emisar

No entries match these filters. Clear filters

1. v0.50.0 Sep 25, 2026 · release notes

   Emisar v0.50.0 introduces workspace-scoped membership, new cancel_run MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tool, and EMQX pack support

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.50.0 https://github.com/AndrewDryga/emisar.git
   # already have the repo? check out this version:
   $ git checkout v0.50.0

   • Workspace members now own their identities, allowing SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management., SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave., or invitations to create members scoped only to that workspace rather than a global personal login

   1 detail in Everything

2. v0.49.0 Sep 15, 2026 · release notes

   Emisar v0.49.0 adds review objects to MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. runs, stricter pack linting, and runner validation

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.49.0 https://github.com/AndrewDryga/emisar.git
   # already have the repo? check out this version:
   $ git checkout v0.49.0

   • Adds a review object to run summaries in the MCP bridge for gated approvals
   • Enforces set -euo pipefail on all packaged scripts via new pack lints
   • Pre-validates config against the staged binary before installing the runner

   3 details in Everything

3. v0.48.0 Sep 9, 2026 · release notes

   emisar v0.48.0 adds co-op sandbox support for agents with improved billing UI and version indicators

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.48.0 https://github.com/AndrewDryga/emisar.git
   # already have the repo? check out this version:
   $ git checkout v0.48.0

   • Adds co:op as a supported agent sandbox environment with controls for files, secrets, and tools access.
   • Connect an agent flow now generates account-specific setup for supported sandboxes including a connection test and Audit check.
   • Billing management UI updated with clearer invoice states and explicit empty state for paid workspaces without invoices.
   • Runner and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. version indicators now distinguish optional updates from required ones with direct update commands.

   4 details in Everything

4. v0.42.0 Aug 25, 2026 · release notes

   Adds signed dispatch via PKIPKIA framework of policies, roles, and cryptographic standards for issuing and managing digital certificates that bind public keys to identities, letting tools verify authenticity and encrypt communications without pre-shared secrets. certificates, pack management commands, and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. Bridge CLI support.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.42.0 https://github.com/AndrewDryga/emisar.git
   # already have the repo? check out this version:
   $ git checkout v0.42.0

   └──▷ TRY IT
   Verify the integrity of a pack installation locally before deploying.
   copy

   $ emisar pack verify

   View pending changes in a pack without applying them.
   copy

   $ emisar pack diff

   • Issues X.509X.509A standard defining the format of public-key certificates, maintained by the ITU-T, used by cyber tools to authenticate identities and establish encrypted connections over TLS and similar protocols. certificates for signed dispatch where each certificate names the runners it may target
   • Adds emisar pack diff, emisar pack verify, and pack suggest commands to manage packs

   2 details in Everything

5. v0.41.0 Aug 18, 2026 · issue 049

   emisar v0.41.0 adds role-scoped consoles, live session reconnection on permission changes, and 100-pack catalog with new GCP, Consul, and HCP Terraform actions.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.41.0 https://github.com/AndrewDryga/emisar.git
   # already have the repo? check out this version:
   $ git checkout v0.41.0

   • Role and scope changes (member role, runner access, pack access) now take effect immediately in open web sessions, reconnecting the session before stale authority can be acted on.
   • Billing managers now receive a finance-only console; operators can manage agents, approvals, and runbooks without gaining team or policy administration rights.
   • Scoped admins are blocked from delegating more reach than they hold or triggering account-wide pack cleanup.
   • Reads that expose every pack version or an exact run command now require a checked subject rather than relying on already-filtered callers.
   • The read-only staff console now requires MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. proof tied to the current enrollment.

   +6 more show less

   • Console navigation, actions, filters, and empty states now adapt to the member's role and access level, with role-aware explanations for restricted pack and action views.
   • SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. group mappings now paginate in both directions.
   • The pack catalog expands to 100 packs and 1,689 actions.
   • Consul pack gains the ability to snapshot registration churn; the debugging pack adds bounded process context, environment-key, argv, and connection reads.
   • GCP Monitoring pack adds Cloud Logging name and entry reads.
   • HCP Terraform pack exposes replacement paths in plan summaries.

