FreeFlight staging 0.1.0-preview.20261020.rc2

Complete native bundles qualified by CI run 39586106512 and CodeQL run 39586106508. Source 97c1342. Promotion PRs: #44, #45. No automatic MCP Registry publication. Staging preview for testing; master is unchanged. Linux x64 uses the Ubuntu 22.04 baseline. Archive version remains 0.1.0-preview.20261020.rc2; the tag identifies the qualified run. Use the matching archive and SHA256SUMS, extract separately, and configure trustedRoots for chosen source folders. Actual private-project acceptance remains unverified.

FreeFlight staging 0.1.0-preview.20261020.rc2

Complete native bundles qualified by CI run 39544826232 and CodeQL run 39544826090. Source 39c3cc8. Promotion PRs: #42, #43. No automatic MCP Registry publication. Staging preview for testing; master is unchanged. Linux x64 uses the Ubuntu 22.04 baseline. Archive version remains 0.1.0-preview.20261020.rc2; the tag identifies the qualified run. Use the matching archive and SHA256SUMS, extract separately, and configure trustedRoots for chosen source folders. Actual private-project acceptance remains unverified.

FreeFlight staging 0.1.0-preview.20261020.rc2

Complete native bundles qualified by CI run 39524813103 and CodeQL run 39524813063. Source c2a55dd. Promotion PRs: #40, #38. No automatic MCP Registry publication. Staging preview for testing; master is unchanged. Linux x64 uses the Ubuntu 22.04 baseline. Archive version remains 0.1.0-preview.20261020.rc2; the tag identifies the qualified run. Use the matching archive and SHA256SUMS, extract separately, and configure trustedRoots for chosen source folders. Actual private-project acceptance remains unverified.

FreeFlight 0.1.0 — trusted workspace Linux x64 preview

FreeFlight trusted workspace Linux x64 preview — for testing, not a production release.

Source: 1997d38e5829aec08eb7a73e19890d56998c5733. These are the unchanged tested bytes from qualification run 39377421222. The executable reports FreeFlight 0.1.0; this tag and the bundled verification.json identify the exact repair. Earlier previews remain available. This source also repairs CI artifact collection and corroborates promotion commits despite delayed timeline recording; the C++ and language-worker runtime matches the tested e2c4379 repair. Protected promotions #29, #30 and #31 passed. Hosted release verification 39379428880 passed before publication. Evidence is retained with the preview.

Changes

• Operator-owned trustedRoots enables project-aware C# loading only inside selected authorized folders. Other authorized roots retain safe-source analysis. Semantic requests cannot grant trust.
• Explicit root-relative nested .sln/.csproj selection, bounded discovery and clear ambiguity errors. Windows rooted/drive-relative selections are rejected safely.
• Confirmed NU1603/NU1701/NU1903 restore warnings remain visible without rejecting an otherwise usable graph merely because Roslyn classified them as failures. Exact project/message evidence is required. Actual MSBuild errors, promoted warnings, unknown failures, missing restore assets and unusable graphs still fail.
• Document outlines resolve declarations in the requested document, including merged namespaces and partial types.
• Workspace and engine status report selected project, actual loaded mode, warnings and degraded fidelity.

Install and restart

Download the tar.gz and matching .sha256 asset, verify, and extract into a fresh directory:

sha256sum -c freeflight-linux-x64-5f01db9a3b8edc85.tar.gz.sha256
mkdir -p freeflight-trusted
tar -xzf freeflight-linux-x64-5f01db9a3b8edc85.tar.gz -C freeflight-trusted

Stop the existing FreeFlight process through your MCP client, point its command to the new freeflight-trusted/freeflight-linux-x64/bin/freeflight, and restart/reconnect the server. Replacing files does not update running workers. This release changes no client configuration automatically.

The complete bundle contains the C++23 server, Node 24.22.0, TypeScript Language Service and self-contained Roslyn worker. Default safe-source analysis requires no separately installed Node, .NET runtime or DockPipe. Trusted MSBuild mode additionally requires an operator-installed compatible .NET SDK and explicitly restored project dependencies; the bundled .NET runtime is not an SDK.

Trust and nested solution configuration

Create an operator-owned configuration, replacing these example paths:

{
  "roots": ["/absolute/workspace", "/absolute/read-only-project"],
  "trustedRoots": ["/absolute/workspace"],
  "csharp": {"project": "source/Architecture.sln"}
}

Launch the bundled executable with --config /absolute/freeflight-trusted.json. Workers are resolved automatically; no engines configuration is needed. Trust entries cannot expand authorized roots. Only grant trust to repositories whose build logic you authorize: MSBuild design-time evaluation can execute repository targets/imports with your privileges. It is not sandboxed. FreeFlight does not automatically restore or build the project, and does not enable repository analyzers or generators.

