@skyhook-io/radar-app 1.12.3 → 1.13.1

package/src/components/diagnose/InvestigationView.tsx

@@ -34,6 +34,45 @@ import {
 const RECHECK_QUESTION =
   "Did the fix resolve the issue? Re-check the resource's current status and health now, and say whether it's healthy.";
 
+export function canStopInvestigation(
+  run: RunSummary,
+  busy: boolean,
+  gone: boolean,
+  latestTurnStatus?: Turn["status"],
+): boolean {
+  // The transcript is fresher than the polled run summary. Once it has a
+  // terminal frame, a lagging/failed summary refresh must not resurrect Stop.
+  const transcriptTerminal =
+    latestTurnStatus === "done" || latestTurnStatus === "error";
+  return (
+    run.trigger !== "background" &&
+    run.status !== "stale" &&
+    run.status !== "stopping" &&
+    !gone &&
+    !transcriptTerminal &&
+    (busy || run.status === "running")
+  );
+}
+
+export function canContinueInvestigation(
+  run: RunSummary,
+  latestTurnStatus?: Turn["status"],
+  gone = false,
+): boolean {
+  const transcriptTerminal =
+    latestTurnStatus === "done" || latestTurnStatus === "error";
+  const summaryIsLaggingTerminalTranscript =
+    run.status === "running" &&
+    run.trigger !== "background" &&
+    transcriptTerminal;
+  return (
+    !gone &&
+    run.status !== "stale" &&
+    run.status !== "stopping" &&
+    (run.canContinue !== false || summaryIsLaggingTerminalTranscript)
+  );
+}
+
 export function InvestigationView({
   run,
   agentLabel,
@@ -95,6 +134,14 @@ export function InvestigationView({
   // unfolds in beats: "rca" = root cause only (+ a "weighing remediation" beat),
   // "full" = everything. null/"full" for replayed turns (no choreography on rebuild).
   const [reveal, setReveal] = useState<"rca" | "full" | null>(null);
+  const latestTurnStatus = turns[turns.length - 1]?.status;
+  const canContinue = canContinueInvestigation(run, latestTurnStatus, gone);
+  // Continuation needs a resumable session, but stopping does not. A brand-new
+  // hosted turn can be running before the SDK has reported its session id, so
+  // keep Stop available for human investigations without advertising a
+  // follow-up composer that the server would reject. Automatic runs remain
+  // immutable even while their stream marks this view busy.
+  const canStop = canStopInvestigation(run, busy, gone, latestTurnStatus);
   const synthTimers = useRef<ReturnType<typeof setTimeout>[]>([]);
   const clearSynth = () => {
     synthTimers.current.forEach(clearTimeout);
@@ -216,6 +263,7 @@ export function InvestigationView({
               ...prev,
               {
                 question: ev.question,
+                actor: ev.actor,
                 timeline: [],
                 diagnosis: null,
                 error: null,
@@ -388,7 +436,7 @@ export function InvestigationView({
 
   const submitFollowup = () => {
     const q = input.trim();
-    if (!q || busy || stale) return;
+    if (!q || busy || !canContinue) return;
     setInput("");
     setActionError(null);
     pinnedRef.current = true; // a user-initiated turn always follows to the bottom
@@ -401,7 +449,7 @@ export function InvestigationView({
   // Ask a canned follow-up (e.g. "explain simply") — a one-tap path that turns the
   // prompt's plain-language instruction into something the user controls.
   const askFollowup = (q: string) => {
-    if (busy || stale) return;
+    if (busy || !canContinue) return;
     setActionError(null);
     pinnedRef.current = true;
     addTurn(run.id, { question: q }).catch((e) =>
@@ -423,10 +471,13 @@ export function InvestigationView({
     autoRecheckRef.current = true; // verify the write automatically once it lands
     addTurn(run.id, { apply: true, fix: pendingFix }).catch((e) => {
       autoRecheckRef.current = false; // the apply never started — don't auto-recheck
-      setActionError(e instanceof DiagnoseError ? e.message : "Couldn't apply.");
+      setActionError(
+        e instanceof DiagnoseError ? e.message : "Couldn't apply.",
+      );
     });
   };
-  const checkStatus = () => addTurn(run.id, { question: RECHECK_QUESTION }).catch(() => {});
+  const checkStatus = () =>
+    addTurn(run.id, { question: RECHECK_QUESTION }).catch(() => {});
 
