← Changelog
v0.19.49LatestSecurity· September 15, 2026

Your commits stop carrying your machine

  • Aura keeps the team’s record in a folder it commits on purpose — what everyone intended, who is on the project, the pages you write. Eighteen files in that folder were not the team’s. They held state only your own computer could know, and every one of them moved on every commit, so half of the diff a teammate opened was your machine talking to itself.
  • The worst of them was a private key. The file that signs your activity to your team was being committed alongside everything else, in every Aura repository, because the generated ignore list had never named the folder it lives in. It is ignored now, and a repository already carrying it lets go of it on the next commit. A key that is already in a shared history stays there — rotate it.
  • A rule was never going to be enough. Telling git to ignore a file does nothing to one git already has, and the repositories still churning are exactly the ones set up before the rule existed. Aura now looks at what git is actually tracking and lets go of what does not belong, inside the commit you are already making, and tells you what it dropped. Nothing is removed from your disk.
  • The team’s half is untouched. The intent log, the roster, the repo identity, pages, taste, goals and per-developer usage stay tracked and stay shared — and two tests now hold both halves of that line apart, so neither list can drift into the other.
  • Your roster stops reshuffling itself. The team file recorded when each person was last seen, so every commit rewrote it, and it was ordered most-recently-seen first — two teammates trading commits reordered the entire list. It is sorted by name now, and it only gets written when something real changes.
Get this release

Installed already? This lands automatically by silent auto-update.

Everything in this release
Fix

Fixes & improvements

A private signing key, a sync cursor, work queues and a 17 MB regenerated index are no longer committed into your repository.
Aura untracks per-machine files a repository is already carrying, inside your next commit, and leaves every one of them on disk.
The team file stops being rewritten on every commit, and the roster stops reordering itself when two people trade commits.
In a worktree, the agent bookkeeping files are symlinks — committing one published one machine’s absolute path. They are ignored now.
The model catalog test no longer breaks when a new model ships.