   11 details in Everything

6. v0.40.0 Aug 13, 2026 · issue 045

   emisar v0.40.0 adds self-updating runners, paginated MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. responses, and 100-pack catalog coverage including JFrog, Databricks, and Sentry.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.40.0 https://github.com/AndrewDryga/emisar.git
   # already have the repo? check out this version:
   $ git checkout v0.40.0

   └──▷ TRY IT
   Update an installer-managed runner in place — the runner verifies checksum and attestation before swapping binaries.
   copy

   $ emisar update

   Capture machine-readable pack-update output even when post-update validation fails, so CI pipelines can parse the partial report.
   copy

   $ emisar pack update --json

   • Adds emisar update subcommand so installer-managed runners can update themselves, with automatic release-checksum and GitHub build-attestation verification before executing stop, swap, restart, and rollback.
   • Adds --json flag to emisar pack update that now emits its partial report before returning a post-update validation error, preserving machine-readable output for automation pipelines.
   • wait_for_run now returns paginated 64 KiB continuation pages when a terminal runbook result exceeds one MCP response, keeping the summary in the first response.
   • Catalog expands to 100 packs and 1,682 actions, adding JFrog Artifactory, Databricks, Sentry, Symbolicator, and NTPsec, with larger Cassandra and Cloudflare coverage.
   • Runner, pack, action, approval, and audit discovery now enforces the member's current runner and pack scope across both the console and MCP.

   5 details in Everything

7. v0.39.0 Aug 10, 2026 · issue 041

   emisar v0.39.0 overhauls runbook versioning to track decisions, adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. slug-keyed API, and expands secret redaction.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.39.0 https://github.com/AndrewDryga/emisar.git
   # already have the repo? check out this version:
   $ git checkout v0.39.0

   • Adds get_runbook and update_runbook_draft MCP endpoints keyed by slug, so agents replace only the single unpublished change under the hash they read; publication remains human-only.
   • Runbook versioning now tracks published releases (e.g. Run v3) rather than counting every save, with a single in-flight draft per runbook instead of unbounded version rows.
   • Publishing now shows a diff of changed lines against the exact canonical text whose hash defines the release, requiring explicit consent plus the hash of what you read before an unpublished change can run.
   • Attempting to run a named older release now returns not_live instead of silently dispatching current content.
   • Executions snapshot the definition they dispatched at start time, so later edits, publishes, or deletes cannot rewrite audit history.

   +3 more show less

   • Runner v0.19.0 expands automatic secret redaction to cover connection strings, database URLs, key-derivation inputs (salt, pepper), cookie and session signing keys, and passphrase spellings — acting as a safety net beneath per-action redaction declarations.
   • pfSense gains resolver, NTP, and WireGuardWireGuardA modern VPN protocol and Linux kernel module, maintained as an open-source project, that establishes encrypted tunnels using minimal code and fast cryptography, giving cyber tools a lightweight, high-performance transport layer. peer reads (secrets excluded), plus a DHCP reservation action staged for operator approval.
   • Behavior harness now runs tests against a real service manager (PID 1), a per-case Docker daemon, iptables in its own namespace, and a real dpkg database for install, remove, and autoremove; uncovered cases are recorded with explicit reasons.

   8 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The portal migration collapses all runbook version rows into a single runbook per slug, renumbers published versions into releases, and repoints execution history — this runs automatically before the instance serves on upgrade.
8. v0.38.0 Aug 8, 2026 · issue 040

   Emisar v0.38.0 adds invalid-glob warnings for policy overrides and fixes silent runbook drops and session disconnect failures.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.38.0 https://github.com/AndrewDryga/emisar.git
   # already have the repo? check out this version:
   $ git checkout v0.38.0

   • Adds a real-time advisory warning when a policy override glob cannot match any action ID (e.g. regex-style patterns like cassandra\.drop_*), flagging deny rules that appear protective but cover nothing — warning is non-blocking to allow rules targeting not-yet-installed packs.
   • Ending a member's sessions now disconnects the live console session itself, not only the cookie behind it, so administrator-initiated session termination during an incident takes effect immediately.

