AkurAI-Build

public
Latest change 20dad6d02033d14ae8d348daf8be44524b5a8ecd - Add secure collaboration and Build operations by Ólafur Búi Ólafsson
# Changelog

## Unreleased

- Add repository-scoped numbered issues and comments with bounded Markdown, immutable author metadata, cascade-safe storage, public/private authorization, REST routes, server-rendered pages, and administrator MCP tools.
- Add repository ownership, trust, collaborator roles, tenant-scoped access control, and authorization across API, code browsing, artifacts, runs, Git Smart HTTP, and environment promotion while preserving trusted administrator repositories.
- Harden native and Docker execution policy, make repository-scoped caches explicit and symlink-safe, and add bounded container resources.
- Add durable worker draining and per-execution leases so recovery requeues only the owning worker's run and deterministically removes orphan containers.
- Add immutable-ref pipeline validation, bounded cache statistics/pruning, worker drain control, bounded audit-event reads, and strict MCP schemas for operational tooling.
- Record consequential-operation actors and approval identities, and base delivery metrics on terminal deployment completion timestamps with per-job duration/cache evidence.
## 1.4.9 - 2026-07-19
Install the shared non-secret health manifest through the protected Build service deployment while keeping the worker credential mount read-only.
## 1.4.8 - 2026-07-19
Keep worker-image changes on MCP-controlled pipeline surfaces, remove the unnecessary EC2 source mount, and register PassVault in the shared production health sweep.
## 1.4.7 - 2026-07-19
- Mount the maintained AkurAI-EC2 CLI source into the worker so approval-gated application deploy jobs can resolve the host-installed CLI symlink
## 1.4.6 - 2026-07-19

- Complete branded not-found negotiation for authenticated code browsing and align responsive code-browser path and layout behavior
- Reconcile the worker table to the configured worker count on executor startup, pruning stale rows left by an earlier multi-worker configuration

## 1.4.5 - 2026-07-18

- Repair the live Build worker's `bunx` alias during protected service deployment while the next worker image preserves it permanently

## 1.4.4 - 2026-07-18

- Install self-deployed MCP and CI helpers into the worker's host bind instead of its isolated job home

## 1.4.3 - 2026-07-18

- Return exact branch-head SHAs and add bounded repository blob reads to the MCP control plane
- Install the packaged stdio MCP binary and Bun-compatible `bunx` helper through the protected self-pipeline

## 1.4.2 - 2026-07-17

- Add branded content-negotiated not-found pages, shared responsive public navigation and wordmark, compact code browsing, and meaningful directory sizes

## 1.4.1 - 2026-07-17

- maintenance release
## 1.4.0 - 2026-07-17

- Keep controller, worker, changelog, and host MCP release identities synchronized to one version and commit
- Add the `akurai_release` MCP tool: the single maintained release path for every product — bump the version (VERSION, Cargo.toml, package.json, manifest `stamp` files), cut the changelog's Unreleased section into a dated entry, commit + tag only the release bookkeeping in the trusted checkout, sync the hosted mirror, and queue the pipeline run for the release commit
- Complete the Build UI audit wave with canonical clone URLs, public/private code browsing, paginated run history, accessible details, responsive data views, CSP-clean rendering, and one repository registration surface
- Add approval-gated self-host service deployment that consumes the packaged binary, sends a bounded Docker context, atomically swaps only the HTTP service container, and rolls back on failed health

## 1.3.5 - 2026-07-16

- Redirect sign-in requests straight to AkurAI Auth, then return authenticated users to their workspace
- Make hosted Git synchronization and MCP-controlled CI/CD the canonical agent deployment workflow

## 1.3.4 - 2026-07-16

- Add a public AkurAI Build documentation route with Framework-style navigation and responsive layouts
- Replace the inherited Bunfork overview with the actual repository, pipeline, artifact, MCP, release, and security contracts

## 1.3.3 - 2026-07-16

- Redesign the public homepage around a GitHub-inspired product and community hierarchy
- Rank public repositories by real build activity and group their public source owners
- Accept process-server readiness logs from either output stream in HTTP integration checks

## 1.3.2 - 2026-07-15

- deploy.sh publish: sync the self-hosted mirror through the akurai_repo_sync MCP tool

## 1.3.1 - 2026-07-15

- Replace the JSON CLI with a full read/write MCP tool set

## 1.2.1 - 2026-07-14

- Host authenticated Git repositories over Smart HTTP with repo host/sync CLI

## 1.1.9 - 2026-07-12

- Enable verified ARM64 builds and reusable binary caches

## 1.1.8 - 2026-07-12

- Preserve non-root cache mount ownership

## 1.1.7 - 2026-07-12

- Pin actual Rust 1.97 build toolchain

## 1.1.6 - 2026-07-12

- Simplify self-hosted Rust container validation

## 1.1.5 - 2026-07-12

- Isolate build caches and bootstrap pinned CI tools

## 1.1.4 - 2026-07-12

- Run controller with Docker group and pin CI toolchain

## 1.1.3 - 2026-07-12

- Add bounded agent wait and readiness recovery

## 1.1.2 - 2026-07-12

- Harden deployment and edge diagnostics

## 1.1.1 - 2026-07-11

- Establish AkurAI Build from the Bunfork foundation with Git CI/CD, Docker matrices, encrypted state, artifacts, protected deployments, MiniJinja UI, agent skill, and managed Titan/EC2 deployment.