v2.9.30

Semantic search now matches on meaning in a default install, and on Linux hook calls run through a small native client instead of starting Node.

Embeddings run on the WebAssembly build of ONNX Runtime, bundled into token-goat. Its 14 MB binary is downloaded once, checked against a recorded SHA-256 and size, and checked again each time it loads; nothing is installed and no install script runs. The native onnxruntime-node is still used when it is installed.

On Linux (x64 and arm64), install puts the native tg-hook client in front of every hook command it writes, for Claude Code, Codex, Grok, Kimi and Copilot CLI. It hands each call to the resident hook server and falls back to the ordinary Node hook when the server cannot answer. A served call took 14.5 ms at the median against 47.1 ms for the Node hook through the same server. Both Linux binaries are statically linked and carry build provenance attestations that gh attestation verify checks. Windows binaries ship only when a release can sign them, and this one cannot, so Windows keeps the Node hook command, as macOS does, and doctor says so.

New: install --copilot registers the MCP server with Copilot CLI and install --antigravity wires token-goat into Google's Antigravity CLI; install indexes the project you run it in; doctor --fix and install repair stale or missing hooks in every installed harness; doctor --probe <harness> checks that token-goat's context reaches the model; project notes can be anchored to a symbol and say so once it changes; json-query and yaml-query take JMESPath and jq style projections and read stdin with -; bash-output, web-output, mcp-output and retrieve return exact line ranges with --lines; stats --payloads shows what token-goat adds to each session's context, and listing-size prices Claude Code's skill and agent listings; C# files have references, so refs --callers finds C# callers.

Changed: minified bundles are no longer indexed; an edited file is indexed right away instead of at the worker's next poll; search ranks changelogs and docs below the code they mention and prints about 10% less; config set saves only the settings you changed.

Security: values in .env files are masked in search previews, mcp-output --file, compress-text --file and handoff-create --file; with indexing.cross_project_symbols off, MCP tools and search --project no longer reach another project's index; project notes reach the agent marked as data, not instructions; and a long list of redaction gaps is closed, including URL passwords containing : or @, secrets cut at a clip or snippet edge, and spreadsheet headers and sample values.

The release also carries more than 250 fixes across the indexer, hooks, MCP server and output commands.

Upgrading reparses the index once and re-embeds every indexed file once. Full details in the changelog.