   // Apply tracks the latest turn that produced remediation (so follow-ups don't
   // strip it) and is blocked on a stale (context-switched) run.
@@ -461,135 +512,140 @@ export function InvestigationView({
   return (
     <div className="relative flex min-h-0 flex-1 flex-col">
       <div className="flex min-h-0 flex-1">
-      <div
-        ref={scrollRef}
-        onScroll={onScroll}
-        className="flex-1 overflow-y-auto overflow-x-hidden px-4 py-3 [scrollbar-gutter:stable]"
-      >
-        <div className={maximized ? "mx-auto max-w-3xl" : ""}>
-          <div className="space-y-4">
-            {stale && (
-              <div className="rounded-lg border border-amber-500/40 bg-amber-500/10 p-3 text-xs text-theme-text-secondary">
-                <div className="flex items-start gap-2">
-                  <AlertTriangle className="mt-0.5 h-4 w-4 shrink-0 text-amber-500" />
-                  <span>
-                    This investigation ran against{" "}
-                    <span className="font-medium text-theme-text-primary">
-                      {run.context || "a different cluster"}
+        <div
+          ref={scrollRef}
+          onScroll={onScroll}
+          className="flex-1 overflow-y-auto overflow-x-hidden px-4 py-3 [scrollbar-gutter:stable]"
+        >
+          <div className={maximized ? "mx-auto max-w-3xl" : ""}>
+            <div className="space-y-4">
+              {stale && (
+                <div className="rounded-lg border border-amber-500/40 bg-amber-500/10 p-3 text-xs text-theme-text-secondary">
+                  <div className="flex items-start gap-2">
+                    <AlertTriangle className="mt-0.5 h-4 w-4 shrink-0 text-amber-500" />
+                    <span>
+                      This investigation ran against{" "}
+                      <span className="font-medium text-theme-text-primary">
+                        {run.context || "a different cluster"}
+                      </span>
+                      . The cluster context has changed — it's read-only now.
                     </span>
-                    . The cluster context has changed — it's read-only now.
-                  </span>
+                  </div>
+                  <button
+                    onClick={retryDiagnosis}
+                    className="mt-2 inline-flex items-center gap-1.5 rounded-md border border-amber-500/50 px-2.5 py-1 font-medium text-amber-600 hover:bg-amber-500/10 dark:text-amber-400"
+                  >
+                    <Send className="h-3 w-3" />
+                    Re-run on current cluster
+                  </button>
                 </div>
-                <button
-                  onClick={retryDiagnosis}
-                  className="mt-2 inline-flex items-center gap-1.5 rounded-md border border-amber-500/50 px-2.5 py-1 font-medium text-amber-600 hover:bg-amber-500/10 dark:text-amber-400"
-                >
-                  <Send className="h-3 w-3" />
-                  Re-run on current cluster
-                </button>
-              </div>
-            )}
-            {gone && turns.length === 0 && (
-              <div className="rounded-lg border border-theme-border bg-theme-elevated p-3 text-sm text-theme-text-secondary">
-                <div className="flex items-start gap-2">
-                  <AlertTriangle className="mt-0.5 h-4 w-4 shrink-0 text-amber-500" />
-                  <span>
-                    This investigation is no longer available — history keeps
-                    the most recent investigations, and this one has been
-                    cleared. Re-run Diagnose to analyze the current cluster.
-                  </span>
+              )}
+              {gone && turns.length === 0 && (
+                <div className="rounded-lg border border-theme-border bg-theme-elevated p-3 text-sm text-theme-text-secondary">
+                  <div className="flex items-start gap-2">
+                    <AlertTriangle className="mt-0.5 h-4 w-4 shrink-0 text-amber-500" />
+                    <span>
+                      This investigation is unavailable. It may be private, your
+                      access may have changed, or its history may have been
+                      cleared. