Release v0.8.2
Fixed
cx update reporting "already on the latest version": When the GitHub API failed (unauthenticated requests are limited to 60 per hour), the updater used the first fallback that answered. The CDN's release.json is refreshed by hand and could still name the previous version, while the startup notice, which keeps trying sources until it finds a newer one, offered the new release. The updater now reads both the CDN and the web redirect and takes the newer; the download URL is rebuilt from the tag when the redirect has no asset list.
Changed
web_fetch no longer asks for approval: Reading a web page is treated like a search. Since 0.8.0 it asked once per host (web_fetch:<host>), which interrupted ordinary research, for example the second fetch of a batch to the same site. The SSRF protections are unchanged: addresses that resolve to internal networks are still refused, and fetched content is still labelled as untrusted data. Any web_fetch rules saved in allowed_commands are now ignored.
Security
- Dependency updates:
rustls 0.23.43 to 0.23.46, rustls-webpki 0.103.15 to 0.103.16, webpki-roots 1.0.9 to 1.0.11 and tokio 1.53.1 to 1.54.1, fixing the RustSec advisories reported by the dependency audit for the TLS stack. The advisories for zip 2.4.2 (RUSTSEC-2026-0367, 0368 and 0369) concern extract(), which Corex does not call, and remain until zip can move to 9.x.
Documentation
- README: Performance figures, supported platforms and provider lists are now the measured or verified ones, and the claims that did not hold (static linking, glibc 2.17+, a signed audit log, zero network calls in local mode, a built-in SSH client) are gone.
scripts/benchmark.sh: Measures the interactive TUI at idle (resident memory, CPU, time to first frame) instead of --version, reads /proc, accepts the path of any binary, and no longer prints a fixed conclusion.
Canonical Release Checksums (SHA-256)
| Platform |
Archive File |
SHA-256 Checksum |
| macOS Apple Silicon |
corex-v0.8.2-aarch64-apple-darwin.tar.gz |
9e5bd8ccd9934eb85cf9cad23683982f882dd8cb4bf15849a075d0535bcfe007 |
| Android Termux |
corex-v0.8.2-aarch64-linux-android.tar.gz |
915e06d7369ab7de5485ff0f86b946cf8e1a8aa866f9aff5ee5126eceb147d34 |
| Linux ARM64 |
corex-v0.8.2-aarch64-unknown-linux-gnu.tar.gz |
7549512242317313ee5625c06c97d592778435da2d90421aa02644d3197ad433 |
| macOS Intel |
corex-v0.8.2-x86_64-apple-darwin.tar.gz |
3d4ac90d2c7f3dcd02fbcbedaedd5a4c1cd7be1e8c0143ccde7326939994ea99 |
| Windows x86_64 |
corex-v0.8.2-x86_64-pc-windows-msvc.zip |
f0f69cfa9242b39f4cedc74321865edca50fcee8f31c782de118050e6a0f57b9 |
| Linux x86_64 |
corex-v0.8.2-x86_64-unknown-linux-gnu.tar.gz |
cc782e2fc0c99655668691f6111253d7ce904baa39996a0ecc245f10297c3ca8 |
Installation & Upgrade
Via In-Place Self-Updater
Via npm
npm install -g @sluisr/corex
# or run directly:
npx @sluisr/corex
Pre-compiled Binary (Linux, macOS, Android Termux)
curl -fsSL https://raw.githubusercontent.com/sluisr/corex/main/install.sh | bash
From Source via Cargo / Crates.io
cargo install corex-cli --locked
Via Nix Flake
nix run github:sluisr/corex
