popagent

Latest change 524957811967067a7f24e61c8d72142273a81d9e - Harden model catalog and release gates by AkurAI Build

# Changelog

All notable changes to Popagent are documented here.

## [Unreleased]

### Added

- Made autonomous self-update and Build-maintenance schedules operator-managed defaults in Settings → Schedules, with editable cron timing and pause/resume controls while preserving protected execution payloads.
- Fixed deployment release gates to compare against the recorded production revision and require both a meaningful changelog update and an increasing semantic application version.
- Deduplicated repeated 9Router model routes in the model picker and made autonomous structured handoffs recover from valid streamed JSON when Mastra omits the structured object.

- Added a responsive GitHub-inspired Changelog page at `/changelog`, with a bundled source-of-truth, commit-graph release timeline, categorized change badges, mobile navigation, and sidebar access directly above Settings.
- Added a deploy-managed semantic application version rendered below the Popagent sidebar brand.
- Added `./popagent automation-reconcile` to reapply code-owned autonomous schedule models after deployment.
- Deployment now rejects every release that does not include a meaningful `CHANGELOG.md` update.
- Fixed managed pipeline branch validation and existing role, task-board, and Build-client contracts so valid `main` releases can deploy the Ornith schedule cutover.
- Added governed `build-maintainer`, `build-release-manager`, and `community-steward` Mastra roles with persisted identity, model, access, delegation, and role-specific AkurAI Build tool allowlists.
- Added a bounded, abortable JSON-RPC MCP client and typed AkurAI Build repository, pipeline, worker, metrics, community, release, and promotion tools. Missing `AKURAI_BUILD_API_KEY` fails closed without exposing credentials.
- Added API, CLI, bootstrap, role-boundary, and MCP transport contract coverage.
- Added governed idle `build-maintenance` task/schedule lineage with a process-local autonomous lease, contained reviewed branches, CI run and community evidence, immutable revision/timestamp deployment verification, and an explicit no-promote/no-deploy production boundary.
- Deployment now records phase timing, reuses only immutable CI verification for the exact release revision, and retains candidate and migration safety checks.