@skyhook-io/radar-app 1.11.0 → 1.12.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skyhook-io/radar-app",
-  "version": "1.11.0",
+  "version": "1.12.2",
   "description": "Radar's full web UI as a reusable React component. Used by Radar's own binary and by external consumers like Radar Cloud.",
   "repository": {
     "type": "git",
@@ -30,7 +30,7 @@
   },
   "dependencies": {
     "@fontsource-variable/dm-sans": "^5.2.8",
-    "@fontsource/dm-mono": "^5.2.7",
+    "@fontsource/dm-mono": "^5.3.0",
     "@monaco-editor/react": "^4.7.0",
     "diff": "^9.0.0",
     "monaco-editor": "0.55.1",
@@ -41,7 +41,7 @@
     "yaml": "^2.9.0"
   },
   "peerDependencies": {
-    "@skyhook-io/k8s-ui": ">=1.13.0",
+    "@skyhook-io/k8s-ui": ">=1.14.0",
     "@tanstack/react-query": ">=5",
     "@xyflow/react": ">=12.0.0",
     "clsx": ">=2",
@@ -62,7 +62,7 @@
     "@types/node": "^26.2.0",
     "@types/react": "^19.2.18",
     "@types/react-dom": "^19.2.3",
-    "@vitejs/plugin-react": "^6.0.4",
+    "@vitejs/plugin-react": "^6.1.0",
     "@xyflow/react": "^12.11.2",
     "clsx": "^2.1.1",
     "elkjs": "^0.11.1",
@@ -70,8 +70,8 @@
     "eslint-plugin-react-hooks": "^7.1.1",
     "eslint-plugin-react-refresh": "^0.5.3",
     "globals": "^17.9.0",
-    "lucide-react": "^1.30.0",
-    "postcss": "^8.5.25",
+    "lucide-react": "^1.33.0",
+    "postcss": "^8.5.26",
     "prettier": "^3.9.5",
     "react": "^19.2.8",
     "react-dom": "^19.2.8",
@@ -79,7 +79,7 @@
     "tailwind-merge": "^3.6.0",
     "tailwindcss": "^4.3.3",
     "typescript": "^6.0.2",
-    "typescript-eslint": "^8.62.0",
+    "typescript-eslint": "^8.67.0",
     "vite": "^8.2.1"
   },
   "sideEffects": [

package/src/App.tsx

@@ -1664,8 +1664,9 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
       {/* `relative` makes this column the containing block for the absolute
           overlays it hosts (BottomDock, expanded ResourceDetailDrawer) so they
           span the content area AFTER the rail rather than the full viewport
-          under it. `fixed` splashes (connecting/switching) are unaffected. */}
-      <div className="relative flex flex-col flex-1 min-w-0 h-full">
+          under it. Horizontal clipping keeps translated-offscreen drawers from
+          contributing document overflow. `fixed` splashes are unaffected. */}
+      <div className="relative flex flex-col flex-1 min-w-0 h-full overflow-x-clip">
       {/* Header — suppressed in chromeless embed; the host owns the chrome.
           @container: the header's responsive layout keys off its OWN width (≈ viewport
           − nav rail), not the viewport, so it collapses gracefully on narrow windows.

package/src/api/client.ts

@@ -481,6 +481,12 @@ export interface UpgradeReadinessResponse {
   currentVersion: string
   targetVersion: string
   reviewedThrough: string
+  // When the underlying scan ran. The server memoizes scans (~60s), so a
+  // response can be older than the fetch that returned it — surface this,
+  // not dataUpdatedAt, as the scan time.
+  observedAt: string
+  scanId: string
+  fromCache?: boolean
   verdict: UpgradeReadinessVerdict
   summary: { blocked: number; warnings: number; reviews: number; passed: number; unknown: number; notApplicable: number; findings: number }
   checks: UpgradeReadinessCheck[]
@@ -590,15 +596,28 @@ export function useAudit(namespaces: string[] = []) {
 }
 
 export function useUpgradeReadiness(target?: string) {
-  const params = new URLSearchParams()
-  if (target) params.set('target', target)
-  const query = params.toString()
-  return useQuery<UpgradeReadinessResponse>({
+  // The server memoizes scans per caller (~60s). Ordinary and background
+  // refetches read that memo; only the explicit manual refresh passes
+  // refresh=true to force a fresh live scan (e.g. after fixing a finding).
+  const forceRefresh = useRef(false)
+  const query = useQuery<UpgradeReadinessResponse>({
     queryKey: ['upgrade-readiness', target ?? 'next'],
-    queryFn: ({ signal }) => fetchJSON(`/upgrade-readiness${query ? `?${query}` : ''}`, signal),
+    queryFn: ({ signal }) => {
+      const params = new URLSearchParams()
+      if (target) params.set('target', target)
+      if (forceRefresh.current) params.set('refresh', 'true')
+      forceRefresh.current = false
+      const qs = params.toString()
+      return fetchJSON(`/upgrade-readiness${qs ? `?${qs}` : ''}`, signal)
+    },
     staleTime: 30000,
     placeholderData: (previous) => previous,
   })
+  const refreshScan = () => {
+    forceRefresh.current = true
+    return query.refetch()
+  }
+  return { ...query, refreshScan }
 }
 
 // Live cluster Issues — the grouped triage queue (radar's /api/issues =
@@ -937,6 +956,7 @@ export interface OpenCostWorkloadCost {
 export interface OpenCostWorkloadResponse {
   available: boolean;
   reason?: CostUnavailableReason;
+  currency?: string;
   namespace: string;
   workloads: OpenCostWorkloadCost[];
 }
@@ -964,6 +984,7 @@ export function useOpenCostWorkloads(
 export interface OpenCostWorkloadDetailResponse {
   available: boolean;
   reason?: CostUnavailableReason;
+  currency?: string;
   namespace: string;
   kind: string;
   name: string;
@@ -1008,6 +1029,7 @@ export interface OpenCostTrendSeries {
 export interface OpenCostTrendResponse {
   available: boolean;
   reason?: CostUnavailableReason;
+  currency?: string;
   range: string;
   series?: OpenCostTrendSeries[];
 }
@@ -1029,6 +1051,7 @@ export function useOpenCostTrend(range_: CostTimeRange = "24h") {
 export interface OpenCostWorkloadTrendResponse {
   available: boolean;
   reason?: CostUnavailableReason;
+  currency?: string;
   namespace: string;
   kind: string;
   name: string;
@@ -1101,6 +1124,7 @@ export interface OpenCostApplicationWorkloadCost extends OpenCostApplicationWork
 export interface OpenCostApplicationCostResponse {
   available: boolean;
   reason?: CostUnavailableReason;
+  currency?: string;
   partial?: boolean;
   totals: OpenCostApplicationCostTotals;
   coverage: OpenCostApplicationCostCoverage;
@@ -1115,6 +1139,7 @@ export interface OpenCostApplicationCostTrendSeries extends OpenCostApplicationW
 export interface OpenCostApplicationCostTrendResponse {
   available: boolean;
   reason?: CostUnavailableReason;
+  currency?: string;
   range: string;
   partial?: boolean;
   windowTotalCost?: number;
@@ -1206,6 +1231,7 @@ export interface OpenCostNodeCost {
 export interface OpenCostNodeResponse {
   available: boolean;
   reason?: CostUnavailableReason;
+  currency?: string;
   nodes?: OpenCostNodeCost[];
 }
 
@@ -3104,6 +3130,7 @@ export interface ArgoStatus {
   configured: boolean;
   connected: boolean;
   address?: string;
+  reason?: string;
 }
 
 export function useArgoStatus(enabled = true) {
@@ -6405,10 +6432,13 @@ export interface DiagnosticsSnapshot {
     errorType?: string;
   };
   kubeconfig?: {
-    mode: "" | "in-cluster" | "single" | "multi-env" | "multi-dir";
+    mode: "" | "in-cluster" | "single" | "multi-env" | "multi-dir" | "multi-source";
     fileCount: number;
+    directoryFileCount: number;
     contextCount: number;
     enrichedFromShell: boolean;
+    kubeconfigEnvIgnored: boolean;
+    kubeconfigEnvIgnoredReason: string;
     currentContextUsesExec: boolean;
     execPluginsPresent?: string[];
     execPluginsMissing?: string[];

package/src/components/ConnectionErrorView.test.tsx

@@ -1,15 +1,21 @@
 import { renderToStaticMarkup } from 'react-dom/server'
 import type { ReactNode } from 'react'
 import { describe, expect, it, vi } from 'vitest'
+import type { ContextInfo } from '../types'
 
 vi.stubGlobal('window', { location: { host: 'localhost:9280' } })
 
