@skyhook-io/k8s-ui 1.18.0 → 1.18.2

package/README.md

@@ -2,6 +2,13 @@
 
 Shared, source-distributed Kubernetes UI components used by Radar.
 
+## Toast updates
+
+`useToast().showToast(message, { id })` updates an existing toast with that ID
+in place and restarts its dismiss timer. Omit `id` for independent toasts.
+Set `duration: 0` to keep a progress toast visible until its result replaces it;
+omit `duration` on the result to use the normal dismiss time.
+
 ## Local terminal metadata
 
 `LocalTerminalTab` accepts optional `onSessionInfo` and `toolbarExtra` props.
@@ -42,6 +49,12 @@ resolve: {
 
 webpack 5 hosts need the same mapping in `resolve.alias`. Without it the build fails to resolve the worker import.
 
+## Resource read coverage
+
+`ResourceReadCoverage` describes the scope an answer covers (and `narrowedBy`, when the caller's access, Radar's pin or what Radar collects narrowed it), what Radar read of it, and coded gaps naming what it did not read and why. `READ_ACTIONS` / `readActionFor` say what resolves each code. `ResourceCoverage` additionally permits `unknown` in UI adapters for older Radar instances. It does not describe object freshness or count truncation.
+
+Pass list coverage through `ResourceQueryResult.coverage`, and per-kind count coverage through `ResourcesView.resourceCoverage` / `ResourcesSidebar.resourceCoverage`. Counts stay useful for sizing; a partial count displays as a lower bound and a partial zero does not hide a kind as empty; a category total is a lower bound when any of its kinds is partial or narrowed by what Radar collects. A complete list whose scope Radar's collection narrowed (`narrowedBy: ["namespace_collection"]`) gets a neutral note naming the collected namespaces. Unknown or absent coverage keeps the presentation that predates coverage. Partial list notices name the affected namespaces when the gap names at most three; larger or unnamed sets keep the compact wording. Loaded list counts retain their coverage when cached. `GitOpsTableView` accepts aggregate `coverageStatus` and `countsPartial` keys; hosts must combine coverage across every cluster/source contributing to the view, and a host that passes no `coverageStatus` gets the unqualified view. Keep source-specific metadata in the host rather than repeating it on every row.
+
 ## Resource kind views and certainty
 
 `ResourcesView.renderKindView(kind)` optionally replaces a kind's table while
@@ -70,3 +83,11 @@ tooltip. `certaintyGlyph` and `certaintyValueLabel` expose the same vocabulary.
 `ActionConfirmDialog` adds context, reviewed writes and optional typed acknowledgement to the simpler `ConfirmDialog`. Hosts own loading, permission checks, stale-fact validation and result classification. Its `result` binds the state (`error`, `unknown` or `partial`), message and optional heading; unknown and partial results lock another submit. Retain that result outside the dialog across dismissal and remount, and clear it only after explicitly reviewing current state. The component does not infer outcomes from HTTP status. Remount it when changing the reviewed target or action, so acknowledgement and disclosure state start fresh. The default error heading makes no claim about whether a write occurred; use a stronger result title only when the producer proves it.
 
 Existing CNPG primitive exports remain available and delegate to these shared implementations.
+
+`PrinterColumnDef.jsonPath` optionally carries source provenance from newer Radar servers. The UI does not evaluate it: values still come from the server's table converter. Without it, printer-cell tones stay generic. Crossplane pause qualification only recognizes exact Ready/Synced condition paths and corroborated annotation/condition evidence; same-named unrelated columns retain their normal tones. `ConditionTone` also supports opt-in `neutral`; `defaultConditionTone` retains its original return vocabulary. `ComposedRefStatus.pauseState` optionally supplies recorded Crossplane pause context for a composed-resource row.
+
+`ForceDeleteConfirmDialog.resourceData` optionally supplies the current object for Crossplane pause context. Paused MR/XR/Claim shapes holding a known Crossplane finalizer receive a cleanup warning; the prop does not change confirmation or force-delete behavior. YAML operation context uses the existing baseline and predicted manifests; removing a pause annotation requests resumption rather than proving it.
+
+`YamlReview.mode` distinguishes Apply, strict Create and Update (default: `apply`). Hosts using strict creation should pass `create` so an unpreviewable new document does not imply unknown live pause state. Crossplane operation context reports what the server preview actually keeps or clears; unsupported dry-run documents retain conditional uncertainty rather than treating submitted YAML as a live baseline.
+
+For a single editor target, `YamlReview.resourceData` may retain its raw condition evidence when the review YAML intentionally omits status. `EditableYamlView` binds that snapshot to its preview. It is not used to classify unrelated documents in a batch. Generic Apply with neither a known Crossplane shape nor raw acknowledged pause does not infer a resource’s controller from the annotation alone.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skyhook-io/k8s-ui",
-  "version": "1.18.0",
+  "version": "1.18.2",
   "repository": {
     "type": "git",
     "url": "https://github.com/skyhook-io/radar",

