v0.3.0 — full-namespace discovery, resource usage, rollouts, and 5 new guarded writes

A capability release closing the gap between janus-mcp and real operator workflows — while keeping all five security invariants intact.

New read tools: list_resources (discover 15 kinds with status summaries), get_resource_usage (kubectl top + requests/limits headroom), get_rollout_status (revision history with a sanitized current-vs-previous template diff — see what changed, never the credentials). Plus Endpoints, ResourceQuota, LimitRange, and PodDisruptionBudget as describable kinds.

New write tools (approval-gated, opt-in via write_tools.enabled, each bound to the state the approver saw): delete_pod (UID-precondition; bare pods refused by default), rollout_undo (card shows the sanitized diff; bound to resourceVersion + approved revision), set_cronjob_suspend, trigger_cronjob, and cordon_node (cluster-scope required; no drain by design).

Verified by 190 unit/security tests — the frame-capture leak test now scripts the entire read+write surface — plus live kind-cluster integration coverage. RBAC manifests updated with per-tool grants.

Upgrade: uv tool upgrade janus-mcp-server (or pipx upgrade janus-mcp-server).

Full details: CHANGELOG.md · Website: https://janus-mcp.ns47.com