RepoPilot v0.26.0: Clearer first reviews, faster cached scans, and safer verification cleanup

RepoPilot 0.26.0 improves setup and review guidance, reduces measured cache overhead, makes verification timeouts stop child processes on Unix and Windows, and strengthens existing review and MCP safety behavior.

Highlights

• Get from setup to the right review faster. init carries a custom config path into the suggested review command, separates changed-file review from a full scan, and omits checks already configured. When config comparison is unavailable, it says so and keeps all candidate suggestions visible.
• See one clear next action. Console review presents one primary action and keeps the full inventory behind a secondary details hint. Recovery guidance names the base, config, and configured checks needed to rerun an incomplete review.
• Spend less time in warm cache and test-integrity paths. Buffered cache I/O and borrowed serialization reduce same-host warm full-scan medians by 31–47% in the Criterion workloads and reduce the historical 123-file review median by 16%. Changed-scan peak memory also falls in the measured 1,000- and 3,000-file workloads; full-scan memory is effectively flat. JS/TS integrity checks now skip unrelated assertion matchers early. Cross-file helper analysis checks assertion counts before extracting export symbols or building a repository inventory; integrity scans also reuse each grammar's node-kind index across files. On the same host and 20-file fixture, the integrity-phase median fell from 13.532 ms to 4.181 ms (69.1%); a paired before/after run for the grammar-index cache measured 5.267 ms to 4.380 ms (16.8%). The first full release gate on main exposed a 10.72% integrity share against the 10% limit. After PR #616 merged, the full hosted release gate passed on main at 5.968 ms / 76.98 ms (7.75%); the 123-file review median was 716.47 ms against a 2,100 ms limit. The full local gate also passed at 4.933 ms / 251.96 ms (1.96%). These are measured comparisons, not a guarantee for every repository or machine.
• Stop timed-out checks and their children. Configured-check cancellation and timeout now terminate process trees on Unix and Windows. Windows checks are attached to a kill-on-close Job Object before they resume.
• Make review and MCP output safer to use. Review catches additional weakened JS/TS object assertions and avoids a moved-error-handler false positive. MCP returns readable Markdown with structured reports, caps each incoming request line at 1 MiB, confines intent paths to the configured root, and refuses symlinked session snapshot paths.

Compatibility

• No CLI command or report field was removed. JSON report schema remains 0.26; cache schemas and serialized fields are unchanged.
• MCP requests larger than 1 MiB per input line are rejected. Claude Code, Cursor, and direct snapshot hooks now refuse symlinked .repopilot folders or snapshot files.
• Configured verification still runs with host filesystem and network access; this release improves timeout cleanup and does not sandbox the command.

Upgrade

cargo install repopilot --version 0.26.0 --force
npm install -g repopilot@0.26.0

Claude Code: claude plugin marketplace update repopilot, then claude plugin update repopilot@repopilot. Codex: codex plugin marketplace upgrade. Gemini CLI: gemini extensions update repopilot.

Full technical changelog: https://github.com/MykytaStel/repopilot/blob/v0.26.0/CHANGELOG.md