The optional csharp.project is relative to the selected workspace. Without it, bounded discovery prefers solutions and requires an unambiguous selection. For workspace-specific selection or changes to graph/restore results, invoke workspace.open explicitly:

{"root":"/absolute/workspace","project":"source/Architecture.sln","reload":true}

The next semantic request or engine.capabilities for that root and language csharp initializes the refreshed graph. Inspect analysis.mode, selectedProject, loadWarnings and degradedFidelity. Source edits refresh incrementally. Changes to startup roots/trust/resources or application binaries require an MCP process restart; workspace reload cannot grant new trust.

Qualification and limitations

All five native CI targets, both site builds and CodeQL passed for this source. This downloadable preview is specifically the Ubuntu 22.04 x64 baseline bundle. Its exact bytes passed native installed semantic tests and isolated, network-disabled Ubuntu 22.04 and Fedora 44 container tests. See jammy-compatibility.json for package versions and ELF requirements. Pop!_OS and Bazzite themselves were not directly tested; Alpine/musl is unsupported.

Ubuntu 22.04 runtime packages: ca-certificates libc6 libgcc-s1 libgssapi-krb5-2 libicu70 libssl3 libstdc++6 tzdata zlib1g. Use supported distribution packages; do not replace system glibc.

Controlled .NET 8 fixtures verify trusted loading, warning/error distinctions, exact navigation and outlines through the packaged MCP endpoint. This does not establish compatibility with every private solution, custom assets path, linked-source arrangement or generator-dependent project. .slnx and universal multi-targeting fidelity remain unqualified. Temporary MSBuild logs omit imported project contents and are normally deleted; forced termination may leave metadata. Trust is not a total disk/RSS or execution sandbox.

The experimental hotpath optimization was rejected and reverted: measured medians improved but p90 regressed. This repair retains the earlier path-check implementation and makes no new speedup or competitor-performance claim.

NuGet/npm proof packages are excluded and unpublished. No official MCP Registry publication, website deployment, signing/notarization or DockPipe installation/lifecycle completion is implied. Checksums and receipts establish integrity and traceability; they are not signed provenance.

FreeFlight 0.1.0 — scaling Linux x64 preview

FreeFlight scaling Linux x64 preview — for testing, not a production release.

Source: 57851e334bad0c7f264999a5d6e0454d16284681. These are the unchanged tested bytes from qualification run 39360385584. This preview contains PR #20's scaling changes and readiness fixes; earlier previews do not. The executable still reports FreeFlight 0.1.0; use this tag and the bundled verification.json to identify the exact source.

Upgrade and restart

Download the tar.gz and its matching .sha256 file from this release. Stop the running FreeFlight MCP process in your client, verify the archive, and extract into a fresh directory:

sha256sum -c freeflight-linux-x64-8e26e4d356521465.tar.gz.sha256
mkdir -p freeflight-scaling
tar -xzf freeflight-linux-x64-8e26e4d356521465.tar.gz -C freeflight-scaling

Point the existing MCP command at the new freeflight-scaling/freeflight-linux-x64/bin/freeflight, or replace the old installation at the same path after keeping a backup. Restart/reconnect the client's MCP server so it launches the new executable and workers. Updating files without restarting does not update running workers. The prior configure-once --workspace /absolute/projects configuration remains valid; no per-language MCP installations are needed.

Use this Ubuntu 22.04 baseline build on compatible glibc-based x64 Linux systems. The exact extracted bytes passed semantic and workspace-lifecycle tests in clean Ubuntu 22.04 and Fedora 44 containers. Pop!_OS and Bazzite themselves are not directly tested; Alpine/musl is unsupported. The compatibility receipt records ABI requirements and installed runtime package versions. Ubuntu runtime prerequisites: ca-certificates libc6 libgcc-s1 libgssapi-krb5-2 libicu70 libssl3 libstdc++6 tzdata zlib1g. Do not manually replace system glibc.

The bundle includes C++23 FreeFlight, Node 24.22.0, TypeScript 5.9.3 and a self-contained .NET 10/Roslyn 5.9.0 worker. Default safe-source analysis needs no separately installed Node, .NET runtime or DockPipe.