package/src/components/applications/ApplicationsView.tsx

@@ -46,6 +46,7 @@ import {
 import { ReadyBar } from './ReadyBar'
 import { ProvenanceBadge, ClassBadge, CategoryChip, VersionInfo, BatchSignalChip } from './AppChips'
 import { AppIdentityTooltip, EnvHint, RolloutSummaryTooltip } from './AppTooltips'
+import { FilterRailPanel } from '../shared/FilterRailPanel'
 
 function ApplicationRuntimeCell({ apps, workloadClass, ready, desired }: { apps: AppRow[]; workloadClass: AppWorkloadClass; ready: number; desired: number }) {
   if (workloadClass !== 'job') {
@@ -337,6 +338,7 @@ export function ApplicationsView({ entries: allEntries, variant, onSelect, title
   // showSystem lives in the Filters rail, so Clear resets it too (and its
   // non-default ON state counts as an active filter that surfaces the button).
   const anyFilterActive = filters.isActive
+  const activeFilterCount = fHealth.size + fClass.size + fType.size + fEnv.size + fSource.size + (systemCount > 0 && showSystem ? 1 : 0)
   const clearAllFilters = () => {
     filters.clearAll()
   }
@@ -355,7 +357,7 @@ export function ApplicationsView({ entries: allEntries, variant, onSelect, title
           actions={
             <>
               {headerActions}
-              <SummaryTile label={total === 1 ? 'application' : 'applications'} value={total} loading={initialLoading} />
+              <SummaryTile label={total === 1 ? 'application' : 'applications'} phoneLabel={total === 1 ? 'app' : 'apps'} value={total} loading={initialLoading} />
               {healthTile('unhealthy', 'error')}
               {healthTile('degraded', 'warning')}
               {healthTile('healthy', 'success')}
@@ -381,13 +383,12 @@ export function ApplicationsView({ entries: allEntries, variant, onSelect, title
             Arbitrary 900px breakpoint (not `sm`) so the collapse is independent of
             the consuming app's Tailwind breakpoint config (Hub uses defaults). */}
         <aside className="flex w-52 shrink-0 flex-col overflow-hidden border-r border-theme-border bg-theme-surface/90 max-[899px]:max-h-72 max-[899px]:w-full max-[899px]:border-b max-[899px]:border-r-0">
-          <div className="flex items-center justify-between border-b border-theme-border px-3 py-2">
-            <span className="text-sm font-medium text-theme-text-secondary">Filters</span>
-            {anyFilterActive && (
+          <FilterRailPanel
+            activeCount={activeFilterCount}
+            clear={anyFilterActive && (
               <button type="button" onClick={clearAllFilters} className="text-[10px] font-medium text-blue-500 hover:text-blue-400">Clear</button>
             )}
-          </div>
-          <div className="flex-1 overflow-y-auto">
+          >
             {initialLoading ? (
               <BoardRailSkeleton
                 sections={[
@@ -414,7 +415,7 @@ export function ApplicationsView({ entries: allEntries, variant, onSelect, title
             )}
               </>
             )}
-          </div>
+          </FilterRailPanel>
         </aside>
 
         {/* Content: toolbar (search + sort) over the scrollable table. */}

package/src/components/cluster-switcher/ClusterSwitcher.tsx

@@ -12,6 +12,7 @@ import { ClusterName } from '../ui/ClusterName'
 import { Input } from '../ui/Input'
 import { MiddleEllipsis } from '../ui/MiddleEllipsis'
 import { StatusDot, type StatusTone } from '../ui/status-tone'
+import { useKeepInViewport } from '../../hooks/useKeepInViewport'
 
 export interface ClusterSwitcherItem {
   id: string
@@ -107,6 +108,8 @@ export const ClusterSwitcher = forwardRef<ClusterSwitcherHandle, ClusterSwitcher
   const [highlightedIndex, setHighlightedIndex] = useState(-1)
   const rootRef = useRef<HTMLDivElement>(null)
   const searchInputRef = useRef<HTMLInputElement>(null)
+  const menuRef = useRef<HTMLDivElement>(null)
+  useKeepInViewport(menuRef, isOpen)
 
   useImperativeHandle(ref, () => ({
     open: () => {
@@ -284,6 +287,7 @@ export const ClusterSwitcher = forwardRef<ClusterSwitcherHandle, ClusterSwitcher
 
