@skyhook-io/k8s-ui 1.14.2 → 1.14.4

package/src/components/resources/renderers/capi-cells.tsx

@@ -12,6 +12,7 @@ import {
   getClusterClassStatus,
   getMachineHealthCheckStatus, getMachineHealthCheckHealthy, getMachineHealthCheckClusterName,
   getClusterProvider,
+  getMachineDeploymentUpToDate,
 } from '../resource-utils-capi'
 
 function StatusBadge({ resource, getStatus }: { resource: any; getStatus: (r: any) => { text: string; color: string } }) {
@@ -78,6 +79,8 @@ export function CAPIMachineDeploymentCell({ resource, column }: { resource: any;
       return <TextCell value={getMachineClusterName(resource)} />
     case 'ready':
       return <TextCell value={getMachineDeploymentReplicas(resource)} />
+    case 'upToDate':
+      return <TextCell value={getMachineDeploymentUpToDate(resource)} />
     case 'version':
       return <TextCell value={getMachineDeploymentVersion(resource)} />
     default:

package/src/components/resources/renderers/certmanager-cells.tsx

@@ -48,8 +48,8 @@ export function CertificateCell({ resource, column }: { resource: any; column: s
     case 'expires': {
       const expiry = getCertificateExpiry(resource)
       return (
-        <span className={clsx(
-          'text-sm font-medium',
+        <span title={expiry.text} className={clsx(
+          'text-sm font-medium truncate block',
           expiry.level === 'unhealthy' ? 'text-red-400' :
           expiry.level === 'degraded' ? 'text-yellow-400' :
           expiry.level === 'healthy' ? 'text-green-400' :

package/src/components/resources/renderers/cnpg-cells.tsx

@@ -287,7 +287,7 @@ export function CNPGPoolerCell({ resource, column }: { resource: any; column: st
       return (
         <span className={clsx(
           'badge-sm',
-          type === 'rw' ? 'bg-blue-500/20 text-blue-400' : 'bg-purple-500/20 text-purple-400'
+          type === 'rw' ? 'status-blue' : 'status-purple'
         )}>
           {type}
         </span>

package/src/components/resources/renderers/eso-cells.tsx

@@ -4,6 +4,7 @@ import { clsx } from 'clsx'
 import {
   getExternalSecretStatus,
   getExternalSecretStore,
+  getExternalSecretStoreKey,
   getExternalSecretRefreshInterval,
   getExternalSecretLastSync,
   getClusterExternalSecretStatus,
@@ -14,7 +15,11 @@ import {
   getClusterSecretStoreStatus,
 } from '../resource-utils-eso'
 
-export function ExternalSecretCell({ resource, column }: { resource: any; column: string }) {
+export function ExternalSecretCell({ resource, column, storeProviders }: {
+  resource: any
+  column: string
+  storeProviders?: Record<string, string>
+}) {
   switch (column) {
     case 'status': {
       const status = getExternalSecretStatus(resource)
@@ -32,6 +37,17 @@ export function ExternalSecretCell({ resource, column }: { resource: any; column
         </span>
       )
     }
+    case 'provider': {
+      // The provider lives on the referenced store, not on this object. Three
+      // states, and the middle one matters: no map yet means the stores are
+      // still loading, which is not the same as a store we looked for and could
+      // not read.
+      if (!storeProviders) return <span className="text-sm text-theme-text-tertiary">…</span>
+      const provider = storeProviders[getExternalSecretStoreKey(resource)]
+      return provider
+        ? <span className="text-sm text-theme-text-secondary truncate block" title={provider}>{provider}</span>
+        : <span className="text-sm text-theme-text-tertiary" title="The referenced store could not be read">-</span>
+    }
     case 'refreshInterval': {
       const interval = getExternalSecretRefreshInterval(resource)
       return <span className="text-sm text-theme-text-secondary">{interval}</span>

package/src/components/resources/renderers/knative-cells.tsx

@@ -28,6 +28,9 @@ import {
   getDomainMappingUrl,
   getServerlessServiceMode,
 } from '../resource-utils-knative'
+// Knative's Certificate reports status.notAfter like any other TLS certificate,
+// so it shares the expiry formatter rather than re-deriving the thresholds.
+import { getCertificateExpiry, healthColors } from '../resource-utils'
 