Configure once and select workspaces

Replace both absolute paths in your MCP client's configuration:

{
  "mcpServers": {
    "freeflight": {
      "command": "/absolute/install/freeflight-linux-x64/bin/freeflight",
      "args": ["--workspace", "/absolute/projects"]
    }
  }
}

Use workspace.list, workspace.open and workspace.close to select projects under that authorized parent. For example, open {"root":"/absolute/projects/my-project"} and use that active root for semantic requests. No-argument startup is dormant and authorizes no filesystem access; client root suggestions are informational, not grants. To force a full project reload, close then reopen it. Repeating open alone does not force reload. Closing also closes descendant workspaces and workers.

Resource defaults and optional configuration

The new defaults are 32 MiB per source file, 512 MiB per engine workspace, 50,000 files, and 500,000 directory entries. These are source budgets, not total process-memory caps. C#/TS/JS no longer silently skip oversized configured source. Failures return structured resource/path/observed/limit/remediation details.

To customize limits, use one startup file:

{
  "roots": ["/absolute/projects"],
  "resources": {
    "maxFileBytes": 33554432,
    "maxWorkspaceBytes": 536870912,
    "maxFiles": 50000,
    "maxDirectoryEntries": 500000
  }
}

Change the MCP arguments to ["--config", "/absolute/freeflight.json"]. Omit engines to retain automatic bundled-worker discovery. Positive integral settings are required; per-file cannot exceed aggregate. Supported ceilings are 256 MiB/file, 2 GiB/workspace, 200,000 files and 2,000,000 directory entries. Restart after changing startup policy. Semantic requests cannot override it.

Scaling and correctness

Retained source snapshots/version metadata avoid rereading unrelated sources on warm requests. Document queries deliberately reread their target; this is not a universal zero-I/O guarantee. C# uses watcher invalidation plus periodic reconciliation. TS/JS checks source and resolution metadata. The readiness fixes also refresh newly appearing imports and changed package type entries, and eliminate an initial unbounded trusted-C# text-loader read.

The earlier measured scaling runtime, before these final correctness fixes, reduced warm reference medians on controlled 24 MiB fixtures from 35.185 to 0.542 ms (C#), 48.410 to 5.229 ms (TS), and 48.649 to 5.185 ms (JS). C# cold diagnostics increased 4.78%; TS/JS steady RSS increased roughly 9.75%/5.12%. These are synthetic same-Mac comparisons against ba0c4ce, not measurements of this Linux binary or claims about competitors/real solutions. No timing rerun was used to select favorable results. See the benchmark record and readiness review.

Remaining semantic limits

Nonempty TypeScript project-reference graphs now fail explicitly with unsupported_project_references. Complete graph support was already absent; the earlier worker could return misleading partial results. Ordinary imports across directories are supported. TypeScript 7 is not bundled.

C# defaults to safe-source analysis and does not reproduce arbitrary project references/build settings. Explicit trusted-MSBuild mode requires a compatible installed SDK/restored dependencies, can execute repository targets/imports during evaluation, and is not sandboxed. Trusted project graph/configuration changes require close/reopen. Rename and code actions remain previews, never silently applied edits.

Unrelated cached source content can be stale until invalidation or the five-second content-revalidation interval; explicit close/reopen rebuilds state. Actual OS watcher overflow was not deterministically fault-injected. Source budgets do not bound compiler heap or all trusted MSBuild activity.

Additional language engines, HTTP transport, applied edits, complete DockPipe gateway lifecycle, MCP Registry publication and website deployment are not claimed. This release contains Linux x64 assets only.

FreeFlight 0.1.0 — configure-once Linux x64 preview

FreeFlight configure-once Linux x64 preview — for testing, not a production release.

Source: ba0c4ce6e7f6294419aeffb4bf0893c20c7f8495. These are the unchanged bytes from qualification run 39346787154. The executable reports FreeFlight 0.1.0; this preview tag identifies the exact build. Previous previews are preserved.

Install on Linux x64

Use this Ubuntu 22.04 baseline build on supported glibc-based x64 Linux systems. Exact extracted bytes passed semantic and workspace-lifecycle tests in clean Ubuntu 22.04 and Fedora 44 containers. Pop!_OS and Bazzite themselves have not been directly tested; Alpine/musl is not supported.