       {isOpen && (
         <div
+          ref={menuRef}
           className={`absolute top-full ${positionClass} mt-1 z-50 min-w-[280px] max-w-[420px] bg-theme-surface border border-theme-border-light rounded-lg shadow-xl overflow-hidden`}
         >
           {searchable && (

package/src/components/compare/CompareResourcePicker.tsx

@@ -1,4 +1,4 @@
-import { useEffect, useMemo, useRef, useState, useId } from 'react'
+import { useEffect, useMemo, useRef, useState, useId, type ReactNode } from 'react'
 import { clsx } from 'clsx'
 import { GitCompare, Search, X } from 'lucide-react'
 import { DialogPortal } from '../ui/DialogPortal'
@@ -18,6 +18,11 @@ export interface CompareResourcePickerProps {
   sourceSide?: CompareSide
   /** Candidate resources — same kind as source. Source is filtered out automatically. */
   candidates: CompareResourceRef[]
+  /** Says the candidate list may be incomplete; shown as a warning above it. */
+  coverageNote?: ReactNode
+  /** Says the list covers only the namespaces Radar collects; shown neutrally.
+   *  Ignored when coverageNote is set. */
+  scopeNote?: ReactNode
   loading?: boolean
   error?: unknown
   onPick: (r: CompareResourceRef) => void
@@ -30,6 +35,8 @@ export function CompareResourcePicker({
   sourceSide = 'a',
   candidates,
   loading,
+  coverageNote,
+  scopeNote,
   error,
   onPick,
 }: CompareResourcePickerProps) {
@@ -133,6 +140,9 @@ export function CompareResourcePicker({
         </div>
       </div>
 
+      {coverageNote
+        ? <div role="status" className="px-4 py-2 text-xs text-warning-text border-b border-theme-border">{coverageNote}</div>
+        : scopeNote && <div role="status" className="px-4 py-2 text-xs text-theme-text-tertiary border-b border-theme-border">{scopeNote}</div>}
       <div className="flex-1 min-h-0 overflow-y-auto">
         {loading && (
           <div className="flex items-center justify-center py-8 text-theme-text-secondary text-sm">
@@ -146,9 +156,13 @@ export function CompareResourcePicker({
         )}
         {!loading && error == null && filtered.length === 0 && (
           <div className="flex flex-col items-center justify-center py-12 text-theme-text-tertiary text-sm gap-1">
-            {candidates.length <= 1
-              ? `No other ${source.kind} available to compare against.`
-              : 'No matches.'}
+            {candidates.length > 1
+              ? 'No matches.'
+              : coverageNote
+                ? `No other ${source.kind} found in what Radar could read.`
+                : scopeNote
+                  ? `No other ${source.kind} found in the collected namespaces.`
+                  : `No other ${source.kind} available to compare against.`}
           </div>
         )}
         {!loading && error == null && filtered.length > 0 && (

package/src/components/compare/ResourceCompareView.tsx

@@ -5,6 +5,7 @@ import { YamlDiffEditor } from '../ui/YamlEditor'
 import { PaneLoader } from '../ui/PaneLoader'
 import { Tooltip } from '../ui/Tooltip'
 import { pluralToKind } from '../../utils/navigation'
+import { usePhoneLayout } from '../../hooks/usePhoneLayout'
 import { toComparableYaml } from './normalize'
 import { SIDE_TONES, type CompareSide } from './types'
 
@@ -120,7 +121,10 @@ export function ResourceCompareView({
   bleed = false,
 }: ResourceCompareViewProps) {
   const [specOnly, setSpecOnly] = useState(false)
-  const [unified, setUnified] = useState(false)
+  const [unifiedPicked, setUnified] = useState(false)
+  // Two side-by-side panes don't fit a phone, so phones always get one column.
+  const isPhone = usePhoneLayout()
+  const unified = unifiedPicked || isPhone
   const [hideUnchanged, setHideUnchanged] = useState(true)
   const [rawMetadata, setRawMetadata] = useState(false)
 
@@ -180,7 +184,7 @@ export function ResourceCompareView({
           <ToggleButton active={rawMetadata} onClick={() => setRawMetadata(v => !v)} icon={<Sparkles className="w-3.5 h-3.5" />} label="Raw metadata" tooltip="Keep server-assigned noise (uid, resourceVersion, managedFields, last-applied)" />
           <ToggleButton active={specOnly} onClick={() => setSpecOnly(v => !v)} icon={<FileCode2 className="w-3.5 h-3.5" />} label="Spec only" tooltip="Drop status fields from both sides" />
           <ToggleButton active={hideUnchanged} onClick={() => setHideUnchanged(v => !v)} icon={<FileText className="w-3.5 h-3.5" />} label="Diff only" tooltip="Collapse unchanged regions" />
-          <ToggleButton active={unified} onClick={() => setUnified(v => !v)} icon={<Rows className="w-3.5 h-3.5" />} label="Unified" tooltip="Switch between side-by-side and single-column" />
+          {!isPhone && <ToggleButton active={unified} onClick={() => setUnified(v => !v)} icon={<Rows className="w-3.5 h-3.5" />} label="Unified" tooltip="Switch between side-by-side and single-column" />}
         </div>
 
