Skip to content

v1.0.0

Choose a tag to compare

@niels-emmer niels-emmer released this 12 Aug 09:20
· 85 commits to main since this release
4930b56

MyACE's first stable release. Everything below has shipped and been verified against a real deployment — including two production OAuth bugs found and fixed by actually completing a live GitHub login end-to-end, not just against mocked tests.

Highlights

Auth hardening & admin controls

  • Email/password reset via SMTP, configurable from .env or the System Settings UI (with a "Send Test Email" button).
  • Google/GitHub/OIDC OAuth: an admin UI for entering provider credentials (Client ID/Secret, redirect URL, a connectivity test) instead of .env-only setup.
  • System Settings: per-adapter enable/disable, enforced both in the UI and at the compile endpoint.
  • Admin user management: disable, re-enable, or remove other users' accounts.
  • Admin-editable secrets (SMTP password, OAuth client secrets) are encrypted at rest (see ADR-0006).

UX

  • Dashboard Quick Start steps are now real, working links.
  • Responsive layout — a slide-out drawer replaces the sidebar below ~1024px, not just desktop.
  • Refreshed login page and README screenshots.

Fixes found by dogfooding this release

  • OAuth redirect_uri was silently generated as http:// instead of https:// behind a reverse proxy — every real GitHub/Google/OIDC login was rejected by the provider. Fixed at the nginx layer (X-Forwarded-Proto was being overwritten, not forwarded).
  • The PKCE code_verifier a login attempt stashed in the session was never read back at the callback step — every real OAuth login 500'd at the token-exchange step. Fixed, with a regression test that reproduces the exact failure against the old code.

Docs & repo hygiene

  • CLAUDE.md now imports AGENTS.md (Claude Code's @path memory-import syntax) instead of duplicating it — every AI coding agent working on this repo now reads the same single source of truth.
  • Consolidated architecture etc. content into AGENTS.md, moved ADAPTERS_RESEARCH.md into docs/, dropped a stale, fully-shipped planning doc.
  • Fixed the CLI binary install instructions in the README, which pointed at the wrong release channel.
  • Documented (not yet automated) the lack of a Postgres backup mechanism — see docs/plans/postgres-backups-plan.md.

Downloads

Standalone CLI binaries for Linux, macOS (Intel + Apple Silicon), and Windows are attached below — no Python required. See the README for install instructions, or use pip install "myace-cli[serve]" for the venv path.

Full self-hosting

MyACE is designed to be forked and self-hosted. See the README's "Fork it and make it yours" section for the checklist (secret key, admin bootstrap, SSO, SMTP).