   2 details in Everything

9. v0.37.0 Aug 8, 2026 · release notes

   emisar v0.37.0 adds 90-day self-refreshing runner tokens, no_new_privsno_new_privsA Linux process flag, set via `prctl()`, that prevents a process or its children from gaining elevated privileges through `setuid` binaries or file capabilities, limiting exploit escalation paths. process isolation, multi-arch container images, and 95 packs with 1,498 actions.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.37.0 https://github.com/AndrewDryga/emisar.git
   # already have the repo? check out this version:
   $ git checkout v0.37.0

   └──▷ TRY IT
   Relabel an entire runner fleet to a new group and assign stable IDs without touching per-host config files.
   copy

   $ EMISAR_GROUP=prod-eu EMISAR_RUNNER_ID=runner-42 ./emisar-runner

   Verify the integrity and provenanceprovenanceEvidence recording where a software artifact came from and how it was built, including its source and build process. It helps a consumer check that the artifact matches a trusted build. of the official multi-arch runner container image before deploying it.
   copy

   $ gh attestation verify oci://ghcr.io/andrewdryga/emisar-runner:0.18.0 --owner andrewdryga

   • New EMISAR_GROUP and EMISAR_RUNNER_ID environment variables let operators relabel a fleet without editing configs on each host.
   • Official multi-architecture container image published at ghcr.io/andrewdryga/emisar-runner with build provenance and an SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue..
   • Runner tokens now carry a 90-day bounded lifetime and self-refresh two-thirds of the way through over the existing connection, with no host access required; expired tokens are refused at connect.
   • Action children now start with no_new_privs, preventing execve inside a pack from picking up setuid or file-capability privileges the runner does not already hold.
   • Reads that can return credentials are now approval-gated; sensitive run values are masked in a single pass so one match cannot rewrite another's marker.

   +8 more show less

   • MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. enrollment and recovery-code regeneration now require proof of the current inbox; credential step-up codes are rate-limited across the cluster rather than per node.
   • Every pack's curl is confined to an explicit protocol with globbing off, preventing URLs arriving in API responses from expanding into extra transfers or exfiltrating credentials.
   • Signed MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. dispatch now signs the narrative a human approver actually reads (attestation v5), and the bridge verifies that narrative rather than a reconstruction of it.
   • MCP bridge signing key now comes from a pinned credential directory instead of the environment.
   • Runbook targets can name a runner group in the model contract, and an agent can revise and test a runbook draft before a human publishes it.
   • Catalog now carries 95 packs and 1,498 actions, adding Apache AirflowApache AirflowAn open-source workflow orchestration platform maintained by the Apache Software Foundation that lets developers schedule, monitor, and chain tasks as directed acyclic graphs, making it useful for automating data pipelines., Spark, Google Cloud billing, and BunnyCDN.
   • Console runbook target selection adds a stable trigger naming chosen targets, a searchable roster of dense one-line rows, and scope icons encoding cardinality.
   • Backlogged run output ships as one frame instead of one per line, and the connection lease renews at half its life instead of on every heartbeat.

   13 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Action children now start with no_new_privs, so a setuid or setgid helper in a runner's process tree no longer elevates. For example, postqueue (setgid postdrop) can no longer grant access to the Postfix queue — the runner user must own the queue directly or be a postdrop member.
10. runner-v0.17.2 Aug 7, 2026 · issue 038

    emisar runner 0.17.2 adds BunnyCDN operations, explicit runbook targets, and production MIG rollout zone placement.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch runner-v0.17.2 https://github.com/AndrewDryga/emisar.git
    # already have the repo? check out this version:
    $ git checkout runner-v0.17.2

    • Adds BunnyCDN operations and explicit runbook targets.
    • Allows production MIG rollout placement in available zones.

    2 details in Everything

11. docs update Aug 1, 2026 · issue 032

    Emisar adds SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. support with Okta, Microsoft Entra, JumpCloud, Keycloak, and Google Workspace integrations.

    • Supports Single Sign-On (SSO) via Okta, Microsoft Entra, JumpCloud, Keycloak, and Google Workspace for centralized identity management.

