https://github.com/hbx12/aura-work
https://github.com/hbx12/aura-work
ai-agent arabic automation desktop-app llm local-first mcp open-source react rtl rust security self-hosted tauri typescript
Last synced: 20 days ago
JSON representation
- Host: GitHub
- URL: https://github.com/hbx12/aura-work
- Owner: hbx12
- License: apache-2.0
- Created: 2026-05-31T22:17:51.000Z (about 1 month ago)
- Default Branch: main
- Last Pushed: 2026-06-07T02:33:38.000Z (26 days ago)
- Last Synced: 2026-06-07T12:08:53.084Z (25 days ago)
- Topics: ai-agent, arabic, automation, desktop-app, llm, local-first, mcp, open-source, react, rtl, rust, security, self-hosted, tauri, typescript
- Language: TypeScript
- Homepage:
- Size: 3.57 MB
- Stars: 6
- Watchers: 0
- Forks: 2
- Open Issues: 28
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
- Security: SECURITY.md
- Support: SUPPORT.md
- Governance: GOVERNANCE.md
- Roadmap: ROADMAP.md
- Notice: NOTICE
- Maintainers: MAINTAINERS
Awesome Lists containing this project
README
# Aura Work
[](LICENSE)
[](https://github.com/hbx12/aura-work/actions/workflows/ci.yml)
**Current status: `0.1.0-alpha.1`** — under active security hardening.
Open-source, multi-provider desktop AI agent platform — local-first, permission-gated, self-hostable.

> **Alpha warning:** Do not use Aura Work for sensitive workspaces or production automation. VM isolation, signed installers, and several experimental features are incomplete or disabled by default.
## Download
Official desktop installers are published on the [GitHub Releases](https://github.com/hbx12/aura-work/releases/latest) page after an approved release. Installed copies receive optional signed update prompts when a newer version is available.
## Maintainer and contributions
Aura Work is maintained by **Habib (`hbx12`)**. Suggestions are reviewed actively, and useful ideas are turned into tracked implementation work with focused issues so contributors can pick up clear tasks without duplicating effort.
- [Contributors wanted: help build Aura Work alpha](https://github.com/hbx12/aura-work/issues/16)
- [Alpha release readiness epic](https://github.com/hbx12/aura-work/issues/30)
- [Computer Use accessibility-tree epic](https://github.com/hbx12/aura-work/issues/22)
- [Beginner-friendly issues](https://github.com/hbx12/aura-work/issues?q=is%3Aissue+is%3Aopen+label%3A%22good+first+issue%22)
- [Tasks needing help](https://github.com/hbx12/aura-work/issues?q=is%3Aissue+is%3Aopen+label%3A%22help+wanted%22)
- [Contribution guide](./CONTRIBUTING.md)
Please comment on an issue before starting work so effort is not duplicated.
## Alpha limitations
| Area | Status |
|------|--------|
| **Shell execution** | Host process fallback is **disabled by default**. WSL2 or a verified isolated backend is required. Dev override: `AURA_ALLOW_UNSAFE_HOST_EXECUTION=1` (development only). |
| **Computer use** | **Disabled by default.** Enable only for local dev: `AURA_ENABLE_EXPERIMENTAL_COMPUTER_USE=1`. |
| **VM image** | Bundled artifact may be a **development placeholder** until a signed production image ships. |
| **Signed releases** | Release pipeline requires minisign, SBOM, checksums, and installers — not claimed ready until published. |
| **Sidecar auth** | Local services require per-session internal Bearer tokens (localhost is not treated as sufficient). |
## Features (alpha)
- Multi-provider AI (OpenAI/ChatGPT Codex, Anthropic, Gemini, DeepSeek, Ollama) with routing
- Encrypted local vault — keys stored with OS-backed secure storage when available
- Task agent with file tools, Git, VM shell, browser, plugins/MCP
- 20 languages with RTL (Arabic, Persian)
- Integrated docs at [hbx12.github.io/aura-work](https://hbx12.github.io/aura-work) (when deployed)
## Quick start (development)
```powershell
npm install
npm run build:sidecars
npm start
```
Sidecars start automatically from the Tauri app with per-session internal auth tokens.
Manual sidecar development requires `AURA_SIDECAR_AUTH_TOKEN` (32+ chars) in the environment. See [docs/development.md](./docs/development.md).
## Build from source
```powershell
npm run build:sidecars
npm run stage:bundle
npm run build
cd apps\desktop
npm run tauri build
```
Installers are produced under `apps/desktop/src-tauri/target/release/bundle/` when the build succeeds.
## Privacy & security
- **No telemetry** by default
- API keys stored encrypted locally; **never** synced to Aura Cloud
- High-impact actions require explicit approval
- See [SECURITY.md](./SECURITY.md) for vulnerability reporting
## Documentation
- [docs/README.md](./docs/README.md) — feature index
- [docs/releases.md](./docs/releases.md) — approved GitHub Releases and optional signed updates
- [docs/github-publish.md](./docs/github-publish.md) — what goes on GitHub
- [CONTRIBUTING.md](./CONTRIBUTING.md) — development and translations
- [CHANGELOG.md](./CHANGELOG.md) — release history
- [ROADMAP.md](./ROADMAP.md) — direction after alpha
## Community
- [GitHub Discussions](https://github.com/hbx12/aura-work/discussions)
- [Code of Conduct](./CODE_OF_CONDUCT.md)
## License
Apache-2.0 — see [LICENSE](./LICENSE), [NOTICE](./NOTICE), and [THIRD-PARTY-NOTICES](./THIRD-PARTY-NOTICES).
## Clean-machine installer smoke test
For installed Windows build validation, see [docs/clean-machine-installer-smoke.md](./docs/clean-machine-installer-smoke.md).