         <div className="w-px h-5 bg-theme-border shrink-0" aria-hidden />

package/src/components/gitops/GitOpsDetailLayout.test.tsx

@@ -0,0 +1,64 @@
+import { describe, expect, it } from 'vitest'
+import { renderToString } from 'react-dom/server'
+import { GitOpsDetailLayout, type GitOpsDetailLayoutProps } from './GitOpsDetailLayout'
+
+const noop = () => {}
+
+const shell: Omit<GitOpsDetailLayoutProps, 'identity' | 'isArgoApp'> = {
+  status: null,
+  terminating: false,
+  terminatingChipTooltip: '',
+  terminatingActionTooltip: '',
+  insight: null,
+  insightLoading: false,
+  isFlux: false,
+  isFluxWorkload: false,
+  activeTab: 'topology',
+  onTabChange: noop,
+  fullscreen: false,
+  onToggleFullscreen: noop,
+  renderTabBody: () => null,
+  onNavigateRoot: noop,
+}
+
+describe('GitOpsDetailLayout', () => {
+  it('shows the tool chip, facts and Argo operations for an Argo CD Application', () => {
+    const html = renderToString(
+      <GitOpsDetailLayout
+        {...shell}
+        identity={{ kind: 'applications', group: 'argoproj.io', namespace: 'shop', name: 'wordpress', toolLabel: 'ArgoCD', kindLabel: 'Application' }}
+        detail={{ project: 'default', destination: 'in-cluster' }}
+        isArgoApp
+        argo={{
+          onSyncRequested: noop, onRefresh: noop, onTerminate: noop, onSuspend: noop, onResume: noop,
+          syncing: false, refreshing: false, refreshingKind: 'normal', terminating: false, suspending: false, resuming: false,
+          isRunning: false, autoSyncEnabled: false,
+        }}
+      />,
+    )
+    expect(html).toContain('ArgoCD')
+    expect(html).toContain('Project')
+    expect(html).toContain('Sync…')
+  })
+
+  // A root that is not a GitOps resource gets one state: its name and why
+  // there is no GitOps view, with no tool label, facts or operations.
+  it('shows only the refusal for a root that is not a GitOps resource', () => {
+    const message = 'Application.app.k8s.io shop/wordpress is not a supported Argo CD or Flux resource, so it has no GitOps view'
+    const html = renderToString(
+      <GitOpsDetailLayout
+        {...shell}
+        identity={{ kind: 'applications', group: 'app.k8s.io', namespace: 'shop', name: 'wordpress', kindLabel: 'Application' }}
+        isArgoApp={false}
+        resourceError={new Error(message)}
+      />,
+    )
+    expect(html).toContain('wordpress')
+    expect(html).toContain(message)
+    expect(html).not.toContain('ArgoCD')
+    expect(html).not.toContain('FluxCD')
+    expect(html).not.toContain('Project')
+    expect(html).not.toContain('Sync…')
+    expect(html).not.toContain('Reconcile')
+  })
+})

package/src/components/gitops/GitOpsDetailLayout.tsx

@@ -20,8 +20,9 @@ export interface GitOpsDetailIdentity {
   name: string
   // toolLabel: "ArgoCD" | "FluxCD" — passed through as a chip; kept as a
   // free string so future tools (Komodor, Argo Workflows, etc.) don't need
-  // an enum bump here.
-  toolLabel: string
+  // an enum bump here. Omitted for a root that is not a GitOps resource,
+  // which hides the tool/kind chip.
+  toolLabel?: string
   // kindLabel: human-facing kind (e.g. "Application"). Caller does the
   // lookup against its API resource catalog.
   kindLabel: string
@@ -117,7 +118,9 @@ export interface GitOpsDetailLayoutProps {
   terminatingActionTooltip: string
 
   // Spec/config row
-  detail: GitOpsDetailMetadata
+  // Omitted for a root that is not a GitOps resource, which hides the
+  // spec/config facts row.
+  detail?: GitOpsDetailMetadata
 