    1 detail in Everything

12. docs update Aug 1, 2026 · issue 032

    Emisar adds SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. support with Okta, Microsoft Entra, JumpCloud, Keycloak, and Google Workspace integrations.

13. v0.36.0 Jul 31, 2026 · issue 032

    Emisar v0.36.0 adds staged runbooks with typed inputs and parallel execution, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. 2026-07-28 routing, and 91 action packs with bounded diagnostics.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.36.0 https://github.com/AndrewDryga/emisar.git
    # already have the repo? check out this version:
    $ git checkout v0.36.0

    • Adds staged runbooks with typed inputs, sequential or parallel stage execution against selected runner groups, named step outputs, success condition testing, and explicit wait bounds.
    • Adds a single pre-execution approval gate that freezes the complete runbook execution plan before work begins.
    • Adds canonical JSON runbook definition format shared across the console, MCP, and execution pages, with attempt, output, wait, and terminal cause history.
    • Adds OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. discovery and JWKSJWKSA JSON Web Key Set, a published collection of cryptographic keys. Applications use it to find the public key needed to verify a token's signature. refresh under a shared bounded address policy that rechecks the actual response received; changing an issuer clears credentials tied to the old one.
    • Adds atomic SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. group patch application in wire order, with body bounding before authentication and automatic session and identity link retirement when a connection is disabled.

    +4 more show less

    • Adds per-action account membership resolution for run and approval attribution, preventing cross-workspace profile leakage into the audit log.
    • Adopts MCP 2026-07-28 routing headers and dual-era endpoint on both the bridge and portal, including OAuth Client ID Metadata DocumentsClient ID Metadata DocumentsOAuth 2.0 documents hosted at a client's own URL that declare its identity and redirect URIs, letting authorization servers fetch and verify client metadata without manual registration..
    • Expands the action catalog to 91 packs and 1,386 actions, adding bounded diagnostics for GCP, Pure FlashArray, Terraform, Nomad, OIDC/JWKS, nftables, TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it., and Docker Compose.
    • Makes pack actions fail explicitly on missing source commands or HTTP error responses instead of reporting empty success through a downstream pipe.

    9 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Disabling a SCIM connection now retires the sessions and pending identity links it vouched for — active sessions tied to a disabled SCIM connection will be terminated on upgrade.
    • !Pack actions now fail on missing source commands and HTTP error responses rather than returning an empty success — any automation that depended on silent empty-success behavior will begin receiving failures.
14. mcp-v0.5.0 Jul 31, 2026 · issue 032

    emisar mcp-v0.5.0 expands its infrastructure diagnostics catalog.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch mcp-v0.5.0 https://github.com/AndrewDryga/emisar.git
    # already have the repo? check out this version:
    $ git checkout mcp-v0.5.0

15. runner-v0.16.0 Jul 31, 2026 · issue 032

    emisar runner v0.16.0 expands its infrastructure diagnostics catalog.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch runner-v0.16.0 https://github.com/AndrewDryga/emisar.git
    # already have the repo? check out this version:
    $ git checkout runner-v0.16.0

16. v0.35.0 Jul 27, 2026 · issue 028

    Emisar v0.35.0: hostname-based runner identity, retention safety for connected runners, and faster behavior matrix CI.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.35.0 https://github.com/AndrewDryga/emisar.git
    # already have the repo? check out this version:
    $ git checkout v0.35.0

    • Runners without an explicit runner.id now use their hostname as identity, so reboots reconnect the same runner and replaced ephemeral hosts auto-enroll without a persisted identity file.
    • Pack retention no longer sweeps versions still advertised by a connected runner, preventing pack_untrusted dispatch failures after idle-window cleanups.
    • Hosted admin runner bootstraps from a version-pinned release download with retries, eliminating GitHub API anonymous rate-limit failures on control-plane VM start.
    • Behavior cases for high/critical pack actions now run in disposable Compose projects as a non-root identity against real services, with network-path readiness probes enforced before cases start.
    • The snmp pack's OSPF adjacency fixture supports AppArmorAppArmorA Linux kernel security module, maintained as part of the kernel, that confines programs to a declared set of files, capabilities, and network access — letting cyber tools sandbox processes without writing custom kernel code.-confined hosts via network namespace construction.

