feat: implement ksail cluster update command with config diff detection and node scaling

.github/actions/daily-perf-improver/build-steps/action.yml

@@ -47,7 +47,7 @@ runs:
         echo "=== Running Unit Tests ===" | tee -a build-steps.log
         test_start=$(date +%s)
         # Enable covdata (temp) see https://github.com/golang/go/issues/75031
-        go env -w GOTOOLCHAIN=go1.25.4+auto
+        go env -w GOTOOLCHAIN=go1.26.0+auto
         if go test -race -coverprofile=coverage.txt -covermode=atomic ./... 2>&1 | tee -a build-steps.log; then
           test_end=$(date +%s)
           test_duration=$((test_end - test_start))
@@ -70,7 +70,13 @@ runs:
           echo "Installing golangci-lint..." | tee -a build-steps.log
           GOBIN="$(go env GOPATH)/bin"
           mkdir -p "${GOBIN}"
-          curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b "${GOBIN}"
+          # Resolve pinned version via go list; fall back to installer default when unavailable
+          LINT_VERSION="$(go list -m -f '{{.Version}}' github.com/golangci/golangci-lint/v2 2>/dev/null || true)"
+          if [ -n "${LINT_VERSION}" ]; then
+            curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b "${GOBIN}" "${LINT_VERSION}"
+          else
+            curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b "${GOBIN}"
+          fi
           export PATH="${PATH}:${GOBIN}"
         fi
 
@@ -106,7 +112,7 @@ runs:
             echo "Installing npm dependencies..." | tee -a ../build-steps.log
             npm ci 2>&1 | tee -a ../build-steps.log
           fi
-          
+
           if npm run build 2>&1 | tee -a ../build-steps.log; then
             docs_end=$(date +%s)
             docs_duration=$((docs_end - docs_start))

.github/actions/daily-test-improver/coverage-steps/action.yml

@@ -11,7 +11,7 @@ runs:
         go-version-file: go.mod
         cache: true
         cache-dependency-path: go.sum
-    
+
     # Step 2: Verify Go installation
     - name: ✅ Verify Go setup
       shell: bash
@@ -41,7 +41,7 @@ runs:
       shell: bash
       run: |
         echo "Enabling covdata workaround..." | tee -a coverage-steps.log
-        go env -w GOTOOLCHAIN=go1.25.4+auto 2>&1 | tee -a coverage-steps.log
+        go env -w GOTOOLCHAIN=go1.26.0+auto 2>&1 | tee -a coverage-steps.log
         echo "✅ Covdata enabled" | tee -a coverage-steps.log
 
     # Step 6: Run unit tests with coverage

.github/actions/ksail-system-test/action.yaml

@@ -223,6 +223,30 @@ runs:
         ksail workload push --path "$GITOPS_PATH/"
         ksail workload reconcile
 
+    - name: 🧪 ksail cluster update --dry-run
+      id: cluster-update-dry-run
+      shell: bash
+      env:
+        DISTRIBUTION: ${{ inputs.distribution }}
+        PROVIDER: ${{ inputs.provider }}
+        ARGS: ${{ steps.resolve-args.outputs.args }}
+        HCLOUD_TOKEN: ${{ inputs.hcloud-token }}
+      run: |
+        # shellcheck disable=SC2086
+        ksail cluster update --dry-run --distribution "$DISTRIBUTION" --provider "$PROVIDER" $ARGS
+
+    - name: 🧪 ksail cluster update
+      id: cluster-update
+      shell: bash
+      env:
+        DISTRIBUTION: ${{ inputs.distribution }}
+        PROVIDER: ${{ inputs.provider }}
+        ARGS: ${{ steps.resolve-args.outputs.args }}
+        HCLOUD_TOKEN: ${{ inputs.hcloud-token }}
+      run: |
+        # shellcheck disable=SC2086
+        ksail cluster update --force --distribution "$DISTRIBUTION" --provider "$PROVIDER" $ARGS
+
     - name: 💾 Save Docker volumes to cache
       if: inputs.provider == 'Docker' && steps.restore-volume-cache.outputs.cache-hit != 'true'
       uses: ./.github/actions/cache-docker-volumes
@@ -232,7 +256,7 @@ runs:
         cache-version: v1
 