   // Insights — drives StatusStrip + IssuesBand
   insight: GitOpsInsight | null
@@ -334,9 +337,11 @@ export function GitOpsDetailLayout(props: GitOpsDetailLayoutProps) {
                     </span>
                   </Tooltip>
                 )}
-                <span className="inline-flex shrink-0 items-center rounded border border-theme-border bg-theme-hover/50 px-1.5 py-0.5 text-[11px] font-medium text-theme-text-secondary">
-                  {identity.toolLabel} · {identity.kindLabel}
-                </span>
+                {identity.toolLabel && (
+                  <span className="inline-flex shrink-0 items-center rounded border border-theme-border bg-theme-hover/50 px-1.5 py-0.5 text-[11px] font-medium text-theme-text-secondary">
+                    {identity.toolLabel} · {identity.kindLabel}
+                  </span>
+                )}
                 {isFleetContext && destinationCluster && (
                   // Cross-cluster lineage chip — fleet-only. Renders the
                   // destination cluster alongside the tool/kind chip so
@@ -350,14 +355,16 @@ export function GitOpsDetailLayout(props: GitOpsDetailLayoutProps) {
                 )}
               </div>
               {/* Spec/config row */}
-              <div className="mt-2 flex flex-wrap gap-x-5 gap-y-0.5 text-[11px] text-theme-text-tertiary">
-                <AppFact label="Project" value={detail.project || '-'} />
-                {detail.repository && <AppFact label="Source" value={detail.repository} />}
-                {detail.path && <AppFact label="Path" value={detail.path} />}
-                {detail.chart && <AppFact label="Chart" value={detail.chart} />}
-                <AppFact label="Destination" value={detail.destination || '-'} />
-                {detail.autoSyncMode && <AppFact label="Sync mode" value={detail.autoSyncMode} />}
-              </div>
+              {detail && (
+                <div className="mt-2 flex flex-wrap gap-x-5 gap-y-0.5 text-[11px] text-theme-text-tertiary">
+                  <AppFact label="Project" value={detail.project || '-'} />
+                  {detail.repository && <AppFact label="Source" value={detail.repository} />}
+                  {detail.path && <AppFact label="Path" value={detail.path} />}
+                  {detail.chart && <AppFact label="Chart" value={detail.chart} />}
+                  <AppFact label="Destination" value={detail.destination || '-'} />
+                  {detail.autoSyncMode && <AppFact label="Sync mode" value={detail.autoSyncMode} />}
+                </div>
+              )}
             </div>
             {/* Action buttons */}
             <div className="flex flex-wrap items-center gap-2">
@@ -518,7 +525,7 @@ export function GitOpsDetailLayout(props: GitOpsDetailLayoutProps) {
       {resourceLoading ? (
         <PaneLoader label="Loading GitOps resource…" className="flex-1" />
       ) : resourceError ? (
-        <div className="p-4 text-sm text-red-500">Failed to load resource: {resourceError.message}</div>
+        <div className="p-4 text-sm text-red-500">Failed to load GitOps view: {resourceError.message}</div>
       ) : (
         <div className={bodyShellClass}>
           <div className="flex shrink-0 items-center justify-between gap-3 border-b border-theme-border bg-theme-base px-4 py-2">

package/src/components/gitops/GitOpsTableView.coverage.test.tsx

@@ -0,0 +1,27 @@
+import { describe, expect, it } from 'vitest'
+import { renderToString } from 'react-dom/server'
+import { GitOpsTableView } from './GitOpsTableView'
+
+const render = (props: Partial<Parameters<typeof GitOpsTableView>[0]> = {}) =>
+  renderToString(<GitOpsTableView rows={[]} counts={{}} onRowClick={() => {}} {...props} />)
+
+describe('GitOpsTableView coverage', () => {
+  it('shows the onboarding state to a host that passes no coverage, as before coverage', () => {
+    expect(render()).toContain('No GitOps resources detected')
+    expect(render({ coverageStatus: 'complete' })).toContain('No GitOps resources detected')
+  })
+  it('keeps the unqualified labels and empty text for unknown coverage', () => {
+    const html = render({ coverageStatus: 'unknown', counts: { 'argoproj.io/Application': 2 } })
+    expect(html).toContain('Total Applications')
+    expect(html).toContain('No applications found.')
+    expect(html).not.toContain('Partial results')
+  })
+  it('says what a complete empty answer covers', () => {
+    expect(render({ coverageStatus: 'complete', counts: { 'argoproj.io/Application': 2 } })).toContain('No applications found in the requested scope.')
+  })
+  it('does not call a partial answer empty', () => {
+    const html = render({ coverageStatus: 'partial' })
+    expect(html).not.toContain('No GitOps resources detected')
+    expect(html).toContain('Partial results')
+  })
+})

package/src/components/gitops/GitOpsTableView.tsx

@@ -41,6 +41,7 @@ import { toggleSet } from './GitOpsGraphFilterRail'
 import { useFilterState, defineFilterSchema } from '../../filter-state'
 import { parseContextName } from '../../utils/context-name'
 import { formatCompactAge, formatRelativeAgeTime } from '../../utils/format'
+import { FilterRailPanel } from '../shared/FilterRailPanel'
 