 function StatusCell({ resource, getStatus }: { resource: any; getStatus: (r: any) => { text: string; color: string } }) {
   const status = getStatus(resource)
@@ -366,6 +369,16 @@ export function KnativeCertificateCell({ resource, column }: { resource: any; co
     }
     case 'secretName':
       return <TextCell value={resource?.spec?.secretName || '-'} />
+    case 'expires': {
+      const expiry = getCertificateExpiry(resource)
+      // "Expired 365d ago" is far wider than the column; bound it like the
+      // other status badges that carry arbitrary-length text.
+      return (
+        <span className={clsx('badge truncate max-w-full', healthColors[expiry.level])} title={expiry.text}>
+          {expiry.text}
+        </span>
+      )
+    }
     default:
       return <DefaultCell />
   }
@@ -384,7 +397,7 @@ export function ServerlessServiceCell({ resource, column }: { resource: any; col
       return (
         <span className={clsx(
           'badge',
-          mode === 'Proxy' ? 'bg-yellow-500/20 text-yellow-400' : 'bg-green-500/20 text-green-400'
+          mode === 'Proxy' ? 'status-amber' : 'status-green'
         )}>
           {mode}
         </span>

package/src/components/resources/renderers/kyverno-cells.tsx

@@ -8,6 +8,7 @@ import {
   getKyvernoPolicyStatus,
   getKyvernoEnforcement,
   getKyvernoPolicyRuleCount,
+  getKyvernoPolicyRuleTypes,
 } from '../resource-utils-kyverno'
 import {
   getKyvernoRequestState,
@@ -83,16 +84,26 @@ export function KyvernoPolicyCell({ resource, column }: { resource: any; column:
       return (
         <span className={clsx(
           'badge',
+          // Enforce and Audit are configured postures, so they take colour-named
+          // accents. A discrepancy is not a posture — the policy declares Enforce
+          // while admission evaluation is off, so it blocks nothing it claims to
+          // — and that is a fault, which is what the alert tier is for.
           blocks
-            ? 'bg-red-500/20 text-red-400'
+            ? 'status-red'
             : discrepancy
-              ? 'bg-orange-500/20 text-orange-400'
-              : 'bg-yellow-500/20 text-yellow-400',
+              ? 'status-alert'
+              : 'status-amber',
         )}>
           {label}
         </span>
       )
     }
+    case 'ruleTypes': {
+      const types = getKyvernoPolicyRuleTypes(resource)
+      return (
+        <span className="text-sm text-theme-text-secondary truncate block" title={types}>{types}</span>
+      )
+    }
     case 'rules': {
       const count = getKyvernoPolicyRuleCount(resource)
       return <span className="text-sm text-theme-text-secondary">{count}</span>

package/src/components/resources/renderers/kyverno-modern-cells.tsx

@@ -129,6 +129,12 @@ export function KyvernoCleanupPolicyCell({ resource, column }: { resource: any;
       const status = getKyvernoCleanupPolicyStatus(resource)
       return <span className={clsx('badge', status.color)}>{status.text}</span>
     }
+    case 'lastRun': {
+      const last = getKyvernoLastExecutionTime(resource)
+      return last
+        ? <span className="text-sm text-theme-text-secondary">{formatAge(last)}</span>
+        : <span className="text-sm text-theme-text-tertiary">-</span>
+    }
     case 'schedule': {
       const schedule = getKyvernoCleanupSchedule(resource)
       return schedule ? (

package/src/components/resources/renderers/trivy-cells.tsx

@@ -6,6 +6,7 @@ import {
   getVulnerabilityReportSummary,
   getVulnerabilityReportContainer,
   getVulnerabilityReportImage,
+  getSbomReportImage,
   getConfigAuditReportSummary,
   getConfigAuditReportStatus,
   getExposedSecretReportSummary,
@@ -133,6 +134,12 @@ export function ClusterComplianceReportCell({ resource, column }: { resource: an
 
 export function SbomReportCell({ resource, column }: { resource: any; column: string }) {
   switch (column) {
+    case 'image': {
+      const image = getSbomReportImage(resource)
+      return (
+        <span className="text-sm text-theme-text-secondary truncate block" title={image}>{image}</span>
+      )
+    }
     case 'container':
       return <span className="text-sm text-theme-text-secondary">{getSbomReportContainer(resource)}</span>
     case 'components': {

package/src/components/resources/renderers/velero-cells.tsx

@@ -30,6 +30,7 @@ import {
   getVSLConfig,
   getBackupRepositoryStatus,
   getBackupRepositoryType,
+  getBackupRepositoryVolumeNamespace,
 } from '../resource-utils-velero'
 
