Voltius v0.21.0

Added

• Published container ports are now clickable everywhere Docker lists them —
  the container list, the stack view and the mobile screen. Clicking one opens
  it in your browser, or copies the address; a port on a remote host is
  tunnelled to this machine first, automatically, and an existing tunnel is
  reused.
• The MCP server gained eleven verbs, taking its own surface to 37 (52 with the
  bundled plugins' tools). An agent can now organise your vault, not just read
  and write inside it: vault_list/create/rename/delete,
  folder_list/create/rename/delete, object_move and object_copy — the same
  cut/copy-and-paste the pages do, including whole folder subtrees — and
  key_add_to_host, which appends a saved key's public half to a host's
  authorized_keys over SSH. Deleting a vault or folder cascades, moving
  objects into a different vault has to be asked for explicitly, and team vaults
  are refused throughout.
• Plugins gained four new gated namespaces mirroring that surface: api.vaults,
  api.folders, api.objects and api.ports.reach. Object moves are gated per
  object type rather than wholesale — a plugin allowed to file snippets cannot
  move your keys — and snippets and port forwarding rules now have their own
  write permissions. Every new permission ships with plain-language consent
  copy, and the install dialog now distinguishes read-only grants (a container
  list, a vault name) from the destructive ones.

Fixed

• Ad-hoc port forwarding tunnels no longer die when their host reconnects, and
  tunnel channels now open on the session's current SSH handle — after a sleep
  or a dropped link, forwarding kept using the handle that was already gone.
• File panes keep working after the SSH link behind them is replaced, instead
  of failing every operation until the tab is reopened.
• The titlebar no longer swallows clicks on the close and new-tab buttons.
• Docker no longer lists the same published port twice when it is bound on both
  IPv4 and IPv6, and pressing Enter on a port chip in the mobile view acts on
  the chip instead of the row behind it.
• ssh_exec_command now reports a command's exit code and stderr rather than
  presenting a failed command as a success — this silently affected Proxmox
  actions.
• An MCP tool call that the app refuses is now returned to the client as an
  error instead of a successful result carrying a refusal message.

Security

• Pinned js-yaml to 4.3.1 or later, clearing CVE-2026-59870.