJuice)
• Make cross-platform CI manual only (ViperJuice)
• Silence optional attestation skip warning (ViperJuice)
• Stop scheduled workflow noise (ViperJuice)
• Prepare rc4 release gates (ViperJuice)
• Add P26 private alpha evidence gate (ViperJuice)
• chore: add P24 and P25 release gates (ViperJuice)
• Document rc3 release and support truth (ViperJuice)
• docs: add P22 phase plan (ViperJuice)
• chore: unify P21 release contract (ViperJuice)
• chore: refresh index metadata (post-phase scheduler bump) (ViperJuice)
• merge(p20,sl-cleanup): align tests with rc2 + SL-2b _EXPORTER_REGISTRY (ViperJuice)
• chore: refresh index metadata (mid-phase scheduler bump) (ViperJuice)
• fix(p20,sl-cleanup): align tests with rc2 + SL-2b _EXPORTER_REGISTRY (ViperJuice)
• merge(p20,sl-docs): catalog rescan + p18/sandbox cross-links + SL-0 escapee fix + plan amendments (ViperJuice)
• docs(p20,sl-docs): catalog rescan + p18/sandbox cross-links + sl0 escapee fix + plan amendments (ViperJuice)
• merge(p20,sl-4): cut v1.2.0-rc2 — P20 GA-track ready-for-operator (ViperJuice)

Release v1.2.0-rc5

Changelog for v1.2.0-rc5

What's Changed

• docs: register rc5 release evidence (ViperJuice)
• style: format release gate test (ViperJuice)
• fix: harden release changelog output (ViperJuice)
• Complete RC5 release gate parity (ViperJuice)
• Complete P34 public alpha recut (ViperJuice)
• Refresh index metadata (ViperJuice)
• Implement artifact identity hydration freshness phase (ViperJuice)
• Implement P29 incremental indexing repair (ViperJuice)
• Harden rc4 release readiness (ViperJuice)
• Update workflow actions for Node 24 (ViperJuice)
• Make cross-platform CI manual only (ViperJuice)
• Silence optional attestation skip warning (ViperJuice)
• Stop scheduled workflow noise (ViperJuice)
• Prepare rc4 release gates (ViperJuice)
• Add P26 private alpha evidence gate (ViperJuice)
• chore: add P24 and P25 release gates (ViperJuice)
• Document rc3 release and support truth (ViperJuice)
• docs: add P22 phase plan (ViperJuice)
• chore: unify P21 release contract (ViperJuice)
• chore: refresh index metadata (post-phase scheduler bump) (ViperJuice)
• merge(p20,sl-cleanup): align tests with rc2 + SL-2b _EXPORTER_REGISTRY (ViperJuice)
• chore: refresh index metadata (mid-phase scheduler bump) (ViperJuice)
• fix(p20,sl-cleanup): align tests with rc2 + SL-2b _EXPORTER_REGISTRY (ViperJuice)
• merge(p20,sl-docs): catalog rescan + p18/sandbox cross-links + SL-0 escapee fix + plan amendments (ViperJuice)
• docs(p20,sl-docs): catalog rescan + p18/sandbox cross-links + sl0 escapee fix + plan amendments (ViperJuice)
• merge(p20,sl-4): cut v1.2.0-rc2 — P20 GA-track ready-for-operator (ViperJuice)

Release v2.15.0-alpha.1

Changelog for v2.15.0-alpha.1

What's Changed

• fix: remove unused tree_sitter.Language imports (flake8 F401) (ViperJuice)
• fix: isort import ordering in test_mcp_server_cli and test_dispatcher_advanced (ViperJuice)
• chore: remove Kubernetes/Slack deployment scaffolding from CI (ViperJuice)
• fix: black formatting and trivy action version pin (ViperJuice)
• fix: alpha readiness — install workflow, post-commit hook, startup warning, test coverage (ViperJuice)
• fix: 5 production readiness items — semantic vector cleanup, CI, install script (ViperJuice)
• fix: untrack qdrant vector store from git and prevent test suite hangs (ViperJuice)
• fix: filter non-semver tags in release version calculation (ViperJuice)
• fix: replace tree_sitter_languages ctypes loading with cross-platform tree_sitter_language_pack (ViperJuice)
• fix: lower flashrank version constraint from >=0.3.0 to >=0.2.0 (ViperJuice)
• feat: cross-repo readiness — profiles fallback, env-var substitution, auto-heal, UX polish (ViperJuice)
• docs: sync documentation with recent feature additions (ViperJuice)
• fix: wire IgnorePatternManager into semantic rebuild to exclude fixtures (ViperJuice)
• fix: correct Qwen vLLM endpoint URL and profile URL priority in settings (ViperJuice)
• feat: wire profile summarization config into ChunkWriter (ViperJuice)
• fix: achieve 17/17 benchmark score with Qwen/Qwen3-Embedding-8B (ViperJuice)
• benchmark: full matrix with working rerankers (flashrank + cross-encoder) (ViperJuice)
• fix: reranker packaging, index pollution, and retrieval quality (ViperJuice)
• fix(hook): resolve mcp-index CLI via .venv/bin when not on PATH (ViperJuice)

Pull Requests

Statistics

• Commits: 19
• Contributors: 1
• Files changed: 376

Feature Highlights

• 🚀 Dynamic plugin loading system
• 📊 Comprehensive monitoring with Prometheus & Grafana
• 🔍 48+ language support via tree-sitter
• 📝 Document processing (Markdown & PlainText)
• 🔐 Security with JWT authentication
• ⚡ High-performance caching system