v0.6.0

What's Changed

• Discover the platform API without the UI service (#1068) by @jw3329 in #1099
• Log a rejected webhook push instead of failing silently (#1066) by @jw3329 in #1098
• skill check: explain a remote server's red instead of implying a defect (#1093) by @jw3329 in #1101
• cluster up: preserve what cluster comms configured (#1067) by @jw3329 in #1100
• cluster/local deploy: add --repo to bind an agent at creation (#1064) by @jw3329 in #1102
• Publish a linux/arm64 CLI binary (#1065) by @jw3329 in #1103
• ADR-0086 (Draft): bundles declare connectors, the platform hosts them (#1063) by @jw3329 in #1104
• chart: plumb api.githubToken so private-repo git-flow is reachable (#1058) by @jw3329 in #1109
• Bundle format: declare connectors in connectors.yaml (ADR-0086, #1063) by @jw3329 in #1111
• Derive a connector's Kubernetes objects from its declaration (#1063) by @jw3329 in #1112
• API renders connector manifests, and never applies them (#1063) by @jw3329 in #1113
• Re-land the connectors endpoint and CLI apply plumbing (#1063) by @jw3329 in #1115
• Readability pass on README.md by @athusoo in #1013
• Retry the third-party acquisition steps that red main on a blip by @TheConnMan in #1108
• Readability pass on docs/operations.md by @athusoo in #1121
• ADR 0088: Per user delegated OAuth for MCP by @TheConnMan in #1144
• Restrict authenticated git-flow clones to the registered repository by @TheConnMan in #1142
• Tell the clicker when a fall-forward resolve is refused by @yichenzhang-curietech in #1148
• Refuse an unknown key in a --routes-from file instead of stripping it by @yichenzhang-curietech in #1147
• Scope connector object names to the agent, not the release (#1116) by @jw3329 in #1117
• Wire connectors into cluster deploy (#1063) by @jw3329 in #1119
• ADR-0087 (Draft): the API renders connector objects, the CLI applies them by @jw3329 in #1120
• Reject a server declared in both connectors.yaml and MCP config (#1118) by @jw3329 in #1149
• BootEnv: declare the connector scope the runner derives URLs from (ACI 0.2.8, #1118) by @jw3329 in #1150
• Runner mounts the connectors a bundle declared (#1118) by @jw3329 in #1151
• Worker tells the sandbox where its connectors live (#1118) by @jw3329 in #1152
• Assert Rail 1 actually enforces, and give CI a CNI that can (#1153) by @jw3329 in #1155
• Substitute ${CURIE_*} placeholders so a connector gets its host allowlist (#1156) by @jw3329 in #1158
• Read the approval card from its thread, and never stamp one we could not read by @yichenzhang-curietech in #1157
• Record the always-on note dialog as the decision it is by @yichenzhang-curietech in #1154
• Readability pass on remaining docs by @athusoo in #1017
• connectors.yaml: unhosted_url, for tiers that cannot host (#1160) by @jw3329 in #1161
• Runner mounts a hosted connector's unhosted_url where it cannot host (#1160) by @jw3329 in #1162
• Settle the approval card when a resolution arrives through the API by @yichenzhang-curietech in #1164
• cluster/local deploy: --agent, so one repo can serve two agents (#1166) by @jw3329 in #1167
• ADR-0089 (Draft): bundles declare their deploy targets by @jw3329 in #1168
• plugin-format: deploy.yaml, the declared deploy targets (ADR-0089) by @jw3329 in #1169
• Scrub real identifiers from a public repo, and gate against more by @jw3329 in #1175
• deploy --target: execute a declared routing target (ADR-0089) by @jw3329 in #1178
• Mask real agent names in the public repo by @jw3329 in #1179
• Update boto3-stubs[s3] requirement from >=1.43.55 to >=1.43.57 by @dependabot[bot] in #1174
• Bump the github-actions group with 2 updates by @dependabot[bot] in #1172
• Bump the pnpm group in /apps/ui with 12 updates by @dependabot[bot] in #1171
• Bump the cargo group across 1 directory with 2 updates by @dependabot[bot] in #1170
