v1.10.0

SPK Ocular 1.10.0

• Connect local agents through the in-process MCP server, with explicit grants and reviewed operations. Codex and Claude Code setup is available on request, with manual configuration for other clients. Agent access replaces the previous local protocol with MCP Streamable HTTP; existing clients must be reconfigured.
• Inspect native Argo CD and Flux views, application/controller state and resource links. Edit and scale reviews show available GitOps ownership context.
• Investigate workloads, Service/Ingress network paths and Helm releases through bounded, explicit diagnostic reads with visible gaps and source identity.
• Add label columns and saved resource-table views. Inspect cert-manager Certificate state and renewal evidence without reading Secret contents.
• Read explicitly selected Prometheus metrics history and existing VPA recommendations; review contextual workload configuration and reliability checks.
• Inspect existing namespaced Trivy configuration/RBAC and policy reports. Cluster-wide Trivy/policy reports and a selected Gatekeeper constraint audit require separate opt-in; missing evidence remains unknown.
• Import KRR reports into backend-owned temporary storage, or review a temporary Kubernetes Job before running KRR. Inspect a selected Node's namespace resource declarations without presenting them as measured spare capacity.
• Import bounded offline Polaris JSON audit reports locally, without installing a scanner or querying a cluster for the import.
• Compose logs from explicitly selected workloads with overlap handling, source attribution, filtering and finite export.
• Open reviewed Node Shell and Files helpers with shared lifecycle and durable cleanup reporting. Files supports deletion and selecting revealed items; Files and Shell can detach or return with Alt+Shift+Enter.
• Learn Kubernetes through offline help and an isolated task-based introductory path, with clearer diagnostic feedback and all eight interface languages.
• Pod pickers explain rollout revision and readiness; comparison guidance is clearer. Forwarded connections retain reconnect state when old upstreams retire.
• Release builds use Go 1.26.10, including its certificate trust security fix.

v1.9.0

SPK Ocular 1.9.0

• Resource lists, Helm, Graph, Timeline, Security and RBAC share consistent toolbars and retained-content loading, progress, cancellation and retry controls. Helm sections now live in the left navigation after Storage.
• Pod properties separate regular, init and debug containers, retain sidecar labels, and wrap long names and images clearly.
• Calendar dates use local time, a 24-hour clock and dd.mm.yyyy across interface languages, with the original ISO timestamp on hover.
• Scale deployments directly from their properties. Action reviews show the connection display name; minus/plus controls adjust replicas within the allowed range before Review.
• Selecting a comparison baseline no longer shifts the workspace. Text differences include surrounding context and bounded paging.
• New container-exec permissions apply to the selected namespace/project without a resource-kind picker. Existing restricted grants and confirmation defaults are preserved; permission checkboxes have clearer active and disabled states.
• Logs identify their connection and resource, use All time terminology, and place filtering before local search. Backend filtering progressively scans bounded recent history; partial matches appear during loading while new live records are captured concurrently. Limits and incomplete results remain explicit.
• Downloads open automatically and save to the system Downloads folder without prompting. Right-click log download to choose a destination. Repeated names receive a suffix; active jobs can be cancelled from Downloads, including jobs owned by detached log windows.
• Click a completed download row to open it. Successful file opening or Show in folder closes the popup. Popup positioning, row heights and log-footer geometry remain stable during progress changes.
• Connection progress no longer shifts its provider/title area. YAML opens without a plain-text flash, preloads on intent and reuses the editor when switching resources; editable drafts retain their existing protections.

v1.8.0

SPK Ocular 1.8.0

• Edit individual ConfigMap values in a syntax-highlighted editor with search and undo. Reviews show the exact text change against the current value; binary entries and Secret contents retain their existing protected presentation.
• Search resources with explicit namespace, type and name fragments. Ambiguous namespace matches offer a choice; a unique live match opens the exact object without losing unsaved edits.
• Navigation groups have consistent icons and spacing. Collapsing a group hides all its children, including the selected resource, while preserving the open page.
• Disconnected workspaces have a static provider preview, a Connect/Cancel action beside the status, and separate transparent lighthouse and mountain illustrations. The drawn lighthouse and its soft beam keep a fixed size and are clipped when the sidebar changes width.
• A single footer shows the active view's status. Refresh progress appears after two seconds without shifting toolbar controls; nested panels retain the application frame during focus and resize changes.
• Resize the focused panel with Alt+Shift+Arrow keys. Alt+Shift+Enter detaches or returns logs while keeping one stream; new detached windows use more of the current screen's working area.
• Dock menus close all tabs, or tabs to the left or right, while respecting pinned tabs and current ownership.
• Resource details use clearer typography and compact, matching revision and Events tables. Events retains sorting, column resizing and Refresh; Ingress service relations show each declared route path.
• Prevented already-delivered terminal text from being replayed during IME replacement. Active composition, Unicode paste and screen-reader announcement buffers remain protected.

v1.7.1

SPK Ocular 1.7.1

• Fixed outer-page scrolling and blank space below the status bar when a large logs panel is combined with a smaller window. The logs panel now fits the available height, keeping the application header and footer in place.
• Local Make builds now include a UTC build timestamp to the second and a short Git revision in the version shown in the footer, About dialog and version command. Published release versions remain unchanged.
• Fixed a Helm upgrade cancellation race that could let operation cleanup mark an already successful upgrade as failed. Active cancellation and operation deadlines remain enforced.