+const useContextsMock = vi.hoisted(() => vi.fn(
+  (): { data: ContextInfo[] | undefined } => ({ data: undefined }),
+))
+
 vi.mock('@skyhook-io/k8s-ui', () => ({
   ClusterName: ({ name }: { name: string }) => <span>{name}</span>,
   useOpenLocalTerminal: () => vi.fn(),
 }))
 vi.mock('../api/client', () => ({
   useAuthMe: () => ({ data: { authEnabled: false } }),
+  useContexts: useContextsMock,
 }))
 vi.mock('./ContextSwitcher', () => ({
   ContextSwitcher: () => <button>Switch context</button>,
@@ -72,6 +78,34 @@ describe('ConnectionErrorView authentication guidance', () => {
     expect(markup).not.toContain('aws sso login')
   })
 
+  it('uses the original context for collision-qualified auth guidance', () => {
+    const original = 'arn:aws:eks:us-east-1:123456789012:cluster/prod'
+    const hints = selectConnectionHints('auth', `${original} (secondary)`, original)
+
+    expect(hints?.title).toBe('EKS Authentication Failed')
+    expect(hints?.fallbackCommand?.command).toBe(
+      'aws eks update-kubeconfig --name prod --region us-east-1',
+    )
+  })
+
+  it('wires the current context original name into auth guidance', () => {
+    const original = 'arn:aws:eks:us-east-1:123456789012:cluster/prod'
+    useContextsMock.mockReturnValueOnce({
+      data: [{
+        name: `${original} (secondary)`,
+        originalName: original,
+        cluster: original,
+        user: 'prod',
+        namespace: '',
+        isCurrent: true,
+      }],
+    })
+
+    const markup = renderError('auth', `${original} (secondary)`)
+    expect(markup).toContain('update-kubeconfig')
+    expect(markup).toContain('us-east-1')
+  })
+
   it('renders placeholder AKS commands without a run affordance', () => {
     const markup = renderError('auth-rejected', 'clusterUser_platform_prod')
 
@@ -86,3 +120,22 @@ describe('ConnectionErrorView authentication guidance', () => {
     expect(markup).not.toContain('aria-label="Run command in terminal"')
   })
 })
+
+describe('ConnectionErrorView kubeconfig guidance', () => {
+  it('keeps the actionable error and context switch visible for a broken context', () => {
+    const markup = renderError('config', 'prod')
+
+    expect(markup).toContain('Cannot Load Cluster Configuration')
+    expect(markup).toContain('Kubeconfig Problem')
+    expect(markup).toContain('aria-expanded="false"')
+    expect(markup).toContain('id="connection-raw-error"')
+    expect(markup).toContain('safe error')
+    expect(markup).toContain('Switch context')
+  })
+
+  it('does not offer context switching when no context was loaded', () => {
+    const markup = renderError('config', '')
+
+    expect(markup).not.toContain('Switch context')
+  })
+})

package/src/components/ConnectionErrorView.tsx

@@ -4,7 +4,7 @@ import type { ConnectionState } from '../context/ConnectionContext'
 import { ContextSwitcher } from './ContextSwitcher'
 import { parseContextName } from '../utils/context-name'
 import { useOpenLocalTerminal, ClusterName } from '@skyhook-io/k8s-ui'
-import { useAuthMe } from '../api/client'
+import { useAuthMe, useContexts } from '../api/client'
 import { Tooltip } from './ui/Tooltip'
 import { allShellSafe } from '../utils/shell-safe'
 import { apiUrl } from '../api/config'
@@ -218,11 +218,11 @@ function getTimeoutHints(context: string): AuthHints | null {
 
 const errorHints: Record<string, { title: string; hints: string[] }> = {
   config: {
-    title: 'No Kubeconfig Found',
+    title: 'Kubeconfig Problem',
     hints: [
-      'Radar could not find a kubeconfig file at ~/.kube/config',
-      'If your kubeconfig is at a custom path, set the KUBECONFIG environment variable in your shell profile (~/.zshrc or ~/.bashrc)',
-      'You can also pass --kubeconfig <path> when launching from the terminal',
+      'Radar could not load a usable kubeconfig for this context',
+      'If the file exists, check the local Radar logs for the exact parse or load failure',
+      'If no kubeconfig is configured, Radar checks ~/.kube/config; set KUBECONFIG or pass --kubeconfig <path> for another location',
     ],
   },
   rbac: {
@@ -321,16 +321,17 @@ export function CopyableCommand({ command, onRunInTerminal }: { command: string;
   )
 }
 