Download the tar.gz and matching .sha256 file, then:

sha256sum -c freeflight-linux-x64-7dba2fa2ff24ed21.tar.gz.sha256
tar -xzf freeflight-linux-x64-7dba2fa2ff24ed21.tar.gz

The bundle includes the C++23 executable, Node 24.22.0, TypeScript 5.9.3 Language Service and self-contained .NET 10/Roslyn 5.9.0 worker. Default source analysis requires no separately installed Node, .NET runtime or DockPipe. Ubuntu 22.04 runtime packages: ca-certificates libc6 libgcc-s1 libgssapi-krb5-2 libicu70 libssl3 libstdc++6 tzdata zlib1g. Use supported distribution packages; do not replace system glibc manually. The compatibility receipt includes the exact Fedora runtime package set and all bundled ELF version requirements.

Configure once, select projects at runtime

Configure one authorized parent directory in your MCP client. Replace both absolute paths:

{
  "mcpServers": {
    "freeflight": {
      "command": "/absolute/install/freeflight-linux-x64/bin/freeflight",
      "args": ["--workspace", "/absolute/projects"]
    }
  }
}

Within that authorized parent, the client can invoke workspace.list, workspace.open and workspace.close to switch or maintain multiple project workspaces without editing this MCP configuration or restarting the server. Open a project with workspace.open using {"root":"/absolute/projects/my-project"}; semantic requests then use that active project root. The pinned parent remains available. Closing a workspace closes its descendants and workers; it does not erase the startup permission, so an explicit authorized reopen is possible.

No-argument startup is supported but dormant: it grants no filesystem access. MCP client roots are optional informational suggestions, never permission grants. An explicitly opened workspace may be associated with a suggestion; removing that suggestion closes its associated workspace sessions. To authorize a different parent or broader scope, change startup configuration and restart. There is no unrestricted filesystem mode. Advanced --config supports multiple authorized roots. See the exact workspace contract.

Language and Windows legacy scope

C#, TypeScript and JavaScript navigation and diagnostics are tested. Rename and other edits are previews only. TypeScript 7 is deliberately not included because its API is incompatible with this worker.

C# defaults to safe-source analysis without MSBuild, repository analyzers or generators. It does not reproduce arbitrary project references or build settings. Explicit trusted-MSBuild configuration enables project evaluation and requires a compatible installed SDK and restored dependencies; evaluation can execute repository targets/imports and is not sandboxed.

The same source passed actual Windows Server 2022 non-SDK C# project tests targeting .NET Framework 4.7, 4.8 and 4.8.1, using SDK 10.0.402, runtime 10.0.13 and SDK MSBuild 18.9.15.50611 with matching Framework developer/targeting packs. Tests verified project-defined compilation symbols, framework references, exact cross-project definitions/references and incremental diagnostics. These are controlled project-shape results, not blanket legacy compatibility. Framework 4.7.1/4.7.2, VB, COM, web projects, packages.config and Visual Studio-only/custom targets remain unqualified. No user project target is rewritten. This release asset is Linux-only; these Windows results do not claim Linux MSBuild compatibility with legacy Framework projects.

Additional language engines, HTTP transport, applied refactoring edits, complete DockPipe gateway lifecycle, MCP Registry publication and website deployment are not claimed. See the source capability matrix.

FreeFlight 0.1.0 — Ubuntu 22.04 x64 preview

FreeFlight Ubuntu 22.04 x64 preview — for testing, not a production release.

This is a separate build for the Ubuntu 22.04 runtime baseline. The earlier Ubuntu 24.04 archive requires newer glibc and must not be used on stock Ubuntu 22.04. This build is relevant to Pop!_OS 22.04's Ubuntu base, but Pop!_OS itself has not been directly tested.

Source: b22a53a34767b1346c1dc2240b06880a31bfc769. The executable reports FreeFlight 0.1.0; the preview tag identifies this exact build. The archive is unchanged from native qualification run 39340039835, including the separate Ubuntu 22.04 compatibility job.

It contains the C++23 server, Node 24.22.0, TypeScript Language Service and self-contained Roslyn worker. No separately installed Node, .NET runtime or DockPipe is required for default analysis. Required Ubuntu 22.04 OS packages: ca-certificates libc6 libgcc-s1 libgssapi-krb5-2 libicu70 libssl3 libstdc++6 tzdata zlib1g. Use normal supported distribution packages; do not replace system glibc manually.

Verification includes every bundled ELF's version requirements, exact TypeScript definition/reference/diagnostic results through the official MCP SDK, JavaScript symbols and C# diagnostics/symbols. The extracted archive was exercised in a clean pinned Ubuntu 22.04 container using only these runtime packages, as an unprivileged user with network disabled and no host runtimes mounted. The compatibility receipt records actual package versions and artifact hashes. No Alpine/musl or general older-distribution compatibility is claimed.

