popagent

public

Latest change d8835214da9577432ebe40aa39d88e45d8b2df6d - Repair release verification contracts by AkurAI Build

# Changelog

All notable changes to Popagent are documented here.

## [Unreleased]

### Added

- Added a responsive GitHub-inspired Changelog page at `/changelog`, with a bundled source-of-truth, commit-graph release timeline, categorized change badges, mobile navigation, and sidebar access directly above Settings.
- Added a deploy-managed semantic application version rendered below the Popagent sidebar brand.
- Added `./popagent automation-reconcile` to reapply code-owned autonomous schedule models after deployment.
- Deployment now rejects every release that does not include a meaningful `CHANGELOG.md` update.
- Fixed managed pipeline branch validation and existing role, task-board, and Build-client contracts so valid `main` releases can deploy the Ornith schedule cutover.
- Added governed `build-maintainer`, `build-release-manager`, and `community-steward` Mastra roles with persisted identity, model, access, delegation, and role-specific AkurAI Build tool allowlists.
- Added a bounded, abortable JSON-RPC MCP client and typed AkurAI Build repository, pipeline, worker, metrics, community, release, and promotion tools. Missing `AKURAI_BUILD_API_KEY` fails closed without exposing credentials.
- Added API, CLI, bootstrap, role-boundary, and MCP transport contract coverage.
- Added governed idle `build-maintenance` task/schedule lineage with a process-local autonomous lease, contained reviewed branches, CI run and community evidence, immutable revision/timestamp deployment verification, and an explicit no-promote/no-deploy production boundary.
- Deployment now records phase timing, reuses only immutable CI verification for the exact release revision, and retains candidate and migration safety checks.