Infralink v0.6.28

Infralink v0.6.28

This patch lets the canonical infralink interface inspect its own host's
bounded reconcile evidence without a redundant SSH round trip. Remote host
inspection remains on the declared SSH transport.

Infralink v0.6.27

Infralink v0.6.27

This patch projects the canonical controller_managed observation attribute
for controller-managed hosts. It replaces the retired V2 reconcile flag in
public observation plans without introducing a second deployment selector.

Infralink v0.6.26

Infralink v0.6.26

This patch restores the canonical public doctor target syntax after the typed
Agent Surface projection: infralink doctor host <ref>. The generated CLI
help again identifies the target kind and reference as positional arguments,
while MCP retains its typed request fields.

Infralink v0.6.25

Infralink v0.6.25

This release publishes the typed public operator surface merged in #270. The
single Infralink operation registry now projects both the YAML-first CLI and
native MCP, with generated parser errors and HATEOAS actions sharing the same
contracts.

The published runtime now requires agent-surface[mcp]>=0.2.3,<0.3. This
includes canonical parse envelopes and redaction of unknown option values.

Infralink v0.6.24

Infralink v0.6.24

Host bootstrap now declares the GHCR username and token as typed BWS secret
references. The bootstrap preflight requires those references to belong to the
target host's declared bws_projects list and validates that the supplied
machine token can read them before any remote mutation.

This release supplies the typed contract consumed by the paired baseline
executor change in infra-management. The executor resolves the declared
references only transiently to authenticate Docker before the first private
controller image pull.

Infralink v0.6.23

Infralink v0.6.23

This release expands the canonical Agent Surface projection for host, edge,
analysis, and documentation reads while retaining YAML as the CLI default.

infralink host status now reads the declared target's existing reconcile
evidence portably on mawk-based hosts, caps that runtime-evidence read, and
does not invent a next-run timestamp when systemd cannot provide one. CLI and
MCP continue to project the same canonical operation envelope.

Infralink v0.6.22

Infralink v0.6.22

This patch adopts agent-surface>=0.1.7 for installed public operation
packages. Their build-generated manifests are now the single import-free source
for root help and native MCP discovery. An explicit invocation imports and
verifies the selected app against that same manifest before it runs.

Discovery is scoped to one CLI or MCP enumeration, so an upgraded installed
package is visible to the next request without retaining stale schemas in a
long-lived MCP server. YAML remains the CLI default and MCP retains the
canonical infralink.cli/v1 structured envelope.

Infralink v0.6.21

Infralink v0.6.21

This release publishes the non-runnable infralink.fleet-prometheus-evidence/v1
artifact contract. It provides strict semantic validation, a portable JSON
Schema, deterministic signed bytes, bounded freshness rules, and Ed25519
verification support for the private controller producer and later read-only
fleet validator. It adds no Prometheus client, credentials, CLI command, or
MCP operation.

Infralink v0.6.20

Infralink v0.6.20

This release adds typed, profile-declared connection contracts. Service
instances bind those contracts to component edges, allowing generic renderers
and observation consumers to use validated endpoint targets without inventing
an alternate topology representation.

Infralink v0.6.19

Infralink v0.6.19

This patch correctly identifies a firewall ingress listener by protocol, bind
address, and port. Multiple services may therefore declare the same port on
distinct addresses, while duplicate ownership of the same address remains
invalid.