v1.7.0

SPK Ocular 1.7.0

• Kubernetes resource lists load the complete requested kind and selected namespaces through compact shared caches, automatic small pages and live watches. Session-wide read budgets and bounded idle retention reduce unnecessary API traffic and memory retention.
• Large All Namespaces reads stop with a request to choose specific namespaces, without presenting a partial list as complete.
• Consistent refresh icons re-read lists and spin until completion. Loading shows elapsed time and received inventory payload bytes when available. Cancel replaces the list with a persistent cancelled-request placeholder; Retry or a new connection starts it again.
• The cluster graph loads only after an explicit click for each connection. Selection, search and opening details preserve the camera.
• Connection navigation, resource-kind labels, table tooltips, scoped command-palette navigation and log selection have been refined. Re-rendering selected-resource ports no longer repeats the same information request.
• Local inventory and memory measurements, raw samples, methodology and their limits are documented in docs/performance.md; they are not universal production-performance guarantees.
• Resource lists avoid repeated JSON decoding, reducing CPU work while loading large Kubernetes inventories.

v1.6.3

SPK Ocular 1.6.3

• Switching Wrap while reading log history keeps the visible log entry and does not resume Follow. Incoming lines stay below the reading position.
• Fractional log-panel resize steps no longer accumulate rounding into history drift.
• With Wrap enabled, new log entries keep the painted live tail stable while row heights are measured.

v1.6.2

SPK Ocular 1.6.2

• Resizing the log panel keeps visible lines at their screen positions. Follow stays at the latest line; reading history does not turn Follow back on. Shrinking, growing, cancelling a resize and restoring a hidden log tab preserve the position within the available scroll range.
• Switching Wrap on or off keeps the latest line visible while Follow is enabled, including when Wrap changes during a resize.
• New configuration unlocks local encrypted storage directly with the master password, then opens the YAML editor without requiring Connect or starting a cluster connection. This also works when a master password exists but no encrypted configurations have been saved yet, or the last one was removed.
• Cancelling password entry leaves storage unchanged. Connect still unlocks and continues only the explicitly selected connection. The explanation for creating a configuration is available in all eight application languages.

v1.6.1

SPK Ocular 1.6.1

• Linux DEB/RPM packages require glibc 2.35 or newer instead of 2.39. Ubuntu 22.04 and Debian 12 can install the packages normally when GTK 3 and WebKit2GTK 4.1 are available.
• Both Linux architectures receive native Ubuntu 22.04 installation, browser-mode and GTK-window checks before publication. Packaging also rejects executable symbols above the declared glibc floor.
• The native verification bundle adds both Ubuntu 22.04 reports and screenshots alongside the existing six-platform evidence. These are X11/userspace checks on the runner kernel; they do not certify every kernel, GPU driver or Wayland session.
• Configuration confirmations reliably focus Cancel and keep keyboard input inside the dialog. Enter on Cancel closes the review without deleting encrypted configurations.
• Add kubeconfig menus now activate the focused item with Enter or Space without triggering target-list shortcuts; held Enter and disabled items remain blocked.

v1.6.0

SPK Ocular 1.6.0

Agent container commands

• Local agents can discover container instances and prepare/run finite commands through GetExecInfo, PrepareExec and RunExec. Commands return separate stdout/stderr as base64 and an explicitly observed exit status, with output and duration limits.
• A separate exec permission requires explicitly named resource kinds and an explicit instance/container choice. Every command requires confirmation by default; the review shows exact argv, finite stdin, the target and limits. Persistent interactive shells, implicit shell selection, attach and automatic command replay are not provided.
• Kubernetes namespace and Docker Compose project boundaries, target identity, UID and configuration-revision checks remain enforced. Grant changes cancel active transport. Remote process termination is best effort; incomplete or unknown outcomes are reported. Standalone Docker containers remain outside project grants.
• Exec uses container permissions and can read mounted secrets or change container/host data. Commands, input and output are not retained in the audit journal. Existing permissions never acquire exec automatically.

Fixes

• Finite Docker command input delivers EOF while retaining stdout/stderr; commands without input detach stdin. Unsupported finite-input transports refuse before starting the command.
• Download deletion confirmation reliably focuses Cancel after preparation finishes.
• German agent confirmations render correctly encoded text. New exec controls and confirmations are translated into all eight interface languages.

Packages retain the unified desktop/browser executable and verification on all six native OS/architecture targets.

v1.5.0

SPK Ocular 1.5.0

Downloads

• A shared Downloads panel lists container file/folder copies and log exports from the main window and detached log windows. Progress, completion, failure, cancellation and interruption remain distinct; browser handoff is labelled separately from a verified save.
• Desktop entries can open the saved item, show its containing folder and copy its full path. The cross removes only the history entry; confirmed permanent deletion removes the file or folder and its contents. Deletion starts on Cancel and previews the exact path. Browser-managed files do not expose native paths or OS file actions.
• Compact rows show a file-type icon, filename and readable size. Ages younger than one minute are hidden; older relative ages are fixed when the panel opens and refresh on reopening. Hover the size or visible age for the exact date.
• A stationary toolbar icon shows a left-to-right indeterminate runner while downloads are active. New successful results highlight the button until the panel is opened. Reduced-motion preferences keep the runner static; the popup has a clear outline and consistent keyboard focus.
• Failed entries show localized safe reasons without retaining raw errors, remote stderr or log contents. The first failure survives cleanup; older or unclassified failures explicitly report that the reason is unavailable.
• History retains the latest 200 metadata entries across restarts, preserving active transfers. Interrupted work is not retried automatically. Clear history and per-entry dismissal never delete files; disabled Clear history stays muted on hover.

All eight interface languages remain supported. Existing connection, edit, Secret and agent-permission guards remain intact. Packages retain the unified desktop/browser executable and verification on all six native OS/architecture targets.