-export function selectConnectionHints(errorType: string | undefined, context: string): AuthHints | null {
+export function selectConnectionHints(errorType: string | undefined, context: string, originalContext?: string): AuthHints | null {
+  const parsedContext = originalContext || context
   switch (errorType) {
     case 'auth':
-      return getAuthHints(context)
+      return getAuthHints(parsedContext)
     case 'auth-rejected':
-      return getAuthRejectedHints(context)
+      return getAuthRejectedHints(parsedContext)
     case 'auth-plugin-stuck':
       return getAuthPluginStuckHints()
     case 'timeout':
-      return getTimeoutHints(context)
+      return getTimeoutHints(parsedContext)
     default:
       return null
   }
@@ -342,7 +343,9 @@ export function ConnectionErrorView({ connection, onRetry, isRetrying }: Connect
   const isAuthRejected = connection.errorType === 'auth-rejected'
   const isAuthPluginStuck = connection.errorType === 'auth-plugin-stuck'
   const isAuthError = isAuth || isAuthRejected || isAuthPluginStuck
-  const commandInfo = selectConnectionHints(connection.errorType, connection.context || '')
+  const { data: contexts } = useContexts()
+  const originalContext = contexts?.find((context) => context.name === connection.context)?.originalName
+  const commandInfo = selectConnectionHints(connection.errorType, connection.context || '', originalContext)
   const errorInfo = commandInfo || errorHints[connection.errorType || 'unknown'] || errorHints.unknown
   const openLocalTerminal = useOpenLocalTerminal()
   const { data: authMe } = useAuthMe()
@@ -384,7 +387,7 @@ export function ConnectionErrorView({ connection, onRetry, isRetrying }: Connect
           </div>
 
           <h2 className="text-xl font-semibold text-theme-text-primary mb-2">
-            {connection.errorType === 'config' ? 'No Cluster Configuration' : 'Cannot Connect to Cluster'}
+            {connection.errorType === 'config' ? 'Cannot Load Cluster Configuration' : 'Cannot Connect to Cluster'}
           </h2>
 
           <div className="mb-6 space-y-1">
@@ -480,7 +483,7 @@ export function ConnectionErrorView({ connection, onRetry, isRetrying }: Connect
               )}
             </button>
 
-            {connection.errorType !== 'config' && <ContextSwitcher triggerName="Switch context" />}
+            {connection.context && <ContextSwitcher triggerName="Switch context" />}
           </div>
 
           {isAuthError && (

package/src/components/ContextSwitcher.tsx

@@ -10,7 +10,7 @@ import { useContextSwitch } from '../context/ContextSwitchContext'
 import { useToast } from '../components/ui/Toast'
 import { useDock } from '../components/dock'
 import type { ContextInfo } from '../types'
-import { parseContextName, type ParsedContextName } from '../utils/context-name'
+import { parseContextForSwitcher, visibleContextQualifier, type ParsedContextName } from '../utils/context-name'
 
 interface ContextSwitcherProps {
   className?: string
@@ -25,6 +25,7 @@ export interface ContextSwitcherHandle {
 
 interface ParsedContext extends ParsedContextName {
   context: ContextInfo
+  nameQualifier?: string
 }
 
