AkurAI-Build

public
Latest change 4e6f9ac32c9ba8f16be41845df9cd880199d59d8 - Runner trusts merge-queue refs that target the default branch by Ólafur Búi Ólafsson
# Changelog

## 1.5.3 - 2026-09-07

- Runner trusts merge-queue refs that target the default branch

## 1.5.2 - 2026-09-06

- Merge queue adopts the target's current tip instead of failing when it moved

## 1.5.1 - 2026-09-06

- Add named service identities and akurai_repo_protect

## Unreleased

## 1.5.0 - 2026-09-06
- Integrate pull requests, independent reviews, protected refs, and serialized CI merge queues.
- Fix browser form submissions by preserving same-origin POST origin metadata in the referrer policy.
- Add browser pages for creating, browsing, inspecting bounded diffs, reviewing and queuing pull requests, with matching MCP tools.
- Recover interrupted queue refs and finish recording merges that landed just before a crash, using the persisted successful CI run and verified Git ancestry.
- Allow explicitly declared host credentials in PR jobs; reject shared caches and deployment environments on untrusted refs.
- Enforce per-ref execution trust and production package/handoff checks; routine deployment approvals remain optional by owner direction.
- Include the fleet audit command. Static policy matches do not establish runtime deployment evidence.


## 1.4.10 - 2026-08-27
- Emit the HTTPS server block directly in generated nginx vhosts instead of writing an HTTP-only vhost and re-asserting TLS through `certbot --nginx`. A failed re-assert previously left the domain with no HTTPS at all, falling through to the default catch-all certificate.
## 1.4.9 - 2026-07-19
Install the shared non-secret health manifest through the protected Build service deployment while keeping the worker credential mount read-only.
## 1.4.8 - 2026-07-19
Keep worker-image changes on MCP-controlled pipeline surfaces, remove the unnecessary EC2 source mount, and register PassVault in the shared production health sweep.
## 1.4.7 - 2026-07-19
- Mount the maintained AkurAI-EC2 CLI source into the worker so approval-gated application deploy jobs can resolve the host-installed CLI symlink
## 1.4.6 - 2026-07-19

- Complete branded not-found negotiation for authenticated code browsing and align responsive code-browser path and layout behavior
- Reconcile the worker table to the configured worker count on executor startup, pruning stale rows left by an earlier multi-worker configuration

## 1.4.5 - 2026-07-18

- Repair the live Build worker's `bunx` alias during protected service deployment while the next worker image preserves it permanently

## 1.4.4 - 2026-07-18

- Install self-deployed MCP and CI helpers into the worker's host bind instead of its isolated job home

## 1.4.3 - 2026-07-18

- Return exact branch-head SHAs and add bounded repository blob reads to the MCP control plane
- Install the packaged stdio MCP binary and Bun-compatible `bunx` helper through the protected self-pipeline

## 1.4.2 - 2026-07-17

- Add branded content-negotiated not-found pages, shared responsive public navigation and wordmark, compact code browsing, and meaningful directory sizes

## 1.4.1 - 2026-07-17

- maintenance release
## 1.4.0 - 2026-07-17

- Keep controller, worker, changelog, and host MCP release identities synchronized to one version and commit
- Add the `akurai_release` MCP tool: the single maintained release path for every product — bump the version (VERSION, Cargo.toml, package.json, manifest `stamp` files), cut the changelog's Unreleased section into a dated entry, commit + tag only the release bookkeeping in the trusted checkout, sync the hosted mirror, and queue the pipeline run for the release commit
- Complete the Build UI audit wave with canonical clone URLs, public/private code browsing, paginated run history, accessible details, responsive data views, CSP-clean rendering, and one repository registration surface
- Add approval-gated self-host service deployment that consumes the packaged binary, sends a bounded Docker context, atomically swaps only the HTTP service container, and rolls back on failed health

## 1.3.5 - 2026-07-16

- Redirect sign-in requests straight to AkurAI Auth, then return authenticated users to their workspace
- Make hosted Git synchronization and MCP-controlled CI/CD the canonical agent deployment workflow

## 1.3.4 - 2026-07-16

- Add a public AkurAI Build documentation route with Framework-style navigation and responsive layouts
- Replace the inherited Bunfork overview with the actual repository, pipeline, artifact, MCP, release, and security contracts

## 1.3.3 - 2026-07-16

- Redesign the public homepage around a GitHub-inspired product and community hierarchy
- Rank public repositories by real build activity and group their public source owners
- Accept process-server readiness logs from either output stream in HTTP integration checks

## 1.3.2 - 2026-07-15

- deploy.sh publish: sync the self-hosted mirror through the akurai_repo_sync MCP tool

## 1.3.1 - 2026-07-15

- Replace the JSON CLI with a full read/write MCP tool set

## 1.2.1 - 2026-07-14

- Host authenticated Git repositories over Smart HTTP with repo host/sync CLI

## 1.1.9 - 2026-07-12

- Enable verified ARM64 builds and reusable binary caches

## 1.1.8 - 2026-07-12

- Preserve non-root cache mount ownership

## 1.1.7 - 2026-07-12

- Pin actual Rust 1.97 build toolchain

## 1.1.6 - 2026-07-12

- Simplify self-hosted Rust container validation

## 1.1.5 - 2026-07-12

- Isolate build caches and bootstrap pinned CI tools

## 1.1.4 - 2026-07-12

- Run controller with Docker group and pin CI toolchain

## 1.1.3 - 2026-07-12

- Add bounded agent wait and readiness recovery

## 1.1.2 - 2026-07-12

- Harden deployment and edge diagnostics

## 1.1.1 - 2026-07-11

- Establish AkurAI Build from the Bunfork foundation with Git CI/CD, Docker matrices, encrypted state, artifacts, protected deployments, MiniJinja UI, agent skill, and managed Titan/EC2 deployment.