AkurAI-Monitor / CHANGELOG.md

Latest change 9a35bd9c668fae6e3383420387d1a0b1b4b3f524 - Read-only bearer token and host filter on /api/status by Ólafur Búi Ólafsson

# Changelog

All notable changes to this project are documented here. Format: Keep a Changelog; SemVer.

## [Unreleased]

### Added
- `MONITOR_READ_TOKEN`: a read-only bearer that may only GET `/api/status`, `/api/metrics`, `/api/alerts`, `/api/manage/hosts` and `/api/ingestion/health` (for widgets and dashboards; `MONITOR_API_TOKEN` keeps full access)
- `/api/status?host_id=N` returns one host's latest metrics only

## [0.1.3] - 2026-10-01

### Added
- open alerts auto-resolve when their metric has had no sample for `MONITOR_ALERT_STALE_SECS` (default five collection intervals)
- `tests/alert_e2e.rs`: alert lifecycle end-to-end against a throwaway Monitor and scratch database (`--ignored`)
### Removed
- pi-bun: the error-log push, the `pi-bun` channel kind, the startup `PI-BUN` channel seeding, `MONITOR_PIBUN_*` settings and the `/api/manage/channels/{id}/targets` endpoint; webhook is the only channel kind

- maintenance release


### Added
- open alerts auto-resolve when their metric has had no sample for `MONITOR_ALERT_STALE_SECS` (default five collection intervals)
- `tests/alert_e2e.rs`: alert lifecycle end-to-end against a throwaway Monitor and scratch database (`--ignored`)

### Removed
- pi-bun: the error-log push, the `pi-bun` channel kind, the startup `PI-BUN` channel seeding, `MONITOR_PIBUN_*` settings and the `/api/manage/channels/{id}/targets` endpoint; webhook is the only channel kind

## [0.1.2] - 2026-09-30

- maintenance release


## [0.1.1] - 2026-09-30

### Added
- harden workspace health summaries
- tenant-isolated health aggregate endpoint
- expand host telemetry dashboard
- add monitor management API and CLI
- AkurAI logo mark + proper favicons in monitor dashboard
- align to AkurAI theme system (17 named themes, light/dark)
- DNS metrics from akurai-dns log stream + dashboard charts
- deterministic categorization, level detection, level/category filters
- AkurAI Monitor branding (logo, favicon, page title)
- native journald collector for same-host services (no pino)
- full-width layout + log ingestion endpoint for shipping from other apps
- live SSE streaming for dashboard + logs (replaces polling)

### Fixed
- restore public exemption for plain /api/health (AKURAI-MONITOR-8 regression) — the tenant-scoped /api/health/{org}/{ws} aggregate correctly stays behind the bearer-token gate, but the liveness check used by deploy validation and load balancers must stay unauthenticated
- COALESCE SUM(up) so empty-tenant availability returns 0, not a NULL->i64 panic (AKURAI-MONITOR-10 follow-up)
- add host_id column to metrics DDL, compute cutoff in alerts handler
- deploy Monitor assets and verify authenticated routes
- standardize health endpoint with app/version/status
- decode byte-array MESSAGE + strip ANSI
- send no-cache on static assets so redeploys aren't stale

### Changed
- cargo fmt (AKURAI-MONITOR-8)
- structured log contract + akurai-log adoption in monitor skill
- remove stale GitHub Actions workflows (migrated to AkurAI Build)
- expand .gitignore
- flag akurai-notes MCP as unreliable, point at ttynyagent akurai vault
- repoint uses: at renamed AkurAI-EC2 repo
- add self-hosted deploy workflow
- update note pointers — PassVault→12, Monitor→13, golfsetridak→15, vpn-site→16
- route agent instructions through AGENTS
- add deploy conduct comments
- drop pino helper (no node apps; journald + curl cover shipping)
- correct stale 'No auth' constraint (OIDC is live)