Download the tar.gz and matching .sha256 asset, then:

sha256sum -c freeflight-linux-x64-e8107e60f63b3f76.tar.gz.sha256
tar -xzf freeflight-linux-x64-e8107e60f63b3f76.tar.gz

Configure your MCP client (replace both absolute paths):

{
  "mcpServers": {
    "freeflight": {
      "command": "/absolute/install/freeflight-linux-x64/bin/freeflight",
      "args": ["--workspace", "/absolute/project"]
    }
  }
}

One server serves all supported languages. --workspace authorizes one directory and its descendants; queries can target individual project subdirectories. It cannot be repeated in this preview. Advanced --config supports multiple roots with explicit worker paths. Dynamic root grants and MCP client-roots discovery are not implemented. Running the executable directly waits for MCP messages on stdin.

C# defaults to safe-source Roslyn analysis without MSBuild, analyzers or generators; it does not reproduce arbitrary solution dependencies or build settings. Trusted MSBuild requires explicit startup opt-in, a compatible externally installed SDK and restored dependencies, and can execute repository build logic. Edits are previews only. TypeScript project-reference aggregation, additional languages and HTTP transport are not implemented. See the exact capability matrix.

This preview does not claim production promotion, signing, an MCP Registry listing, complete DockPipe gateway lifecycle or website deployment.

FreeFlight 0.1.0 — Linux x64 preview

Ubuntu 22.04 / Pop!_OS 22.04: this archive is incompatible with the stock Ubuntu 22.04 runtime. ELF inspection confirms the core requires GLIBC_2.38 and GLIBCXX_3.4.32; Ubuntu 22.04 provides glibc 2.35. Do not replace system glibc to run it. A separately tested Ubuntu 22.04 x64 preview is now available.

FreeFlight Linux x64 preview — for testing, not a production release.

Source: 1ecf18d83a7119d1085a8bf1fc1bc013ffc93ece. The executable reports FreeFlight 0.1.0; this prerelease identifies the exact preview build. This is the unchanged native artifact from qualification run 39338684956.

The archive contains the C++23 MCP stdio server, Node 24.22.0, official TypeScript Language Service and a self-contained Roslyn worker. No separate Node, .NET runtime or DockPipe installation is required for default analysis.

Tested baseline: Ubuntu 24.04 x64. Other distributions, older glibc versions and Alpine/musl are not qualified. System dependencies: ca-certificates, libc6, libgcc-s1, libgssapi-krb5-2, libicu74, libssl3t64, libstdc++6, tzdata and zlib1g. These are operating-system libraries, not separate FreeFlight workers. See Microsoft's Ubuntu dependency guidance.

Download the tar.gz and its matching .sha256 asset, verify with sha256sum -c freeflight-linux-x64-4456f79e15621f06.tar.gz.sha256, then extract with tar -xzf freeflight-linux-x64-4456f79e15621f06.tar.gz. The executable is freeflight-linux-x64/bin/freeflight inside the extracted directory.

Example MCP client configuration (replace both absolute paths):

{
  "mcpServers": {
    "freeflight": {
      "command": "/absolute/install/freeflight-linux-x64/bin/freeflight",
      "args": ["--workspace", "/absolute/project"]
    }
  }
}

Running that command directly waits for MCP messages on stdin; this is not an interactive terminal application. The workspace argument explicitly authorizes access to that root. One endpoint exposes workspace discovery, engine capabilities and semantic queries.

TypeScript provides semantic symbols, navigation, references, hover, diagnostics, signatures, implementations and edit previews. JavaScript uses the same official engine; dedicated JavaScript coverage is narrower. C# defaults to safe-source Roslyn analysis without MSBuild, repository analyzers or generators. This default does not reproduce arbitrary solution dependencies or build settings. Trusted MSBuild evaluation requires an explicitly installed compatible .NET SDK, restored dependencies and startup opt-in; it can execute repository build logic. All rename/code-action/import results are previews; FreeFlight does not apply source edits. No additional LSP languages or HTTP transport are claimed.

Exact capability and trust matrix.

Qualification includes native unit/process/cancellation tests, real-repository and worker semantic tests, dependency checks, installed-bundle verification and official MCP SDK tests against the bundled executable (exact TypeScript definition/reference/diagnostic results plus JavaScript and C# checks). Release assets include the verification receipt and SHA-256 evidence. This preview does not claim production promotion, package signing, an MCP Registry listing, DockPipe gateway lifecycle completion or website deployment.