v1.10.1 First working release of the 1.10 line (v1.10.0 failed CI on the agent image and could not be re-tagged; see the agent Dockerfile fix below). Highlights - Service image version picker: from a service's inspect view you can now update to any image version, not just the newest. The "newer version available" hint moved to the top of the inspect and is actionable from any row (u). A picker suggests newer versions with type-to-filter autocomplete, the field is freely editable to pin any existing tag (including an older one), a typed tag is validated against the registry, and downgrades are confirmed with a warning. :latest services keep the single current-digest confirm. Internal - Large TUI refactor (H1): the ~5,600-line ui.go god file is decomposed into a ui struct with methods split across per-concern files. Verified behavior-identical. - Named overlay-size constants + centeredPrompt helper; single cmdContext helper replacing the duplicated ctx==nil guard (L1, L2). - Agent RPC handlers share one authorize() gate for the drain/identity/ authorize/audit/deny sequence (M5). Fixes - agent: Dockerfile build stage bumped to golang:1.27-alpine to match the module's Go 1.27 requirement (the earlier Go bump missed the agent image).