v1.2.0

AIHelper v1.2.0

AIHelper v1.2.0 adds a managed Windows MCP service, bounded parallel MCP jobs,
and a signed Windows self-update path. Release assets now carry canonical
Ed25519 manifests and signatures so installed updater code can verify release
identity and managed files before activation.

Highlights

• Manage a per-user HTTP MCP server through ah mcp service install, start,
  stop, restart, uninstall, and status without elevation or stored
  passwords.
• Run typed MCP commands through bounded parallel execution and the ordinary
  ah.job.start, ah.job.status, ah.job.result, and ah.job.cancel tools.
• Check, install, recover, and roll back signed Windows x64 updates through
  ah upgrade while preserving managed MCP state.
• Verify every release archive through a canonical manifest, detached Ed25519
  signature, and exact managed-file inventory.

What's Changed

✨ New

• Local Streamable HTTP MCP serving exposes exact readiness identity and an
  identity-aware control shutdown endpoint while sharing process-wide execution
  capacity and retained jobs across sessions.
• The managed MCP lifecycle uses a per-user Task Scheduler 2.0 registration,
  exact process identity, deterministic status snapshots, and a bounded restart
  policy.
• Windows x64 users can run ah upgrade --check, ah upgrade,
  ah upgrade --version VERSION, and ah upgrade --rollback. Update
  transactions verify candidates offline, recover after interruption, keep one
  verified permanent backup, and restore a previously running managed MCP.
• The release workflow publishes archive, manifest, and signature triplets for
  Linux x64, Windows x64, and macOS ARM64. The Windows archive includes the
  isolated ah-update-helper.exe helper.

🚀 Improvements

• Standalone version output avoids runtime startup and invocation logging.
• Windows process timeouts use Job Objects to terminate descendant processes
  without scanning unrelated system threads. MCP logs distinguish queue wait
  from execution time, and git status reduces child-process startup overhead.
• Packaged CLI and MCP smoke checks run on every release platform before assets
  are accepted for publication.

🐛 Fixes

• MCP shutdown, job cancellation, managed-service recovery, and updater handoff
  reject ambiguous process identity and preserve retryable durable state on
  bounded failures.
• Activation, rollback, and recovery keep operation-specific diagnostics and
  bound helper subprocess time, output, and descendant lifetime.

🔒 Security

• The updater verifies canonical release manifests, detached Ed25519 signatures,
  archive identity, and signed managed-file hashes against its embedded
  production public key before activation. The private signing seed remains in
  the protected GitHub release-signing environment.
• Release signing rejects unsafe archive entry types and unsupported compression,
  bounds state reads during I/O, and uses immutable commit SHAs for external
  GitHub Actions.

⚠️ Compatibility

• Built-in self-update is supported on Windows x64. v1.2.0 is the first
  release containing the updater, so users on v1.1.0 must install this release
  manually; ah upgrade can then install later compatible releases.
• Native Windows process control requires Windows 10 or Windows Server 2016 and
  newer. Other supported platforms continue to use manual archive installation.

Downloads

Platform	Archive
Windows x64	ah-windows-x64.zip
Linux x64	ah-linux-x64.zip
macOS ARM64	ah-macos-arm64.zip

Keep each extracted ah executable with its executable-relative plugins/
directory. The Windows archive also requires ah-update-helper.exe beside
ah.exe for self-update. Each archive is published with matching
.manifest.json and .manifest.sig assets.

Full Changelog

v1.1.0...v1.2.0