 // The detail-page Phase value. The badge carries the same label the table
@@ -235,6 +236,8 @@ export function BackupRepositoryCell({ resource, column }: { resource: any; colu
         </span>
       )
     }
+    case 'volumeNamespace':
+      return <span className="text-sm text-theme-text-secondary">{getBackupRepositoryVolumeNamespace(resource)}</span>
     case 'repositoryType': {
       const type = getBackupRepositoryType(resource)
       // restic is on its way out (no new backups since v1.17, restore dropped in

package/src/components/resources/resource-utils-calico.test.ts

@@ -174,6 +174,12 @@ describe('IPPool derivations', () => {
       getCalicoIPPoolAllowedUses({ spec: { allowedUses: ['Tunnel'] } }),
     ).toBe('Tunnel')
   })
+
+  it('treats an empty allowedUses list as the default, not as no uses', () => {
+    // Calico: "If not specified or empty, defaults to ["Tunnel", "Workload"]".
+    // A dash here would read as a pool that allocates for nothing.
+    expect(getCalicoIPPoolAllowedUses({ spec: { allowedUses: [] } })).toBe('Workload, Tunnel')
+  })
 })
 
 describe('derived policy types', () => {

package/src/components/resources/resource-utils-calico.ts

@@ -256,6 +256,10 @@ export function getCalicoIPPoolEncapsulation(pool: any): string {
 
 export function getCalicoIPPoolAllowedUses(pool: any): string {
   const uses = pool?.spec?.allowedUses
-  if (!Array.isArray(uses)) return 'Workload, Tunnel'
-  return uses.length > 0 ? uses.map(String).join(', ') : '-'
+  // Calico documents an empty list as equivalent to an absent one: "If not
+  // specified or empty, defaults to ["Tunnel", "Workload"] for
+  // back-compatibility." Rendering a dash there would read as a pool that
+  // allocates for nothing.
+  if (!Array.isArray(uses) || uses.length === 0) return 'Workload, Tunnel'
+  return uses.map(String).join(', ')
 }

package/src/components/resources/resource-utils-certmanager.ts

@@ -126,7 +126,7 @@ export function getOrderState(order: any): StatusBadge {
     case 'valid':
       return { text: 'Valid', color: healthColors.healthy, level: 'healthy' }
     case 'ready':
-      return { text: 'Ready', color: 'bg-blue-500/20 text-blue-400', level: 'healthy' }
+      return { text: 'Ready', color: 'status-blue', level: 'healthy' }
     case 'pending':
       return { text: 'Pending', color: healthColors.degraded, level: 'degraded' }
     case 'invalid':
@@ -162,7 +162,7 @@ export function getChallengeState(challenge: any): StatusBadge {
     case 'valid':
       return { text: 'Valid', color: healthColors.healthy, level: 'healthy' }
     case 'ready':
-      return { text: 'Ready', color: 'bg-blue-500/20 text-blue-400', level: 'healthy' }
+      return { text: 'Ready', color: 'status-blue', level: 'healthy' }
     case 'pending':
       return { text: 'Pending', color: healthColors.degraded, level: 'degraded' }
     case 'processing':

package/src/components/resources/resource-utils-eso.test.ts

@@ -1,5 +1,5 @@
 import { describe, expect, it } from 'vitest'
-import { getSecretStoreProviderType, getSecretStoreProviderKey } from './resource-utils-eso'
+import { getSecretStoreProviderType, getSecretStoreProviderKey, getExternalSecretStoreKey } from './resource-utils-eso'
 
 // The provider label answers "which backend holds these secrets?", so it has to
 // track the upstream `spec.provider` field names rather than plausible ones.
@@ -54,3 +54,28 @@ describe('getSecretStoreProviderKey', () => {
     expect(key('ParameterStore')).toBe('aws')
   })
 })
+
+describe('getExternalSecretStoreKey', () => {
+  // A ClusterSecretStore is referenceable from any namespace, so keying it by
+  // namespace would miss every ExternalSecret outside the store's own.
+  it('keys a ClusterSecretStore by name alone', () => {
+    expect(getExternalSecretStoreKey({
+      metadata: { namespace: 'prod' },
+      spec: { secretStoreRef: { name: 'vault-global', kind: 'ClusterSecretStore' } },
+    })).toBe('vault-global')
+  })
+
+  it('scopes a SecretStore to the ExternalSecret namespace', () => {
+    expect(getExternalSecretStoreKey({
+      metadata: { namespace: 'prod' },
+      spec: { secretStoreRef: { name: 'aws', kind: 'SecretStore' } },
+    })).toBe('prod/aws')
+  })
+
+  it('treats an omitted kind as a SecretStore, as the CRD defaults it', () => {
+    expect(getExternalSecretStoreKey({
+      metadata: { namespace: 'prod' },
+      spec: { secretStoreRef: { name: 'aws' } },
+    })).toBe('prod/aws')
+  })
+})

