worklyn / zukapublic

Agent-first git hosting. One Rust binary: git over HTTP and SSH, a REST API, MCP, CI, and multi-tenant isolation.

Get a copy: git clone https://zuka.worklyn.com/worklyn/zuka.git

ZGive the build number somewhere to grow, and serve the viewer through the control planezuka · 3 hr ago8d539ae6

The version was 0.1.0 on every build, so 'is this host current?' had no answer
a person could read. A run now carries its position in the repository's
history, the runner puts it in the environment, and build.rs makes it the
patch component. Major and minor stay deliberate in Cargo.toml.

The control plane proxies the browser surface to tenants, and does it without
vouching for anyone: an assertion is the control plane stating 'this request
is that account', so signing one for an anonymous visitor would hand them
that account's private repositories. It also stops relaying an assertion
header a client supplied, which previously reached the tenant alongside ours.

What changed10 files

Changedbuild.rs
Changedsrc/api/runs.rs
Changedsrc/brand.rs
Changedsrc/ci/run.rs
Changedsrc/ci/runner.rs
Changedsrc/control/mod.rs
Changedsrc/control/proxy.rs
Changedsrc/http/response.rs
Changedsrc/main.rs
Changedsrc/web/mod.rs