     - name: 🐞 Debug Kubernetes failure
-      if: failure() && (steps.cluster-create.outcome == 'failure' || steps.workload-create.outcome == 'failure' || steps.workload-apply.outcome == 'failure' || steps.workload-push-reconcile.outcome == 'failure')
+      if: failure() && (steps.cluster-create.outcome == 'failure' || steps.workload-create.outcome == 'failure' || steps.workload-apply.outcome == 'failure' || steps.workload-push-reconcile.outcome == 'failure' || steps.cluster-update-dry-run.outcome == 'failure' || steps.cluster-update.outcome == 'failure')
       uses: ./.github/actions/debug-kubernetes-failure
       with:
         kubectl-command: "ksail workload"

.github/agents/add-tests.agent.md

@@ -2,14 +2,14 @@
 description: Add unit tests to the Go codebase following best practices.
 ---
 
-# Add Tests Prompt
+# Add Tests Agent
 
 You are a super expert Go developer tasked with adding unit tests to this Go codebase.
 
 1. Analyze the codebase to identify untested or under-tested areas.
-2. (Optional) Refactor code to support high code coverage (e.g., introduce interfaces or seams).
+2. (Optional) Use the Refactor agent to improve testability if needed. (e.g., introduce interfaces or seams).
 3. Write comprehensive unit tests to cover those areas, following best practices.
-4. Run linters and tests to ensure everything passes (golangci-lint and jscpd + go test).
+4. Use the Refactor agent to fix any issues that arise from the new tests (e.g., test failures, linting issues, code duplication).
 5. Go back to step 1 and repeat until the codebase has high test coverage.
 
 ## Rules for Writing Tests

.github/agents/agentic-workflows.agent.md

@@ -27,7 +27,7 @@ Workflows may optionally include:
 - Workflow files: `.github/workflows/*.md` and `.github/workflows/**/*.md`
 - Workflow lock files: `.github/workflows/*.lock.yml`
 - Shared components: `.github/workflows/shared/*.md`
-- Configuration: https://github.com/github/gh-aw/blob/v0.42.9/.github/aw/github-agentic-workflows.md
+- Configuration: https://github.com/github/gh-aw/blob/v0.42.17/.github/aw/github-agentic-workflows.md
 
 ## Problems This Solves
 
@@ -49,7 +49,7 @@ When you interact with this agent, it will:
 ### Create New Workflow
 **Load when**: User wants to create a new workflow from scratch, add automation, or design a workflow that doesn't exist yet
 
-**Prompt file**: https://github.com/github/gh-aw/blob/v0.42.9/.github/aw/create-agentic-workflow.md
+**Prompt file**: https://github.com/github/gh-aw/blob/v0.42.17/.github/aw/create-agentic-workflow.md
 
 **Use cases**:
 - "Create a workflow that triages issues"
@@ -59,7 +59,7 @@ When you interact with this agent, it will:
 ### Update Existing Workflow  
 **Load when**: User wants to modify, improve, or refactor an existing workflow
 
-**Prompt file**: https://github.com/github/gh-aw/blob/v0.42.9/.github/aw/update-agentic-workflow.md
+**Prompt file**: https://github.com/github/gh-aw/blob/v0.42.17/.github/aw/update-agentic-workflow.md
 
 **Use cases**:
 - "Add web-fetch tool to the issue-classifier workflow"
@@ -69,7 +69,7 @@ When you interact with this agent, it will:
 ### Debug Workflow  
 **Load when**: User needs to investigate, audit, debug, or understand a workflow, troubleshoot issues, analyze logs, or fix errors
 
-**Prompt file**: https://github.com/github/gh-aw/blob/v0.42.9/.github/aw/debug-agentic-workflow.md
+**Prompt file**: https://github.com/github/gh-aw/blob/v0.42.17/.github/aw/debug-agentic-workflow.md
 
