v0.2.0-alpha.22

Install

Download the archive for your platform below. Each one contains all three
binaries — buildmax, buildmax-server, buildmax-worker — plus
config-examples/, LICENSE, and NOTICE-THIRD-PARTY. Verify it against
checksums.txt first.

With a Go toolchain, for the CLI alone:

go install github.com/icloudbb/buildmax/cmd/buildmax@v0.2.0-alpha.22

As a container, for linux/amd64 and linux/arm64:

docker pull ghcr.io/icloudbb/buildmax:0.2.0-alpha.22

Copy config-examples/settings.example.yaml to ~/.buildmax/settings.yaml,
configure at least one model, then run buildmax for the TUI or
buildmax -p "your prompt" for a single non-interactive turn. Running the
server and Portal additionally needs MySQL and object storage; see the README.

The desktop app is not published here. It needs code signing and notarization
to launch on macOS, so build it locally with ./make build.

This is an alpha: server authentication is bootstrap-level and the bash sandbox
is off by default. Read SECURITY.md
before exposing the Portal.

Added

• The Kubernetes reference deployment reads the OIDC client secret from
  buildmax-secret and trusts extra CA certificates from an optional
  buildmax-trust ConfigMap, for an IdP behind a private CA
  (authentication).

Fixed

• Okta single sign-on no longer refuses every first sign-in: when the ID Token
  carries an email without email_verified, as Okta's org authorization server
  sends it, BuildMax now reads the flag from UserInfo. A refused SSO sign-in's
  specific reason is now in the server log.

---

Earlier releases are in
CHANGELOG.md.