Skip to content

v1.12.0

Choose a tag to compare

@marmutapp marmutapp released this 30 Jun 00:07
· 22 commits to main since this release

Added

  • Native code-intelligence engine (internal/codeintel), replacing
    codegraph.
    A CGO-free code-intelligence subsystem built on a wazero
    (wasm) tree-sitter backend with go:embed'd grammars and per-language
    S-expression queries (data, not code). Exact-span parsing for Go (pure-Go
    AST), Rust, TypeScript/TSX, Python, and JavaScript/JSX, plus Core and
    Extended grammars (Kotlin, Swift, Scala, Bash, Lua) onboarded as data. A
    strangler-fig cutover keeps the Provider facade stable for every
    consumer (MCP, compression, dashboard). Pure core (parse / resolve /
    semantic / analyze / query) with injected I/O, pinned by
    imports_test.go; internal/store/codeintel.go is the one SQL seam;
    schema in migrations 050+.
  • Scoped relation resolution. Package/import-bound CALLS resolution
    for Go (self-receiver method binding + local-var receiver type inference)
    and module-import-scoped CALLS for TypeScript and Python, plus
    intra-file CONTAINS edges from span nesting and end_line on
    get_relations results.
  • search_symbols MCP tool — Tier-C symbol search over the codeintel
    store.
  • Full-body near-clone detection via body-shingle MinHash (W3) and a
    tuned TF embedder (Dim 256→512 + degenerate-skip; W4).
  • Aggressive code-collapse on the OpenAI/codex proxy paths, so
    code-block compression now fires for codex traffic too.

Fixed

  • Limit gauge no longer leaks across tools. The session-detail 5h/weekly
    limit gauge read the latest snapshot by (scope_hash, provider) only, so a
    Claude Code subscription window leaked onto every other anthropic-default
    tool's session detail (e.g. cline-cli showed Claude Code's gauge despite
    producing no snapshots of its own). The gauge is now attributed to the tool
    that observed it; a tool with no proxied window shows the honest
    needs-proxy state.
  • Migration write-lock contention — a lock-free fast path in
    runMigrations avoids contending the write lock on startup.
  • CodeIntelDeleteProject is now fast and complete (fixed the per-file
    delete scan).

Changed

  • Daemon restart readiness window widened from 15s to 45s in
    scripts/restart-daemon.sh.

Downloads

Pre-built binaries for each supported platform are attached below. Linux variants bundle antigravity-bridge.exe next to the observer binary for WSL2 users of the Antigravity adapter.

Platform Asset
Linux x86_64 observer-v1.12.0-linux-x64.tar.gz
Linux arm64 observer-v1.12.0-linux-arm64.tar.gz
macOS x86_64 (Intel) observer-v1.12.0-darwin-x64.tar.gz
macOS arm64 (Apple Silicon) observer-v1.12.0-darwin-arm64.tar.gz
Windows x86_64 observer-v1.12.0-win32-x64.zip

Verify with sha256sum -c SHA256SUMS (or shasum -a 256 -c SHA256SUMS on macOS) from the directory containing the downloads.

Also available via npm: npm install -g @superbased/observer@1.12.0

Org server (Docker)

The self-hosted org server ships as a Docker image and as per-platform observer-org-v1.12.0-* archives (attached below).

docker pull ghcr.io/marmutapp/observer-org:v1.12.0

The image is keyless-signed with cosign. Verify it:

cosign verify ghcr.io/marmutapp/observer-org:v1.12.0 \
  --certificate-identity-regexp 'https://github.com/marmutapp/superbased-observer-private/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Supply chain

CycloneDX SBOMs are attached: observer.cdx.json and observer-org.cdx.json.

SLSA Level 3 build provenance for the binaries is attached below as a *.intoto.jsonl attestation. The build runs on the private origin repo, so pass that as the source when verifying an extracted binary with slsa-verifier v2.7.0 or newer (older versions fail with unexpected tlog entry type: expected intoto:0.0.2, got dsse:0.0.1):

slsa-verifier verify-artifact ./observer \
  --provenance-path *.intoto.jsonl \
  --source-uri github.com/marmutapp/superbased-observer-private