 **Use cases**:
 - "Why is this workflow failing?"
@@ -79,7 +79,7 @@ When you interact with this agent, it will:
 ### Upgrade Agentic Workflows
 **Load when**: User wants to upgrade workflows to a new gh-aw version or fix deprecations
 
-**Prompt file**: https://github.com/github/gh-aw/blob/v0.42.9/.github/aw/upgrade-agentic-workflows.md
+**Prompt file**: https://github.com/github/gh-aw/blob/v0.42.17/.github/aw/upgrade-agentic-workflows.md
 
 **Use cases**:
 - "Upgrade all workflows to the latest version"
@@ -89,7 +89,7 @@ When you interact with this agent, it will:
 ### Create Shared Agentic Workflow
 **Load when**: User wants to create a reusable workflow component or wrap an MCP server
 
-**Prompt file**: https://github.com/github/gh-aw/blob/v0.42.9/.github/aw/create-shared-agentic-workflow.md
+**Prompt file**: https://github.com/github/gh-aw/blob/v0.42.17/.github/aw/create-shared-agentic-workflow.md
 
 **Use cases**:
 - "Create a shared component for Notion integration"
@@ -100,7 +100,7 @@ When you interact with this agent, it will:
 
 **Load when**: Creating or updating workflows that coordinate multiple agents or dispatch work to other workflows
 
-**Prompt file**: https://github.com/github/gh-aw/blob/v0.42.9/.github/aw/orchestration.md
+**Prompt file**: https://github.com/github/gh-aw/blob/v0.42.17/.github/aw/orchestration.md
 
 **Use cases**:
 - Assigning work to AI coding agents
@@ -112,7 +112,7 @@ When you interact with this agent, it will:
 
 **Load when**: Creating or updating workflows that manage GitHub Projects v2
 
-**Prompt file**: https://github.com/github/gh-aw/blob/v0.42.9/.github/aw/projects.md
+**Prompt file**: https://github.com/github/gh-aw/blob/v0.42.17/.github/aw/projects.md
 
 **Use cases**:
 - Tracking items and fields with update-project
@@ -160,7 +160,7 @@ gh aw compile --validate
 
 ## Important Notes
 
-- Always reference the instructions file at https://github.com/github/gh-aw/blob/v0.42.9/.github/aw/github-agentic-workflows.md for complete documentation
+- Always reference the instructions file at https://github.com/github/gh-aw/blob/v0.42.17/.github/aw/github-agentic-workflows.md for complete documentation
 - Use the MCP tool `agentic-workflows` when running in GitHub Copilot Cloud
 - Workflows must be compiled to `.lock.yml` files before running in GitHub Actions
 - **Bash tools are enabled by default** - Don't restrict bash commands unnecessarily since workflows are sandboxed by the AWF

.github/agents/e2e-test-runner.agent.md

@@ -0,0 +1,12 @@
+---
+description: E2E test runner agent for KSail, responsible for running end-to-end tests on the cluster management features to validate functionality and catch regressions.
+handoffs:
+  - label: Start Implementation
+    agent: agent
+    prompt: "Start implementation"
+    send: true
+---
+
+# E2E Test Runner Agent
+
+You are an expert end-to-end testing specialist. Your mission is to enhance critical user journeys by running local E2E tests via KSail CLI commands, and validate functionality, performance, UX, and UI against professional standards. When issues appear, summarize them clearly and concisely with actionable feedback for developers.

.github/agents/refactor.agent.md

@@ -2,11 +2,11 @@
 description: Refactor a Go codebase incrementally while preserving existing behavior.
 ---
 
-# Refactor Prompt
+# Refactor Go Codebase Agent
 
 You are an expert Go developer tasked with refactoring a Go codebase. Apply systematic, incremental improvements using a top-down approach (Module -> File -> Function) while preserving all existing behavior.
 
-Keep going until the codebase is clean, has high cohesion, low coupling, and adheres to Go best practices.
+Keep going until the codebase is clean, well-structured, has high cohesion, low coupling, and adheres to Go best practices.
 