 function shouldSuppressSwitchErrorToast(error: unknown): boolean {
@@ -54,18 +55,9 @@ export const ContextSwitcher = forwardRef<ContextSwitcherHandle, ContextSwitcher
       hasMultipleAccounts: false,
       hasMultipleSources: false,
     }
-    // Strip the disambiguation suffix (" (<source>)" or " (<source> #N)")
-    // before parsing — qualified names won't match the GKE/EKS/AKS regexes
-    // otherwise, and the suffix is redundant with the source chip we
-    // render separately.
-    const stripSourceSuffix = (name: string, source?: string): string => {
-      if (!source) return name
-      const escaped = source.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')
-      return name.replace(new RegExp(`\\s+\\(${escaped}(?:\\s+#\\d+)?\\)$`), '')
-    }
     const parsed: ParsedContext[] = contexts.map(ctx => ({
       context: ctx,
-      ...parseContextName(stripSourceSuffix(ctx.name, ctx.source)),
+      ...parseContextForSwitcher(ctx),
     }))
     const accounts = new Set(parsed.map(p => `${p.provider}:${p.account}`))
     const sources = new Set(contexts.map(c => c.source).filter(Boolean))
@@ -100,6 +92,7 @@ export const ContextSwitcher = forwardRef<ContextSwitcherHandle, ContextSwitcher
       return {
         id: p.context.name,
         name: p.raw,
+        nameQualifier: visibleContextQualifier(p.nameQualifier, p.context.source, hasMultipleSources),
         secondary: p.provider ? p.raw : undefined,
         badge: p.region || undefined,
         sourceLabel: hasMultipleSources ? p.context.source : undefined,
@@ -188,12 +181,15 @@ export const ContextSwitcher = forwardRef<ContextSwitcherHandle, ContextSwitcher
 
   const currentCtx = contexts?.find(c => c.isCurrent)
   const currentId = currentCtx?.name
-  // Use parsed.raw (the source-stripped form) for the trigger so the
-  // disambiguation suffix doesn't double up with the source chip.
+  // Keep the trigger name parseable and render any collision qualifier as a
+  // separate suffix so cloud-provider metadata remains intact.
   // Fall back to clusterInfo.context for the very-early window before
   // /api/contexts has resolved.
   const currentParsed = currentId ? parsedById.get(currentId) : undefined
   const currentRaw = triggerName || currentParsed?.raw || clusterInfo?.context || currentCtx?.name || 'Unknown'
+  const currentNameQualifier = triggerName
+    ? undefined
+    : visibleContextQualifier(currentParsed?.nameQualifier, currentCtx?.source, hasMultipleSources)
   const currentSourceLabel = triggerName ? undefined : hasMultipleSources ? currentCtx?.source || undefined : undefined
 
   return (
@@ -205,6 +201,7 @@ export const ContextSwitcher = forwardRef<ContextSwitcherHandle, ContextSwitcher
         label={label}
         currentId={currentId}
         currentName={currentRaw}
+        currentNameQualifier={currentNameQualifier}
         currentSourceLabel={currentSourceLabel}
         items={items}
         onSelect={handleSelect}

package/src/components/audit/UpgradeReadinessView.tsx

@@ -76,7 +76,7 @@ export function UpgradeReadinessView({ namespaces, onNavigateToResource }: Upgra
   const location = useLocation()
   const navigate = useNavigate()
   const requestedTarget = new URLSearchParams(location.search).get('target') ?? undefined
-  const { data, isLoading, isFetching, isPlaceholderData, error, dataUpdatedAt, refetch } = useUpgradeReadiness(requestedTarget)
+  const { data, isLoading, isFetching, isPlaceholderData, error, dataUpdatedAt, refreshScan } = useUpgradeReadiness(requestedTarget)
   const { connection } = useConnection()
   const targetOptions = useMemo(
     () => buildTargetOptions(data?.currentVersion, data?.reviewedThrough, requestedTarget ?? data?.targetVersion),
@@ -153,8 +153,8 @@ export function UpgradeReadinessView({ namespaces, onNavigateToResource }: Upgra
             )}
             <FreshnessControl
               mode="snapshot"
-              dataUpdatedAt={dataUpdatedAt}
-              onRefresh={() => refetch()}
+              dataUpdatedAt={data.observedAt ? Date.parse(data.observedAt) : dataUpdatedAt}
+              onRefresh={() => refreshScan()}
               connectionState={connection.state}
               isFetching={isFetching}
             />