package/src/components/resources/resource-utils-eso.ts

@@ -235,6 +235,19 @@ export function getExternalSecretStore(resource: any): { name: string; kind: str
   }
 }
 
+/**
+ * Key for looking this ExternalSecret's store up in a provider map.
+ *
+ * A ClusterSecretStore is cluster-scoped and referenceable from any namespace,
+ * so it keys by name alone; a SecretStore only resolves within the
+ * ExternalSecret's own namespace.
+ */
+export function getExternalSecretStoreKey(resource: any): string {
+  const store = getExternalSecretStore(resource)
+  if (store.kind === 'ClusterSecretStore') return store.name
+  return `${resource?.metadata?.namespace ?? ''}/${store.name}`
+}
+
 export function getExternalSecretRefreshInterval(resource: any): string {
   return resource.spec?.refreshInterval || '-'
 }

package/src/components/resources/resource-utils-knative.ts

@@ -62,14 +62,14 @@ export function getRevisionStatus(resource: any): StatusBadge {
   if (ready?.status === 'True' && active?.status === 'False') {
     const reason = active.reason || ''
     if (reason === 'NoTraffic') {
-      return { text: 'Scaled to Zero', color: 'bg-blue-500/20 text-blue-400', level: 'healthy' }
+      return { text: 'Scaled to Zero', color: 'status-blue', level: 'healthy' }
     }
-    return { text: reason || 'Inactive', color: 'bg-yellow-500/20 text-yellow-400', level: 'degraded' }
+    return { text: reason || 'Inactive', color: 'status-amber', level: 'degraded' }
   }
 
   // Check for activating: Active condition is Unknown (scaling up)
   if (ready?.status === 'True' && active?.status === 'Unknown') {
-    return { text: 'Activating', color: 'bg-blue-500/20 text-blue-400', level: 'healthy' }
+    return { text: 'Activating', color: 'status-blue', level: 'healthy' }
   }
 
   return getKnativeConditionStatus(resource)

package/src/components/resources/resource-utils-trivy.ts

@@ -102,6 +102,9 @@ export const getExposedSecretReportSummary = getVulnerabilityReportSummary
 export const getExposedSecretReportContainer = getVulnerabilityReportContainer
 export const getExposedSecretReportImage = getVulnerabilityReportImage
 
+// SBOM reports carry the same report.artifact/registry shape as the scan reports.
+export const getSbomReportImage = getVulnerabilityReportImage
+
 export const getExposedSecretReportStatus = getVulnerabilityReportStatus
 
