Skip to content

refactor: remove the HTTP serving layer — local engine + CLI only #78

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
escapeboy merged 2 commits into from
Jul 18, 2026
Merged

refactor: remove the HTTP serving layer — local engine + CLI only #78

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
5df02b7
refactor(cli): remove HTTP serving layer — local engine + CLI only
escapeboy Jul 18, 2026
e41c4e3
refactor(cli): remove the now-dead --coordinator flags entirely
escapeboy Jul 18, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 0 additions & 9 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -53,12 +53,6 @@ jobs:
- name: Run tests with http feature
run: cargo test -p boruna-vm --features http

- name: Build with serve feature
run: cargo build -p boruna-cli --features serve

- name: Run tests with serve feature
run: cargo test -p boruna-cli --features serve

- name: Validate example workflows
run: |
for dir in examples/workflows/*/; do
Expand Down Expand Up @@ -160,9 +154,6 @@ jobs:
- name: Run Clippy with http feature
run: cargo clippy --workspace --features boruna-vm/http --all-targets -- -D warnings

- name: Run Clippy with serve feature
run: cargo clippy -p boruna-cli --features serve --all-targets -- -D warnings

fmt:
name: Format
runs-on: self-hosted
Expand Down
6 changes: 6 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,12 @@ Versioning follows [Semantic Versioning](https://semver.org/).

## [Unreleased]

### Removed

- Removed the HTTP serving layer — coordinator, distributed workers, workflow
dashboard, evidence web viewer, and approval console. Boruna is now
local-engine + CLI only.

## [2.0.0] — 2026-07-17

First major release. A security-hardening + language-completeness sprint that
Expand Down
178 changes: 0 additions & 178 deletions Cargo.lock
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

8 changes: 2 additions & 6 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,6 @@ This makes Boruna suited for teams building AI workflows that touch regulated da
- **Capability enforcement** — every side effect (LLM calls, HTTP, database, filesystem) is declared and policy-gated at the VM level
- **Evidence bundles** — hash-chained tamper-evident logs, written automatically with `--record`. Optional **AES-256-GCM envelope encryption** for compliance-sensitive deployments. `evidence inspect` shows step output content for plaintext bundles.
- **Deterministic replay** — re-execute any recorded workflow with identical outputs, verified by the VM
- **Distributed execution** — coord+workers HTTP cluster with active-active **HA**, worker URL failover, capability-tagged placement, and optional **mTLS** with per-worker client certs
- **Approval gates** — pause workflow execution for human review or external triggers before continuing
- **Diagnostics, auto-repair, and migration** — `boruna lang check`, `boruna lang repair`, `boruna migrate` for `.ax` files and bundle/workflow upgrades
- **`boruna new`** — interactive scaffold for new workflows from templates
Expand Down Expand Up @@ -129,7 +128,7 @@ Boruna is a Rust workspace with 10 production crates plus a `benches/` member:
| `boruna-tooling` | Diagnostics, repair, trace-to-tests, templates |
| `boruna-pkg` | Package registry, resolver, lockfiles |

1175+ tests across 11 workspace members. `cargo test --workspace --features boruna-cli/serve` — all pass.
1175+ tests across 11 workspace members. `cargo test --workspace` — all pass.

## Documentation

Expand All @@ -140,9 +139,6 @@ Boruna is a Rust workspace with 10 production crates plus a `benches/` member:
| [Concepts: Capabilities](docs/concepts/capabilities.md) | Side effect declaration and policy gating |
| [Concepts: Evidence Bundles](docs/concepts/evidence-bundles.md) | Hash-chained audit logs and replay |
| [Guide: First Workflow](docs/guides/first-workflow.md) | Build a workflow from scratch |
| [Guide: Coord HA](docs/guides/coord-ha.md) | Multi-coord deployment topologies |
| [Guide: Coord mTLS](docs/guides/coord-mtls.md) | X.509 client certs + cert generation |
| [Guide: Worker Capability Tagging](docs/guides/worker-capability-tagging.md) | Heterogeneous fleet placement |
| [Guide: Migration](docs/guides/migration.md) | Upgrade legacy bundles and workflow files |
| [Spec: `.ax` Language 1.0](docs/spec/ax-language-1.0.md) | Formal language specification |
| [Spec: Workflow DAG 1.0](docs/spec/workflow-dag-1.0.md) | `workflow.json` schema |
Expand All @@ -158,7 +154,7 @@ Boruna is a Rust workspace with 10 production crates plus a `benches/` member:

## Status

Boruna is at **v2.0.0** — the first major release. 2.0 is a security-hardening and language-completeness milestone that remediates a whole-codebase research audit: SSRF/XSS fixes, coordinator claim-ownership and approval-gate enforcement, tamper-evident evidence bundles (external anchor + ed25519 signing), and real language semantics (enum construction with per-variant match tags, higher-order calls, `for` loops, arity checking, and warn-only type-consistency diagnostics). It ships **deliberate breaking changes** — integer overflow is now a runtime error, and several coordinator/framework defaults fail closed — so review the 2.0.0 entry in [`CHANGELOG.md`](CHANGELOG.md), each of which has a documented override or migration. The core execution engine, distributed-execution stack, evidence bundles, and four formal versioned specifications (`.ax` language, bytecode, workflow DAG, evidence bundle) remain feature-complete; the 1.x LTS line continues per [`docs/lts.md`](docs/lts.md).
Boruna is at **v2.0.0** — the first major release. 2.0 is a security-hardening and language-completeness milestone that remediates a whole-codebase research audit: SSRF/XSS fixes, coordinator claim-ownership and approval-gate enforcement, tamper-evident evidence bundles (external anchor + ed25519 signing), and real language semantics (enum construction with per-variant match tags, higher-order calls, `for` loops, arity checking, and warn-only type-consistency diagnostics). It ships **deliberate breaking changes** — integer overflow is now a runtime error, and several coordinator/framework defaults fail closed — so review the 2.0.0 entry in [`CHANGELOG.md`](CHANGELOG.md), each of which has a documented override or migration. The core execution engine, evidence bundles, and four formal versioned specifications (`.ax` language, bytecode, workflow DAG, evidence bundle) remain feature-complete; the 1.x LTS line continues per [`docs/lts.md`](docs/lts.md).

The project is suited for evaluation, internal tooling, and audit-sensitive AI pipelines. **Operator action**: validate the [`docs/PERFORMANCE.md`](docs/PERFORMANCE.md) budget against your workload, and review [`docs/limitations.md`](docs/limitations.md) for known constraints. External security audit booking is the Q4 2026 commitment in `lts.md`.

Expand Down
Loading
Loading