    +2 more show less

    • Behavior matrix CI runs in under half previous wall-clock time via pre-pulled images, sharded slow suites, and concurrency caps on heavyweight services.
    • CI now enforces that every high/critical action changed by the argument-boundary sweep has a successful behavior case or a declared machine-readable risk exception.

    7 details in Everything

17. v0.34.0 Jul 26, 2026 · issue 028

    emisar v0.34.0 adds streaming run output via MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. cursor paging and authoring-time pack argument validation.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.34.0 https://github.com/AndrewDryga/emisar.git
    # already have the repo? check out this version:
    $ git checkout v0.34.0

    • New wait_for_run MCP call accepts an output cursor and returns the next cursor, enabling agents to stream run output incrementally as it arrives rather than polling.
    • Curl-backed API actions now fail on 4xx/5xx HTTP responses instead of reporting transport success, making pack error handling reliable.
    • Pre-run dispatch rejections (contract changes, refusals, rate limits) are now logged with bounded, allowlisted fields, making refused MCP calls visible in operations.
    • Pack-trust conflict errors now name the specific runners that disagree about an action instead of failing generically.
    • Operator input (approval notes, grant scopes, policy overrides) now survives console re-renders triggered by co-approver broadcasts or refused submits.

    +2 more show less

    • Added llms.txtllms.txtA proposed convention for a plain-text file placed at a website's root to give LLMs a concise, structured summary of the site's content, helping AI agents navigate it more reliably than parsing raw HTML. index and a Keycloak setup guide to documentation.
    • Documentation reorganized by task: SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. and directory sync split, cloud and CLI agent connection split, containers separated into Kubernetes and Nomad sections with a host-install page, and operational limits and autoscaling fleets given dedicated pages.

    7 details in Everything

18. v0.33.0 Jul 21, 2026 · release notes

    emisar v0.33.0 adds uninstall/reset runner identity flags, trust-gated action dispatch, and a new incident-response skill.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.33.0 https://github.com/AndrewDryga/emisar.git
    # already have the repo? check out this version:
    $ git checkout v0.33.0

    └──▷ TRY IT
    Cleanly remove a decommissioned runner's identity and token without wiping its logs or config, so the runner can be re-enrolled fresh.
    copy

    $ install.sh --uninstall

    Reset a runner's external identity in an automated pipeline when rotating enrollment keys, skipping the interactive prompt.
    copy

    $ install.sh --reset-identity

    • Adds --uninstall flag to install.sh to remove the cached token, legacy token file, and generated runner identity while preserving configuration, local evidence, and logs.
    • Adds --reset-identity flag to install.sh for unattended runner identity resets when supplying a different enrollment key.
    • Adds --purge flag to install.sh that extends --uninstall by also removing the retained configuration, evidence, and log files.
    • MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. catalog, search, exact lookup, runner inspection, and runbook recovery now filter out pending, rejected, revoked, retired, hash-mismatched, and incomplete pack versions from model-visible results.
    • Runner UI locks the Run button and surfaces a diagnostic explanation when an advertised action's pack is untrusted or retired; dispatch revalidates the contract so stale pages or tool calls cannot execute after trust changes.

    +5 more show less

    • Runbook recovery now fails closed if trust changes between action inspection and execution, preventing hidden pack version leakage through recovery results.
    • ChatGPT tool annotations now distinguish read-only calls from mutations, and domain verification accepts OpenAI's text challenge.
    • Adds a new public respond-to-production-incidents skill providing customer agents a bounded observe-diagnose-act-verify workflow.
    • The Packs page now follows the live catalog and gives unadvertised versions one day to disappear before cleanup.
    • OAuth return targets now preserve their original local query string through SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. and registration flows.