package/src/components/capacity/ClusterSchedulingCard.tsx

@@ -7,7 +7,7 @@ import {
 import { Badge } from "@skyhook-io/k8s-ui/components/ui/Badge";
 import {
   parseCPUToNanocores,
-  parseMemoryToBytes,
+  parseQuantityToNumber,
 } from "@skyhook-io/k8s-ui/utils/format";
 import {
   CertaintyGlyph,
@@ -96,16 +96,15 @@ export function quantityToNumber(
     }
     return null;
   }
-  // Milli quantities before the byte parser — it ignores the `m` suffix and
-  // would read 3000m as 3000, a 1000× distortion.
-  const milli = /^(-?\d+(?:\.\d+)?)m$/.exec(value);
-  if (milli) return Number(milli[1]) / 1000;
-  const parsed = parseMemoryToBytes(value);
-  if (Number.isFinite(parsed) && (parsed !== 0 || /^[0.]+\D*$/.test(value))) {
+  // The shared parser knows the full suffix table — the byte parser stops at
+  // Ti, so a 1PiB aggregate would read as 1 byte. It returns 0 for input it
+  // cannot parse, so distinguish a real zero to preserve the null (= unknown,
+  // not zero) contract of this card.
+  const parsed = parseQuantityToNumber(value);
+  if (parsed !== 0 || /^[+-]?[0.]+\D*$/.test(value)) {
     return parsed;
   }
-  const plain = Number(value);
-  return Number.isFinite(plain) ? plain : null;
+  return null;
 }
 
 function worstCertainty(

package/src/components/capacity/schedulingBar.test.ts

@@ -202,6 +202,16 @@ describe("quantityToNumber", () => {
     expect(quantityToNumber("example.com/widget", "3000m")).toBe(3);
     expect(quantityToNumber("cpu", "1500m")).toBe(1.5e9);
   });
+
+  // Aggregate memory on a large cluster reaches suffixes the byte parser
+  // never knew (its table stops at Ti) — "1Pi" must not read as 1 byte.
+  it("parses the large suffixes an aggregate capacity can carry", () => {
+    expect(quantityToNumber("memory", "1Pi")).toBe(1024 ** 5);
+    expect(quantityToNumber("memory", "1Ei")).toBe(1024 ** 6);
+    expect(quantityToNumber("pods", "1k")).toBe(1000);
+    expect(quantityToNumber("pods", "1e3")).toBe(1000);
+    expect(quantityToNumber("memory", "0Gi")).toBe(0);
+  });
 });
 
 describe("claimStagesDetail", () => {

package/src/components/cost/ApplicationCostTab.test.ts

@@ -11,6 +11,7 @@ describe('getApplicationCostState', () => {
   it('keeps current app cost visible when historical owner metrics are missing', () => {
     const current: OpenCostApplicationCostResponse = {
       available: true,
+      currency: 'USD',
       partial: true,
       totals: {
         hourlyCost: 0.4,
@@ -38,6 +39,7 @@ describe('getApplicationCostState', () => {
     }
     const trend: OpenCostApplicationCostTrendResponse = {
       available: false,
+      currency: 'USD',
       reason: 'no_metrics',
       range: '24h',
       coverage: { total: 3, included: 0 },
@@ -54,6 +56,7 @@ describe('getApplicationCostState', () => {
   it('uses historical data when current app metrics are absent but history exists', () => {
     const current: OpenCostApplicationCostResponse = {
       available: false,
+      currency: 'USD',
       reason: 'no_metrics',
       totals: {
         hourlyCost: 0,
@@ -69,6 +72,7 @@ describe('getApplicationCostState', () => {
     }
     const trend: OpenCostApplicationCostTrendResponse = {
       available: true,
+      currency: 'USD',
       range: '7d',
       windowTotalCost: 2,
       dataPoints: [
@@ -89,6 +93,7 @@ describe('getApplicationCostState', () => {
   it('treats all tracked workloads scaled to zero as valid zero state', () => {
     const current: OpenCostApplicationCostResponse = {
       available: true,
+      currency: 'USD',
       totals: {
         hourlyCost: 0,
         cpuCost: 0,
@@ -168,6 +173,7 @@ describe('getApplicationCostState', () => {
   it('surfaces app workload access and existence failures', () => {
     const current: OpenCostApplicationCostResponse = {
       available: false,
+      currency: 'USD',
       reason: 'access_denied',
       totals: {
         hourlyCost: 0,