Current status: 0.1.0-alpha.11 — under active security hardening.
Open-source, multi-provider desktop AI agent platform — local-first, permission-gated, self-hostable.
Want to build an extension for Aura Work? Start here:
- Aura Marketplace Registry guide — the main public place for Skills, MCP connectors, Aura Plugins, supported languages, required files, and the GitHub approval flow.
- Marketplace submission guide — full submission format, validation rules, and maintainer review checklist.
Community extensions are submitted through GitHub pull requests and are published only after maintainer approval.
Alpha warning: Do not use Aura Work for sensitive workspaces or production automation. VM isolation, signed installers, and several experimental features are incomplete or disabled by default.
Official desktop installers are published on the GitHub Releases page after an approved release. Installed copies receive optional signed update prompts when a newer version is available.
Aura Work is maintained by Habib (hbx12). Suggestions are reviewed actively, and useful ideas are turned into tracked implementation work with focused issues so contributors can pick up clear tasks without duplicating effort.
- Contributors wanted: help build Aura Work alpha
- Alpha release readiness epic
- Computer Use accessibility-tree epic
- Beginner-friendly issues
- Tasks needing help
- Contribution guide
- Marketplace Registry guide
Please comment on an issue before starting work so effort is not duplicated.
| Area | Status |
|---|---|
| Shell execution | Host process fallback is disabled by default. WSL2 or a verified isolated backend is required. Dev override: AURA_ALLOW_UNSAFE_HOST_EXECUTION=1 (development only). |
| Computer use | Disabled by default. Enable only for local dev: AURA_ENABLE_EXPERIMENTAL_COMPUTER_USE=1. |
| VM image | Bundled artifact may be a development placeholder until a signed production image ships. |
| Signed releases | Release pipeline requires minisign, SBOM, checksums, and installers — not claimed ready until published. |
| Sidecar auth | Local services require per-session internal Bearer tokens (localhost is not treated as sufficient). |
- Multi-provider AI (OpenAI/ChatGPT Codex, Anthropic, Gemini, DeepSeek, Ollama) with routing
- Encrypted local vault — keys stored with OS-backed secure storage when available
- Task agent with file tools, Git, VM shell, browser, plugins/MCP
- Universal Workspace routing for documents, spreadsheets, presentations, PDF, research, data, design, automation, database, and browser workflows
- Official HBX Marketplace skills with localized Arabic/English metadata and real SVG assets
- 20 languages with RTL (Arabic, Persian)
- Integrated docs at hbx12.github.io/aura-work (when deployed)
npm install
npm run build:sidecars
npm startSidecars start automatically from the Tauri app with per-session internal auth tokens.
Manual sidecar development requires AURA_SIDECAR_AUTH_TOKEN (32+ chars) in the environment. See docs/development.md.
npm run build:sidecars
npm run stage:bundle
npm run build
cd apps\desktop
npm run tauri buildInstallers are produced under apps/desktop/src-tauri/target/release/bundle/ when the build succeeds.
- No telemetry by default
- API keys stored encrypted locally; never synced to Aura Cloud
- High-impact actions require explicit approval
- See SECURITY.md for vulnerability reporting
- docs/README.md — feature index
- docs/features/universal-workspace.md — Universal Workspace modes and artifact-first behavior
- docs/features/artifact-tools.md — artifact creation, verification, and current native export limits
- docs/features/marketplace-localization.md — localized Marketplace entries and official HBX skills
- registry/README.md — Marketplace extension guide
- docs/releases.md — approved GitHub Releases and optional signed updates
- docs/github-publish.md — what goes on GitHub
- CONTRIBUTING.md — development and translations
- CHANGELOG.md — release history
- ROADMAP.md — direction after alpha
See LICENSE, NOTICE, and THIRD-PARTY-NOTICES. Aura Work is licensed under the terms in LICENSE, including NOVIR Studio's additional branding and redistribution restriction.
For installed Windows build validation, see docs/clean-machine-installer-smoke.md.