 // ============================================================================

package/src/components/resources/resource-utils.ts

@@ -11,7 +11,8 @@ import { getNodePoolStatus, getNodeClaimStatus } from './resource-utils-karpente
 import { getScaledObjectStatus, getScaledJobStatus } from './resource-utils-keda'
 import { getGitRepositoryStatus, getOCIRepositoryStatus, getHelmRepositoryStatus, getHelmRepositoryType, getKustomizationStatus, getFluxHelmReleaseStatus, getFluxAlertStatus } from './resource-utils-flux'
 import { getArgoApplicationStatus, getArgoApplicationSetStatus, getArgoApplicationSync, getArgoApplicationHealth, getArgoApplicationProject } from './resource-utils-argo'
-import { getPolicyReportStatus as _getPolicyReportStatus, getKyvernoPolicyStatus as _getKyvernoPolicyStatus } from './resource-utils-kyverno'
+import { getVulnerabilityReportImage as _getVulnerabilityReportImage } from './resource-utils-trivy'
+import { getKyvernoPolicyRuleTypes as _getKyvernoPolicyRuleTypes, getPolicyReportStatus as _getPolicyReportStatus, getKyvernoPolicyStatus as _getKyvernoPolicyStatus } from './resource-utils-kyverno'
 import { getResourceClaimStatus as _getResourceClaimStatus, getResourceClaimDeviceClasses as _getResourceClaimDeviceClasses, getResourceClaimTemplateDeviceClasses as _getResourceClaimTemplateDeviceClasses, getResourceClaimAllocation as _getResourceClaimAllocation, getResourceClaimReservedFor as _getResourceClaimReservedFor } from './resource-utils-dra'
 import { getNvidiaClusterPolicyStatus as _getNvidiaClusterPolicyStatus, getNvidiaClusterPolicyEnabledComponents as _getNvidiaClusterPolicyEnabledComponents, getNvidiaDriverStatus as _getNvidiaDriverStatus } from './resource-utils-nvidia'
 import { getClusterQueueStatus as _getClusterQueueStatus, getLocalQueueStatus as _getLocalQueueStatus, getKueueWorkloadStatus as _getKueueWorkloadStatus, getResourceFlavorStatus as _getResourceFlavorStatus, getAdmissionCheckStatus as _getAdmissionCheckStatus, getProvisioningRequestStatus as _getProvisioningRequestStatus } from './resource-utils-kueue'
@@ -2594,6 +2595,20 @@ export function getCellFilterValue(resource: any, column: string, kind: string):
     case 'mig':
       if (kindLower === 'nvidiaclusterpolicies') return resource.spec?.mig?.strategy || ''
       break
+    // Trivy keeps the scanned image under report.artifact, so the generic
+    // spec/status probe finds nothing and the header would offer a filter
+    // button that never populates.
+    case 'image':
+      if (kindLower === 'vulnerabilityreports' || kindLower === 'sbomreports'
+        || kindLower === 'clustersbomreports' || kindLower === 'exposedsecretreports') {
+        return _getVulnerabilityReportImage(resource)
+      }
+      break
+    case 'ruleTypes':
+      if (kindLower === 'kyvernopolicies' || kindLower === 'clusterpolicies') {
+        return _getKyvernoPolicyRuleTypes(resource)
+      }
+      break
     // The fallback would read spec.timeZone and yield '' for an undeclared
     // zone, so those rows would drop out of a filter the cell shows a value for.
     case 'timeZone':
@@ -2622,6 +2637,7 @@ export {
   getVulnerabilityReportSummary,
   getVulnerabilityReportStatus,
   getVulnerabilityReportImage,
+  getSbomReportImage,
   getVulnerabilityReportContainer,
   getConfigAuditReportSummary,
   getConfigAuditReportStatus,

package/src/components/resources/resources-column-filter.test.ts

@@ -1,4 +1,5 @@
 import { describe, it, expect } from 'vitest'
+import { getCellFilterValue } from './resource-utils'
 import { getCellFilterKind, hasCuratedColumns, isColumnFilterableByDistinctCount, normalizeKindToPlural, SKIP_FILTER_COLUMNS } from './ResourcesView'
 
 describe('isColumnFilterableByDistinctCount', () => {
@@ -98,3 +99,22 @@ describe('GPU ecosystem column routing', () => {
     expect(hasCuratedColumns('inferenceobjectives', 'example.io')).toBe(false)
   })
 })
+
+describe('filter values for columns whose data sits outside spec/status', () => {
+  // getCellFilterValue's fallback probes status[key]/spec[key]. A column whose
+  // value lives elsewhere needs an explicit case, or the header reserves a
+  // filter button that can never populate.
+  it('reads the scanned image out of the Trivy report', () => {
+    const report = {
+      report: { registry: { server: 'ghcr.io' }, artifact: { repository: 'acme/api', tag: 'v2' } },
+    }
+    for (const kind of ['vulnerabilityreports', 'sbomreports', 'clustersbomreports']) {
+      expect(getCellFilterValue(report, 'image', kind)).toContain('acme/api')
+    }
+  })
+
+  it('reads Kyverno rule types out of the rules array', () => {
+    const policy = { spec: { rules: [{ validate: {} }, { mutate: {} }] } }
+    expect(getCellFilterValue(policy, 'ruleTypes', 'clusterpolicies')).toBe('validate, mutate')
+  })
+})