 ## Rules for Refactoring
 

.github/agents/write-docs.agent.md

@@ -2,7 +2,7 @@
 description: Write documentation for a product or project by researching and gathering information, then organizing
 ---
 
-# Update Docs
+# Update Docs Agent
 
 ## Job Description
 

.github/aw/actions-lock.json

@@ -80,15 +80,15 @@
       "version": "v3.12.0",
       "sha": "8d2750c68a42422c14e847fe6c8ac0403b4cbd6f"
     },
-    "github/gh-aw/actions/setup@v0.42.9": {
+    "github/gh-aw/actions/setup@v0.42.17": {
       "repo": "github/gh-aw/actions/setup",
-      "version": "v0.42.9",
-      "sha": "dd559bb7eccb98233080e76b6139758705aa6615"
+      "version": "v0.42.17",
+      "sha": "7a970851c1090295e55a16e549c61ba1ce227f16"
     },
-    "githubnext/gh-aw/actions/setup@v0.42.9": {
+    "githubnext/gh-aw/actions/setup@v0.42.17": {
       "repo": "githubnext/gh-aw/actions/setup",
-      "version": "v0.42.9",
-      "sha": "dd559bb7eccb98233080e76b6139758705aa6615"
+      "version": "v0.42.17",
+      "sha": "7a970851c1090295e55a16e549c61ba1ce227f16"
     }
   }
 }

.github/copilot-instructions.md

@@ -130,8 +130,7 @@ go run main.go --help
 /
 ├── main.go                 # Main entry point
 ├── pkg/                    # Core packages
-│   ├── ai/                 # AI-related utilities
-│   │   └── toolgen/        # Tool generation for AI assistants
+│   ├── toolgen/            # Tool generation for AI assistants
 │   ├── apis/               # API types and schemas
 │   ├── cli/                # CLI wiring, UI, and Cobra commands
 │   │   ├── annotations/    # Command annotation constants
@@ -151,8 +150,7 @@ go run main.go --help
 │       ├── mcp/            # Model Context Protocol server
 │       ├── provider/       # Infrastructure providers (docker, hetzner)
 │       ├── provisioner/    # Distribution provisioners (Vanilla, K3s, Talos)
-│       ├── image/          # Container image export/import services
-│       └── reconciler/     # Common base for GitOps reconciliation clients
+│       └── image/          # Container image export/import services
 ├── docs/                   # Astro documentation source
 │   ├── dist/               # Generated site (after npm run build)
 │   └── package.json        # Node.js dependencies for documentation
@@ -203,7 +201,7 @@ ksail cluster init --help
 **"Go version mismatch"**:
 
 ```bash
-go version  # Should match the version in go.mod (go 1.25.4)
+go version  # Should match the version in go.mod (go 1.26.0)
 # If not, install/update Go from https://go.dev/dl/
 ```
 
@@ -236,7 +234,7 @@ npm run dev                            # Test locally (if needed)
 
 ### Important Notes
 
-- The project uses **Go 1.25.4+** (see `go.mod`)
+- The project uses **Go 1.26.0+** (see `go.mod`)
 - All Kubernetes tools are embedded as Go libraries - only Docker is required externally
 - Unit tests run quickly and should generally pass
 - System tests in CI cover extensive scenarios with multiple tool combinations
@@ -266,7 +264,7 @@ npm run dev                            # Test locally (if needed)
 