 // =============================================================================
 // GitOpsTableView — the canonical GitOps fleet list (Argo + Flux).
@@ -202,7 +203,13 @@ export interface GitOpsTableViewProps {
   // counts keyed "group/Kind" — e.g. "argoproj.io/Application" → 17. Drives
   // the Scope-section mode tabs and the empty-state check.
   counts: Record<string, number>
+  // Read coverage of `rows`, combined across every source and cluster that
+  // contributes to them. `unknown` (the default) keeps the presentation that
+  // predates coverage; only `partial` qualifies the view.
+  coverageStatus?: 'complete' | 'partial' | 'unknown'
   countsUnavailable?: string[]
+  // Count keys whose counts are lower bounds.
+  countsPartial?: string[]
   // @deprecated Superseded by `freshnessSlot` — kept for source compatibility
   // with existing consumers; no longer drives any affordance here.
   onRefresh?: () => void
@@ -305,6 +312,8 @@ export function GitOpsTableView({
   error,
   counts,
   countsUnavailable,
+  countsPartial,
+  coverageStatus = 'unknown',
   freshnessSlot,
   onRowClick,
   rowHrefFor,
@@ -403,6 +412,13 @@ export function GitOpsTableView({
     projects: counts['argoproj.io/AppProject'] ?? 0,
     alerts: counts['notification.toolkit.fluxcd.io/Alert'] ?? 0,
   }
+  const partialCountKeys = new Set(countsPartial ?? [])
+  const modeCountsPartial: Record<GitOpsMode, boolean> = {
+    applications: coverageStatus === 'partial',
+    sources: ['source.toolkit.fluxcd.io/GitRepository', 'source.toolkit.fluxcd.io/OCIRepository', 'source.toolkit.fluxcd.io/HelmRepository'].some(key => partialCountKeys.has(key)),
+    projects: partialCountKeys.has('argoproj.io/AppProject'),
+    alerts: partialCountKeys.has('notification.toolkit.fluxcd.io/Alert'),
+  }
   const totalGitOps = Object.entries(counts).reduce(
     (sum, [key, n]) => sum + (isGitOpsCountKey(key) ? n : 0),
     0,
@@ -548,7 +564,7 @@ export function GitOpsTableView({
   // Also require zero actual rows: the cold-cache retry can populate `rows`
   // before the separate counts map catches up, and a populated table must not
   // be hidden behind a "nothing here" screen.
-  if (totalGitOps === 0 && allRowsInput.length === 0 && !loading && !hasGlobalNamespaceFilter && !hasUnavailableGitOpsCounts) {
+  if (totalGitOps === 0 && allRowsInput.length === 0 && !loading && !hasGlobalNamespaceFilter && !hasUnavailableGitOpsCounts && coverageStatus !== 'partial') {
     return (
       <div className="flex h-full min-h-0 flex-1 items-start justify-center bg-theme-base px-4 pb-4 pt-[22vh]">
         <div className="rounded-lg border border-theme-border bg-theme-surface p-8 text-center">
@@ -580,7 +596,7 @@ export function GitOpsTableView({
   const summaryTiles: SummaryTileSpec[] = [
     {
       key: 'total',
-      label: 'Total Applications',
+      label: coverageStatus === 'partial' ? 'Observed Applications' : 'Total Applications',
       value: allRows.length,
       tone: 'neutral',
       active: noOtherFiltersActive(),
@@ -678,6 +694,7 @@ export function GitOpsTableView({
         mode={mode}
         onModeChange={setMode}
         modeCounts={modeCounts}
+        modeCountsPartial={modeCountsPartial}
         syncCounts={syncCounts}
         syncFilters={syncFilters}
         onToggleSync={(value) => filters.toggle('sync', value)}
@@ -790,6 +807,10 @@ export function GitOpsTableView({
           </div>
         </div>
 