package/src/components/topology/TopologyGraph.tsx

@@ -245,6 +245,23 @@ interface TopologyGraphProps {
   children?: ReactNode
 }
 
+// A pod group's children normally carry the health the server computed. Without
+// it, the phase is honest for every state except Running: a crash-looping pod
+// sits at Phase=Running with its container restarting, so that one case says
+// unknown rather than repeating the bug this fallback exists behind.
+export function phaseOnlyHealth(phase: string | undefined): HealthStatus {
+  switch (phase) {
+    case 'Failed':
+      return 'unhealthy'
+    case 'Pending':
+      return 'degraded'
+    case 'Succeeded':
+      return 'neutral'
+    default:
+      return 'unknown'
+  }
+}
+
 export function TopologyGraph({
   topology,
   viewMode,
@@ -430,7 +447,7 @@ export function TopologyGraph({
         // the kubelet's Waiting->Running oscillation, which the phase alone
         // hides — a crash-looping pod sits at Phase=Running. Deriving it here
         // again would rebuild that logic in a second place and get it wrong.
-        status: pod.status ?? 'unknown',
+        status: pod.status ?? phaseOnlyHealth(pod.phase),
         data: {
           ...podGroupNode.data,
           namespace: pod.namespace,

package/src/components/topology/pod-phase-fallback.test.ts

@@ -0,0 +1,24 @@
+import { describe, expect, it } from 'vitest'
+import { phaseOnlyHealth } from './TopologyGraph'
+
+// Only reached when the server sent no per-pod status — an older Radar behind a
+// newer embedding host. The point of the fallback is that it must not repeat the
+// bug it stands in for.
+describe('phaseOnlyHealth', () => {
+  it('does not call a Running pod healthy', () => {
+    // A crash-looping pod sits at Phase=Running with its container restarting,
+    // so Running is the one phase that hides a fault.
+    expect(phaseOnlyHealth('Running')).toBe('unknown')
+  })
+
+  it('reads the phases that are honest on their own', () => {
+    expect(phaseOnlyHealth('Failed')).toBe('unhealthy')
+    expect(phaseOnlyHealth('Pending')).toBe('degraded')
+    expect(phaseOnlyHealth('Succeeded')).toBe('neutral')
+  })
+
+  it('says nothing for a phase it does not recognise', () => {
+    expect(phaseOnlyHealth(undefined)).toBe('unknown')
+    expect(phaseOnlyHealth('SomeFuturePhase')).toBe('unknown')
+  })
+})

package/src/theme/components.css

@@ -228,6 +228,35 @@
     border-color: transparent;
   }
 
+  /* Colour-named accents carry no health meaning — they exist so an
+     informational badge can pick a hue without borrowing a status semantic.
+     A categorical badge (an admission verb, a policy action, a configured
+     mode) belongs here; only evidence about a resource's condition belongs on
+     .status-healthy / -degraded / -unhealthy. */
+  .status-green {
+    background-color: light-dark(rgba(34, 197, 94, 0.15), rgba(34, 197, 94, 0.2));
+    color: light-dark(#15803d, #4ade80);
+    border-color: transparent;
+  }
+
+  .status-red {
+    background-color: light-dark(rgba(239, 68, 68, 0.15), rgba(239, 68, 68, 0.2));
+    color: light-dark(#b91c1c, #f87171);
+    border-color: transparent;
+  }
+
+  .status-amber {
+    background-color: light-dark(rgba(234, 179, 8, 0.15), rgba(234, 179, 8, 0.2));
+    color: light-dark(#a16207, #facc15);
+    border-color: transparent;
+  }
+
+  .status-blue {
+    background-color: light-dark(rgba(59, 130, 246, 0.15), rgba(59, 130, 246, 0.2));
+    color: light-dark(#2563eb, #60a5fa);
+    border-color: transparent;
+  }
+
   .status-cyan {
     background-color: light-dark(rgba(6, 182, 212, 0.15), rgba(6, 182, 212, 0.2));
     color: light-dark(#0891b2, #22d3ee);

package/src/utils/badge-colors.ts

@@ -74,7 +74,7 @@ export const NODEPOOL_MODE_BADGE: Record<string, string> = {
 
 // Translucent gray badge for "inactive / unknown / pending / unset / disabled" states.
 // The de-facto fallback in renderers when no severity or category applies.
-export const BADGE_INACTIVE = 'bg-gray-500/20 text-gray-400'
+export const BADGE_INACTIVE = 'status-unknown'
 
 // Best practices category colors
 export const BP_CATEGORY_BADGE: Record<string, string> = {

package/src/utils/index.ts

@@ -7,6 +7,7 @@ export * from './navigation'
 export * from './context-name'
 export * from './animation'
 export * from './resource-hierarchy'
+export * from './log-export'
 export * from './log-format'
 export * from './download'
 export * from './clipboard'