 **Key Packages:**
 
-- `pkg/ai/toolgen/`: AI tool generation utilities for integrating with AI assistants
+- `pkg/toolgen/`: AI tool generation utilities for integrating with AI assistants
 - `pkg/apis/`: API types, schemas, and enums (`pkg/apis/cluster/v1alpha1/enums.go` defines Distribution values)
 - `pkg/client/`: Embedded tool clients (kubectl, helm, kind, k3d, flux, argocd)
 - `pkg/svc/`: Services including installers, providers, and provisioners
@@ -276,13 +274,13 @@ npm run dev                            # Test locally (if needed)
   - `pkg/svc/provider/`: Infrastructure providers (docker, hetzner)
   - `pkg/svc/provisioner/`: Distribution provisioners (Vanilla, K3s, Talos)
   - `pkg/svc/image/`: Container image export/import services for Vanilla and K3s distributions
-  - `pkg/svc/reconciler/`: Common base for GitOps reconciliation clients (Flux and ArgoCD)
+- `pkg/client/reconciler/`: Common base for GitOps reconciliation clients (Flux and ArgoCD)
 - `pkg/di/`: Dependency injection for wiring components
 - `pkg/utils/`: General utility functions
 
 ## Active Technologies
 
-- Go 1.25.4+ (see `go.mod`)
+- Go 1.26.0+ (see `go.mod`)
 - Embedded Kubernetes tools (kubectl, helm, kind, k3d, flux, argocd) as Go libraries
 - Docker as the only external dependency
 - Astro with Starlight for documentation (Node.js-based)

.github/copilot/instructions/build-ci-performance.md

@@ -103,7 +103,7 @@ go mod why -m github.com/heavy/dependency
 
 ```dockerfile
 # Multi-stage build with cache mounts
-FROM golang:1.25.4 AS builder
+FROM golang:1.26.0 AS builder
 
 WORKDIR /build
 COPY go.mod go.sum ./
@@ -324,13 +324,13 @@ jobs:
   # These can run in parallel
   lint:
     runs-on: ubuntu-latest
-  
+
   test-unit:
     runs-on: ubuntu-latest
-  
+
   build:
     runs-on: ubuntu-latest
-  
+
   # This depends on build
   test-system:
     needs: [build]

.github/dependabot.yaml

@@ -77,23 +77,23 @@ updates:
 
   - package-ecosystem: docker
     registries: [dockerhub, ghcr]
-    directory: /pkg/io/config-manager/talos # Talos image (embedded in Go via go:embed)
+    directory: /pkg/fsutil/configmanager/talos # Talos image (embedded in Go via go:embed)
     cooldown:
       default-days: 7
     schedule:
       interval: daily
 
   - package-ecosystem: docker
     registries: [dockerhub, ghcr]
-    directory: /pkg/io/config-manager/k3d # K3s image (embedded in Go via go:embed)
+    directory: /pkg/fsutil/configmanager/k3d # K3s image (embedded in Go via go:embed)
     cooldown:
       default-days: 7
     schedule:
       interval: daily
 
   - package-ecosystem: docker
     registries: [dockerhub, ghcr]
-    directory: /pkg/io/config-manager/kind # Kind node image (embedded in Go via go:embed)
+    directory: /pkg/fsutil/configmanager/kind # Kind node image (embedded in Go via go:embed)
     cooldown:
       default-days: 7
     schedule:

.github/prompts/e2e-test-runner.prompt.md

@@ -0,0 +1,3 @@
+---
+agent: e2e-test-runner
+---

.github/scripts/generate-schema/go.mod

@@ -1,6 +1,6 @@
 module github.com/devantler-tech/ksail/generate-schema
 
-go 1.25.4
+go 1.26.0
 
 require (
 	github.com/devantler-tech/ksail/v5 v5.20.3

.github/workflows/agentics-maintenance.yml

@@ -13,7 +13,7 @@
 # \  /\  / (_) | | | | ( | | | | (_) \ V  V /\__ \
 #  \/  \/ \___/|_| |_|\_\|_| |_|\___/ \_/\_/ |___/
 #
-# This file was automatically generated by pkg/workflow/maintenance_workflow.go (v0.42.9). DO NOT EDIT.
+# This file was automatically generated by pkg/workflow/maintenance_workflow.go (v0.42.13). DO NOT EDIT.
 #
 # To regenerate this workflow, run:
 #   gh aw compile
@@ -47,7 +47,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw/actions/setup@v0.42.9
+        uses: github/gh-aw/actions/setup@v0.42.13
         with:
           destination: /opt/gh-aw/actions