+        {coverageStatus === 'partial' && (
+          <p role="status" className="px-4 py-2 text-xs text-warning-text border-b border-theme-border">Partial results. Radar couldn't read every namespace for some GitOps resources or sources, so counts are lower bounds.</p>
+        )}
+
         {/* pb-20 keeps the last row (and its three-dot menu) scrollable clear
             of the app's fixed bottom-right overlay buttons; without the slack
             the bottom row's action trigger sits under them and can't be clicked
@@ -806,7 +827,7 @@ export function GitOpsTableView({
             <div className="p-4 text-sm text-red-500">Failed to load GitOps applications: {error.message}</div>
           ) : filteredRows.length === 0 ? (
             <div className="flex h-full flex-col items-center justify-center gap-3 text-sm text-theme-text-secondary">
-              <p>{allRows.length === 0 && !hasGlobalNamespaceFilter ? 'No applications found.' : 'No applications match the current filters.'}</p>
+              <p>{noApplicationsMessage(allRows.length > 0, coverageStatus, hasGlobalNamespaceFilter)}</p>
               {hasGlobalNamespaceFilter && globalNamespaces && (
                 <p className="text-xs text-theme-text-tertiary">
                   Viewing {globalNamespaces.length === 1 ? `namespace: ${globalNamespaces[0]}` : `${globalNamespaces.length} namespaces`}
@@ -857,6 +878,7 @@ function GitOpsFilterSidebar({
   mode,
   onModeChange,
   modeCounts,
+  modeCountsPartial,
   syncCounts,
   syncFilters,
   onToggleSync,
@@ -884,6 +906,7 @@ function GitOpsFilterSidebar({
   mode: GitOpsMode
   onModeChange: (mode: GitOpsMode) => void
   modeCounts: Record<GitOpsMode, number>
+  modeCountsPartial: Record<GitOpsMode, boolean>
   syncCounts: Map<string, number>
   syncFilters: Set<string>
   onToggleSync: (value: string) => void
@@ -915,13 +938,17 @@ function GitOpsFilterSidebar({
         side === 'right' ? 'border-l max-[899px]:border-l-0' : 'border-r max-[899px]:border-r-0'
       }`}
     >
-      <div className="flex items-center justify-between border-b border-theme-border px-3 py-2">
-        <span className="text-sm font-medium text-theme-text-secondary">Filters</span>
-        <button type="button" onClick={onClear} className="text-[10px] font-medium text-blue-500 hover:text-blue-400">
-          Clear
-        </button>
-      </div>
-      <div className="flex-1 overflow-y-auto">
+      <FilterRailPanel
+        activeCount={
+          syncFilters.size + healthFilters.size + automationFilters.size + kindFilters.size +
+          projectFilters.size + namespaceFilters.size + (lifecycleFilter === 'all' ? 0 : 1)
+        }
+        clear={
+          <button type="button" onClick={onClear} className="text-[10px] font-medium text-blue-500 hover:text-blue-400">
+            Clear
+          </button>
+        }
+      >
         {loading ? (
           <BoardRailSkeleton
             sections={[
@@ -949,7 +976,7 @@ function GitOpsFilterSidebar({
                 }`}
               >
                 <div className="font-medium">{modeLabel(item)}</div>
-                <div className={mode === item ? 'text-white/70' : 'text-theme-text-tertiary'}>{modeCounts[item]}</div>
+                <div className={mode === item ? 'text-white/70' : 'text-theme-text-tertiary'}>{modeCountsPartial[item] ? '≥' : ''}{modeCounts[item]}</div>
               </button>
             ))}
           </div>
@@ -1040,7 +1067,7 @@ function GitOpsFilterSidebar({
         </GitOpsFilterSection>
           </>
         )}
-      </div>
+      </FilterRailPanel>
     </aside>
   )
 }
@@ -1882,6 +1909,13 @@ function countMap(values: string[]) {
   return counts
 }
 
+function noApplicationsMessage(hasRows: boolean, coverageStatus: GitOpsTableViewProps['coverageStatus'], namespaceFiltered: boolean): string {
+  if (hasRows) return 'No applications match the current filters.'
+  if (coverageStatus === 'complete') return 'No applications found in the requested scope.'
+  if (coverageStatus === 'partial') return 'No applications found in the namespaces Radar could read.'
+  return namespaceFiltered ? 'No applications match the current filters.' : 'No applications found.'
+}
+
 function countLabels(rows: GitOpsRow[]) {
   const counts = new Map<string, number>()
   for (const row of rows) {

package/src/components/gitops/detail-helpers.test.ts

@@ -5,6 +5,7 @@ import {
   formatGitOpsSourceUrl,
   getGitOpsResourceStatus,
   getGitOpsTool,
+  gitOpsDetailGroup,
   isDestinationRef,
   parseArgoRollbackID,
 } from './detail-helpers'
@@ -75,26 +76,47 @@ describe('formatGitOpsSourceUrl', () => {
 })
 
