v1.7.0

Released: August 27, 2026

v1.7.0 promotes the 1.7 line to stable, combining v1.7.0-rc.1 and v1.7.0-rc.2. Flux gets its largest update yet, extensions get a Marketplace and a map of their own data, and Canvas becomes something you can author — while connecting four AI clients drops from 1.2 GB to 8 MB.

If you've been on the unstable channel, this update is effectively a no-op.

Heads Up — Kunobi's MCP server no longer runs through `npx`

The Node hub is gone, replaced by two native binaries shipped inside the app. Your client configuration is migrated for you on first run, merged rather than replaced, so any timeout or proxy settings survive. You don't need to do anything.

One thing to avoid: npx @kunobi/mcp upgrade rewrites a migrated entry back to the old shape. That command is no longer part of the setup — remove it from any scripts that call it.

Heads Up — the last synthetic Kubernetes kinds are gone

kunobi.ninja/v1/Helm and kunobi.ninja/v1/HelmHistory no longer exist. Classic Helm is now a typed read model backed by the cluster's own Helm storage, finishing the cleanup that began in v1.6.0. The views behave the same — but anything scripted against those kind names needs updating.

What's New

MCP that costs almost nothing to connect — with four AI clients connected, memory drops from 1,179 MB to 8.3 MB, each additional client from 293 MB to 1.4 MB, and startup from 2,485 ms to 115 ms. Idle CPU goes to zero.
A Marketplace for extensions — one top-level page to discover and manage extensions, with categories, grid and table views, and a detail panel. Pro status is now declared in each extension's own manifest, so reclassifying one no longer needs an app release.
Flux, substantially deeper — real reconciliation health in every view mode, ordered ResourceSet steps, and reconcile-against-source without leaving Kunobi. You can also compare any two recorded HelmRelease revisions, with secrets structurally redacted.
Flux answers "what will this reconcile actually change?" — a drift plan computed as the identity Flux reconciles as, not as whoever is holding the laptop. It runs against your live cluster, and Kunobi makes zero writes on this path.
Canvas becomes yours to author — create, duplicate and rename boards yourself. Duplicate copies your arrangement and data, not just the spec, and a rename you make now survives the agent's next republish.
Canvas answers render inside your AI chat — a canvas from a canvas tool call appears inline in Claude Desktop, ChatGPT and Cursor, instead of only opening a tab you had to go find.
Get data out of a canvas — Copy on every readable card, CSV for tables, CSV or SVG for charts. Cards can also read a local file or folder, so a board can show what's on disk alongside cluster data.
Your extensions' data gets a map — ten extensions were already publishing entities into the knowledge graph with no way to see any of it. They now render as a map beside the table, and RBAC, Substrate and Demo join them — 14 of 16 extensions in the graph.
Any extension can ship a guided setup flow — contributed as data, with no bespoke UI. Cluster Connect is the first adopter. Progress is re-derived from evidence each time, so a finished step can't offer to redo itself.
A redesigned home screen — an "Ask Kunobi" bar, recent clusters, latest canvases and your extensions on one adaptive screen that fits without scrolling and only shows sections that have something in them.
A calmer desktop shell — four update indicators collapse into one status-bar pill, ten notification cards into one slot. The tray gets a real branded menu, and the left rail becomes a 52px gutter that expands on hover.
NATS: account-scoped JetStream browsing — the whole account regardless of which node you land on: a stable 98 streams instead of a different partial slice every poll. Drill into a message, page back through history, connect from an existing nats context in one step. This is a Pro-plan feature.
Auto-approved AI actions announce themselves — a new "Notify on Auto-Approval" setting, defaulting to Toast, so covered calls no longer execute with no on-screen trace.

Improvements

Big graph sources stop being a cliff — three quadratics fixed; 4,000 entities commit in ~10s instead of 30, and growth is now linear.
A dismissed approval is no longer stranded — pending operations collapse into a badge you can click to get the card back, and survive a reload.
Kubernetes actions tell you when they fail — permission denials read as plain sentences instead of the app appearing to do nothing.
The right sidebar follows the selected resource instead of freezing on the snapshot taken when you clicked.
Collapsed graph nodes look collapsed — ▾ web open, ▸ web (12) closed, in all three render paths.
Search works the same everywhere — one implementation across Flux, the Kubernetes drilldown and extension maps, expanding ancestors to reveal what it found.
MCP calls are bounded and graph reads are enforced at the boundary — quotas and timeouts at dispatch, and RBAC filters before derivation rather than after.
Extension keyboard shortcuts stop colliding with built-ins, and shortcuts that were silently dead now fire.
RBAC grants describe themselves accurately — scope stated per action, and a failed check is distinguishable from having no permissions.
Sources are ordered and readable — stable alphabetical listing, late-connecting extensions appear immediately, and connection errors are legible.
Crash reports become useful — PII-free fingerprints group crashes across releases, with Rust panics categorized separately.
Honest telemetry consent — the notice says exactly what is and isn't sent, and the exporter refuses to start without approval.
Agent Gateway — six form and tool-access defects fixed, now tracking upstream v1.4.1 instead of a fork.
Monaco loads when you need it, and lays out correctly after mounting in a hidden tab.
Git history is isolated per repository, and a desktop visual polish pass lands across the app.

Bug Fixes

macOS stops flagging Kunobi as an Intel app — it's a native arm64 app and now declares a minimum system version that says so.
An update no longer looks like a crash — the app reloads and carries on instead of raising a crash dialog.
A held key no longer repeats a destructive action — drain, cordon, rollback and delete run once.
Canvas layouts survive being used — drag, reset, deletion and export all keep your arrangement, and cards stop resizing themselves in a loop.
A corrupt file no longer costs your canvas library — bad files are quarantined instead of emptying the gallery.
Canvas mutations are durable and ordered — patches merge instead of clobbering, and revision-matched writes can't land out of order.
Two canvas authority holes closed — reaching a local repository or watching a whole cluster now requires consent, not just a mount.
Canvas cards are honest — empty canvases say so, stalled cards offer a retry, and unfinished widgets stop looking finished.
Graph data stops going missing — partial snapshots no longer retract entities, and a repair lane heals dropped relationships.
MCP stays faithful under load — deadlines and idempotent re-delivery on every bridge command, with progress preserved under backpressure.
The theme provider hydrates before the backend gate, so the app no longer flashes the wrong theme on start.
Telemetry fails closed on app start, and declining analytics no longer strips headers the manifest needs.
Update indicators are truthful — the pill opens the update center it points at, and a dev tool's offer clears once its upgrade lands.
Ceph, GitHub, GitLab and Bitbucket — dead shortcuts, a misrouted delete, and assorted credential, form and column defects.

Installation

Feedback

We'd love to hear your thoughts! Write to us at feedback@kunobi.ch.