ContextOS v1.0.2
22 Sept 2026
$npm install -g @siddharthakatiyar/contextos@latest
View on GitHub ↗Fixed
- -Indexing integrity: per-file persistence is transactional, removed or ignored files are reconciled after full scans, edited files retain their repository layer, and duplicate symbols or headings receive distinct chunk IDs.
- -Chunking and retrieval: fenced Markdown blocks stay intact, oversized content respects token limits, fully stripped FTS terms fail safely, short symbols remain retrievable, and Rust import relationships are indexed.
- -Daemon reliability: indexing honors the daemon's project root, startup and watcher reindexes are single-flight with atomic status writes, reconnects use bounded backoff, and malformed database recovery avoids deleting a database held by a live daemon.
- -Workspace isolation: private state paths reject unsafe symlink redirects, configuration caches are scoped to canonical repositories, and `ctx_expand` enforces file, line, window, and token bounds.
Security
- -Script execution is opt-in: repository-controlled `ctx_execute` scripts stay disabled by default. Trusted repositories can enable them with `execAllowRepoScripts: true` or `CONTEXTOS_EXEC_ALLOW_SCRIPTS=1`.
Changed
- -Dependencies and release records: the dependency graph and Next.js toolchain were updated, lock and SBOM records were synchronized, and the package now ships its configuration schema and third-party notices with verified native and font license references.
- -Documentation: CLI, initialization, configuration, recovery, security, benchmark, ONNX CPU installation, and stability guidance now match the current behavior.