 describe('getGitOpsTool', () => {
-  // Group is the canonical discriminator.
-  test('Argo via group', () => {
+  // The API group decides, the same rule as the backend (pkg/gitops ToolFor).
+  test('Argo CD kinds in argoproj.io', () => {
     expect(getGitOpsTool('applications', 'argoproj.io')).toBe('argo')
     expect(getGitOpsTool('applicationsets', 'argoproj.io')).toBe('argo')
     expect(getGitOpsTool('appprojects', 'argoproj.io')).toBe('argo')
   })
-  // Argo kinds without an explicit group still route to 'argo'.
-  // Defends against a normalizer that drops `group` from the frontend payload.
-  test('Argo kinds without group still route to argo', () => {
-    expect(getGitOpsTool('applications', undefined)).toBe('argo')
-    expect(getGitOpsTool('applicationsets', '')).toBe('argo')
-  })
-  // Flux kinds with their canonical groups.
-  test('Flux via group', () => {
+  test('Flux groups', () => {
     expect(getGitOpsTool('kustomizations', 'kustomize.toolkit.fluxcd.io')).toBe('flux')
     expect(getGitOpsTool('helmreleases', 'helm.toolkit.fluxcd.io')).toBe('flux')
+    expect(getGitOpsTool('gitrepositories', 'source.toolkit.fluxcd.io')).toBe('flux')
+  })
+  // SIG Apps defines its own Application kind; offering Argo Sync on it
+  // would sync a same-named argoproj.io Application instead.
+  test('an Application outside argoproj.io is not Argo CD', () => {
+    expect(getGitOpsTool('applications', 'app.k8s.io')).toBeNull()
+    expect(getGitOpsTool('applications', 'source.toolkit.fluxcd.io')).toBeNull()
+    expect(getGitOpsTool('kustomizations', 'source.toolkit.fluxcd.io')).toBeNull()
+    expect(getGitOpsTool('helmreleases', 'kustomize.toolkit.fluxcd.io')).toBeNull()
+  })
+  // argoproj.io is shared with Argo Rollouts and Workflows.
+  test('other argoproj.io kinds are not Argo CD', () => {
+    expect(getGitOpsTool('rollouts', 'argoproj.io')).toBeNull()
+    expect(getGitOpsTool('workflows', 'argoproj.io')).toBeNull()
+  })
+  // The kind alone is not identity, and nothing defaults to Flux.
+  test('no group or an unknown group is not GitOps', () => {
+    expect(getGitOpsTool('applications', undefined)).toBeNull()
+    expect(getGitOpsTool('applicationsets', '')).toBeNull()
+    expect(getGitOpsTool('somecustomresource', 'unknown.io')).toBeNull()
+    expect(getGitOpsTool('applications', 'notargoproj.io')).toBeNull()
+    expect(getGitOpsTool('kustomizations', 'fake.kustomize.toolkit.fluxcd.io')).toBeNull()
+  })
+})
+
+describe('gitOpsDetailGroup', () => {
+  test('the loaded object\'s apiVersion wins over the route group', () => {
+    expect(gitOpsDetailGroup('argoproj.io', { apiVersion: 'app.k8s.io/v1beta1' })).toBe('app.k8s.io')
   })
-  // Unknown kinds default to flux (matches the OSS fall-through).
-  test('unknown kind defaults to flux', () => {
-    expect(getGitOpsTool('somecustomresource', 'unknown.io')).toBe('flux')
+  test('the route group stands in until the object loads', () => {
+    expect(gitOpsDetailGroup('app.k8s.io', undefined)).toBe('app.k8s.io')
+    expect(gitOpsDetailGroup('argoproj.io', {})).toBe('argoproj.io')
   })
 })
 
@@ -181,3 +203,26 @@ describe('isDestinationRef', () => {
     expect(isDestinationRef(null, true, { group: 'apps', kind: 'Deployment', namespace: 'prod', name: 'billing' })).toBe(true)
   })
 })
+
+describe('GitOps status identity', () => {
+  test.each([
+    ['applications', 'app.k8s.io/v1beta1'],
+    ['applicationsets', 'vendor.io/v1'],
+    ['kustomizations', 'source.toolkit.fluxcd.io/v1'],
+    ['helmreleases', 'vendor.helm.toolkit.fluxcd.io/v1'],
+  ])('does not interpret foreign %s status from %s', (kind, apiVersion) => {
+    expect(getGitOpsResourceStatus(kind, {
+      apiVersion,
+      status: { sync: { status: 'Synced' }, health: { status: 'Healthy' }, conditions: [{ type: 'Ready', status: 'True' }] },
+    })).toBeNull()
+  })
+
+  test('preserves existing controller-specific status-only callers', () => {
+    expect(getGitOpsResourceStatus('applications', { status: { sync: { status: 'Synced' }, health: { status: 'Healthy' } } })?.sync).toBe('Synced')
+    expect(getGitOpsResourceStatus('kustomizations', { status: { conditions: [{ type: 'Ready', status: 'True' }] } })?.health).toBe('Healthy')
+  })
+
+  test('does not interpret an AppProject as a Flux resource', () => {
+    expect(getGitOpsResourceStatus('appprojects', { apiVersion: 'argoproj.io/v1alpha1', status: { conditions: [{ type: 'Ready', status: 'True' }] } })).toBeNull()
+  })
+})