    10 details in Everything

19. v0.32.0 Jul 20, 2026 · release notes

    emisar v0.32.0 adds real-agent MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. conformance evals, symptom-language search, and a justification chain on run_action.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.32.0 https://github.com/AndrewDryga/emisar.git
    # already have the repo? check out this version:
    $ git checkout v0.32.0

    • Extends run_action to accept optional evidence (observed state) and expected (predicted outcome) fields alongside a reason that now supports up to 2000 characters, surfacing the full justification chain on the approval screen and run details.
    • Paginated MCP reads now return a copy-ready next call object instead of a bare cursor, so an agent continues pagination by echoing a single object.
    • Adds list_runners to the MCP API, inlining each runner's dispatchable pack IDs so one call reveals what a named host can execute.
    • Actions can opt into typed JSON results dispatched against a pinned trusted descriptor.
    • Introduces real-agent conformance evals that drive live Claude Code and Codex CLIs through a fail-closed loopback relay — hard-failing on policy-blocked calls, invalid mutation arguments, a run_action without a prior get_action for the same action, placeholder reasons, and runs not driven to a terminal status.

    +3 more show less

    • Registry now serves the catalog compact and gzip-encoded behind a CDNCDNA content delivery network, servers distributed across locations that cache and serve content near readers. It can reduce loading time and traffic to the original server., reducing transfer to roughly one-tenth of the previous size; pack tarballs remain unencoded to preserve content-hash pinning.
    • Runner access is now explicit: a member is scoped to only the runners and groups they are permitted to use.
    • A missing client binary is reported as separate host readiness evidence — the action stays advertised for manifest verification but is not offered for dispatch.

    8 details in Everything

20. v0.31.0 Jul 18, 2026 · release notes

    emisar v0.31.0 adds browser-based device-flow agent connect, operator pack catalog controls, and 13 MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. clients out of the box.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.31.0 https://github.com/AndrewDryga/emisar.git
    # already have the repo? check out this version:
    $ git checkout v0.31.0

    • Adds RFC 8628RFC 8628An IETF standard defining the OAuth 2.0 Device Authorization Grant, letting input-constrained devices obtain tokens by having the user authenticate on a separate device with a browser. device-flow browser approval for agent connect: the installer opens a consent page, mints per-client keys, and writes them directly into each client's config — no clipboard, shell history, or process-argument exposure.
    • Supports 13 MCP clients configured out of the box: Claude Code, Claude Desktop, Cursor, Gemini CLI, Codex CLI, OpenClaw, OpenCode, Windsurf, Pi, Copilot CLI, Zed, Hermes, and Goose, each in its own format.
    • Adds emisar doctor color output and a service-supervisor state check.
    • Adds operator pack catalog controls: delete a pack or a single version, revoke trust on a version, and auto-remove versions no runner has advertised for a configurable number of days.
    • Retired pack versions are now surfaced as retired to lagging runners (with an upgrade pointer) instead of appearing as unknown packs — preventing inadvertent re-authorization of vulnerable bytes.

    +4 more show less

    • Adds Nomad 0.2.0 pack with deployment control (list, pause, resume, fail), metadata-filtered discovery, node-pool and CSICSIAn ambiguous acronym spanning Container Storage Interface, Crime Scene Investigation, and other expansions — without more context about which domain this tool operates in, a reliable definition cannot be given. plugin reads, and a uniform TLS path for API calls.
    • Gates three container/process environment-dump actions — where secrets such as database passwords live — behind explicit approval.
    • Runner CLI now reloads the daemon automatically after a pack install, update, or uninstall.
    • Under-permissioned roles now receive a clean denial instead of a server error on detail routes.

    9 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Self-hosted runners: the config key auth_key_env is renamed to enrollment_key_env — update your config and re-mint any enrollment keys that were never used.
21. v0.30.0 Jul 17, 2026 · release notes

    emisar v0.30.0 enforces tenant isolation in the database and adds signed-pack visibility over MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.30.0 https://github.com/AndrewDryga/emisar.git
    # already have the repo? check out this version:
    $ git checkout v0.30.0

    • Signed-pack enforcement is now visible over MCP: a runner that requires signed packs announces that requirement to MCP clients.
    • Database-enforced tenant isolation: every runner-owned child row carries a composite foreign key to its account, so cross-tenant writes are refused at the database row level rather than only in application code.
    • CHECK constraints added for security-relevant enums so the database rejects out-of-range values that gate trust and dispatch, independent of the application layer.
    • Content-Security-Policy headers now applied to public unauthenticated pages and error responses, matching the rest of the site.
    • Sentry named as a subprocessor; events scrubbed of personal data before leaving the process.