• Add "see Releases" pointer to README by @athusoo in #1006
• Add license and release badges to README by @athusoo in #1005
• Readability pass on CONTRIBUTING.md by @athusoo in #1014
• docs: content-quality pass on QUICKSTART.md, fix stale README scaffold output by @athusoo in #1177
• Readability pass on ARCHITECTURE.md by @athusoo in #1015
• curie init: scaffold connectors.yaml and deploy.yaml by @jw3329 in #1180
• Tell the operator when the platform is older than the CLI by @jw3329 in #1181
• ADR-0090 (Draft): a reconciler applies connectors, so agent repos need no CLI by @jw3329 in #1185
• connectors.yaml: reference an existing Secret instead of minting one (#1163) by @jw3329 in #1186
• Connector reconcile: the plan, before anything applies it (ADR-0090) by @jw3329 in #1187
• ADR-0091 (Draft): git-flow resolves deploy targets, so one repo serves many agents by @jw3329 in #1188
• Carry out a connector reconcile plan by @jw3329 in #1189
• Stop the reconciler rewriting every object on every pass by @jw3329 in #1190
• Give the connector reconciler a real cluster client and its RBAC by @jw3329 in #1191
• Parse the connector scope in BootEnv.from_env by @TheConnMan in #1204
• Read the approval record before claiming the card ref by @TheConnMan in #1209
• Reserve the platform MCP server names for Curie by @TheConnMan in #1205
• Reconcile one agent's connectors without eating its credential by @jw3329 in #1192
• Run the connector reconciler in the worker by @jw3329 in #1193
• Git-flow routes a push through deploy.yaml, so one repo serves many agents by @jw3329 in #1194
• Bind an unbound agent's repo on deploy instead of advising a recreate by @TheConnMan in #1222
• Prune undeclared connector objects on the unprovisioned skip by @TheConnMan in #1219
• Make the GitHub clone token a private durable cluster input by @TheConnMan in #1146
• Deploy a scaffolded bundle instead of ignoring its pushes by @TheConnMan in #1220
• Annotate swap-candidate licenses in the architecture vision by @TheConnMan in #1229
• Surface the diagnosis, not the usage block, as a failed step reason by @yichenzhang-curietech in #1231
• Give the platform its own GitHub identity (ADR-0092) by @jw3329 in #1223
• Refuse --local-model (when required ollama asset is missing) rather than downloading 11.4 GB implicitly (ADR 0093) by @yichenzhang-curietech in #1235
• Stop the App ID becoming a float, and let the key stay out of helm by @jw3329 in #1236
• Clear the two advisories failing every PR's audit by @jw3329 in #1237
• Use an example App ID in the tests, not the real one by @jw3329 in #1241
• Say plainly that Curie's secrets are only as safe as the cluster by @jw3329 in #1242
• Mask the downstream repo from the public corpus, and gate it by @jw3329 in #1248
• Give the k3s encryption steps in an order that works by @jw3329 in #1244
• Let the API be served over TLS by @jw3329 in #1245
• Deploy from a poll, for clusters that cannot receive a webhook by @jw3329 in #1246
• ADR-0094 (Draft): a bundle carries its own connector credentials, sealed by @jw3329 in #1247
• Mask the agent names ADR-0094 reintroduced by @jw3329 in #1249
• Wire the commit poller to the bundle store so the API boots with it enabled by @TheConnMan in #1272
• Run the local-model preflight before the --replace teardown by @TheConnMan in #1271
• Match the usage-header prefix over bytes so invalid stderr cannot panic by @TheConnMan in #1266
• Restore first-run documentation to the current CLI contract by @TheConnMan in #1131
• Replace MinIO with RustFS by @TheConnMan in #1274
• Prepare v0.6.0 release by @TheConnMan in #1277
• Onboard a repository in one command by @jw3329 in #1279
• Declare ARM Linux release binary by @TheConnMan in #1280

Full Changelog: v0.5.0...v0.6.0