    +3 more show less

    • Trigram index added to speed run search on large accounts, replacing three now-covered indexes.
    • Steadier dispatch: a runner at capacity redelivers refused dispatches, the stale-dispatch sweep drains oldest-queued entries first, and stuck pending runs advance instead of stranding.
    • Severe database and load-balancer conditions now page directly; point-in-time recovery drill measures actual RTO.

    8 details in Everything

22. v0.29.0 Jul 16, 2026 · issue 036

    Emisar v0.29.0 tightens MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. argument coercion, improves error clarity, and raises pack risk levels for secret-dense config dumps.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.29.0 https://github.com/AndrewDryga/emisar.git
    # already have the repo? check out this version:
    $ git checkout v0.29.0

    • Scalar MCP arguments sent as canonical strings (e.g. "limit": "50", "dry_run": "true") now coerce to their expected types instead of failing the call.
    • MCP argument faults now name the specific field and type mismatch — e.g. limit must be a JSON integer from 1 to 100; it was sent as a string. — replacing generic contract errors; enum faults list allowed values and unknown arguments are spelled out against the allowed set.
    • MCP run summaries omit zero-information fields: stdout/stderr, byte-count, and truncation fields are absent when a stream produced no bytes; output_complete appears only when false; per-stream SHA-256SHA-256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data. digests removed from the MCP projection (retained on the run detail page and audit record).
    • Disabling two-factor authentication now requires a fresh step-up challenge, preventing a hijacked session from quietly weakening an account.
    • Production session cookies always carry the Secure flag.

    +3 more show less

    • Cloud-init user/vendor data, cloud-config, pm2 env, nginx config dumps, and caddy config dumps moved from risk level low to medium, matching linux.sudoers_dump, removing them from the ungated low-read path.
    • Redis ACLACLAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource. password hashes are redacted from acl_list and acl_getuser output, preventing ungated reads from leaking crackable material.
    • Exec-style arguments across docker, systemctl, podman, minio, and related packs now anchor their first character to an alphanumeric, blocking hostile values from being parsed as leading-dash flags.

    8 details in Everything

23. v0.28.0 Jul 16, 2026 · issue 036

    emisar v0.28.0 adds emisar doctor dispatch-log checks, SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management./MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. route coverage, SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. rate-limiting, and honest fleet degradation diagnostics.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.28.0 https://github.com/AndrewDryga/emisar.git
    # already have the repo? check out this version:
    $ git checkout v0.28.0

    └──▷ TRY IT
    Check runner health — dispatch log integrity, degraded packs, and last cloud rejection — before or after an upgrade.
    copy

    $ emisar doctor

    Script a CI/CD gate that fails a pipeline if the dispatch log is unreadable or in a bad state.
    copy

    $ emisar state check-dispatch-log && echo "dispatch log OK" || exit 1

    Automatically quarantine a corrupt dispatch log during an unattended host upgrade instead of crash-looping.
    copy

    $ QUARANTINE_DISPATCH_LOG=1 ./install.sh

    • Adds emisar doctor checks for the dispatch log, degraded packs, and last cloud rejection; adds emisar state check-dispatch-log for scriptable verdict on dispatch-log health.
    • Adds QUARANTINE_DISPATCH_LOG=1 environment variable to install.sh to automatically quarantine an unreadable dispatch log instead of leaving a host crash-looping after an upgrade.
    • install.sh now verifies dispatch state with the staged binary before touching a running service, aborting with remediation options on failure.
    • Degraded packs now surface as named load failures in MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. list_runners responses and as an amber notice with reasons and reinstall remedy on the runner detail page.
    • Denied runs now return a bounded policy reason in MCP summaries; find_actions supports natural multi-term queries.

    +8 more show less

    • Console-created runbooks are now visible and executable over MCP.
    • Sign-in enforcement for Require SSO and Require MFA now covers every controller route.
    • SCIM, audit-export, and runner-register endpoints are now rate-limited.
    • Account and user erasure (GDPRGDPREU regulation enacted in 2018 that governs how organizations collect, store, and process personal data of EU residents, giving cyber tools legal obligations around data handling and breach notification. delete) available as an operator-run release task.
    • Adds direct alerts for database-down, zero-healthy-backend, and portal VM saturation conditions.
    • Adds docs/COMPATIBILITY.md naming on-host runner state (dispatch log, installed pack trees) as a compatibility surface with documented migration rules.
    • Outbound connections now assert a TLS 1.2 minimum floor.
    • Runner binary ships as runner-v0.13.0 with SLSASLSASupply-chain Levels for Software Artifacts, a framework for assessing how software was built and protecting that process from tampering. Provenance records help verify where a build came from.-3 build provenanceprovenanceEvidence recording where a software artifact came from and how it was built, including its source and build process. It helps a consumer check that the artifact matches a trusted build. and SHA256SUMS.

    13 details in Everything

24. v0.27.0 Jul 16, 2026 · issue 036

    Runner v0.12.0 adds corrupt-state pre-flight checks, bounded MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. failure messages, and account-chooser OAuth consent.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.27.0 https://github.com/AndrewDryga/emisar.git
    # already have the repo? check out this version:
    $ git checkout v0.27.0

    • Corrupt durable dispatch state now halts the runner before it connects to the control plane, preventing a misconfigured runner from silently operating.
    • MCP run summaries now include a bounded terminal failure message when the runner supplies one, making MCP failures visible in the portal without a new MCP bridge binary.
    • OAuth consent now lets a user choose which account to connect during connector setup.
    • Key-bearing connector commands are kept out of shell history.
    • Failure causes redact sensitive action arguments before they reach local audit records or the portal.

    +2 more show less

    • A newer non-destructive production plan supersedes an older pending plan, with Terraform confirmation remaining the single human apply gate.
    • Unsigned installations no longer open or lock signing nonce state during startup.

    7 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Upgrading to runner-v0.12.0 starts a new durable dispatch journal and does not import older unacknowledged entries; downgrading to an earlier runner after v0.12.0 has written new dispatch records is unsupported.
25. v0.26.0 Jul 16, 2026 · issue 036

    Emisar v0.26.0: in-flight run recovery on reconnect and out-of-date MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. bridge flagging in the console.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.26.0 https://github.com/AndrewDryga/emisar.git
    # already have the repo? check out this version:
    $ git checkout v0.26.0

    • Console LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. agents list now groups connections by the operator behind each key, displays the emisar-mcp bridge version inline per connection, and flags out-of-date bridges with a one-step path to the upgrade command.
    • Control plane recovers runs that were in flight when a runner drops and reconnects, instead of stranding them.
    • Runner version-upgrade notice now scopes its count to the current page rather than reading as a single runner across a multi-runner list.

    3 details in Everything

26. v0.24.0 Jul 12, 2026 · issue 036

    emisar v0.24.0: hardened infrastructure, release integrity attestations, dedicated pack registry, and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server listing.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.24.0 https://github.com/AndrewDryga/emisar.git
    # already have the repo? check out this version:
    $ git checkout v0.24.0

    • Pack registry now serves from its own hostname at registry.emisar.dev/v1/catalog.json, with anonymous access narrowed to exact object reads.
    • Hosted MCP server (dev.emisar/emisar) is now published to the official MCP registry.
    • Portal releases now publish the exact image exercised by CI, pinned by digest, with provenanceprovenanceEvidence recording where a software artifact came from and how it was built, including its source and build process. It helps a consumer check that the artifact matches a trusted build. and SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. attestations; fixable HIGH/CRITICAL vulnerabilities block publication.
    • Binary releases are now immutable and reproducible, with signed and verified release tags.
    • Public status page available at status.emisar.dev, with external availability monitoring and on-call escalation.

    +1 more show less

    • Hosted control plane moves to hardened infrastructure with zero-downtime rolling deploys, a private-network database with TLS pinned to a private CA, and no public compute surface.

    6 details in Everything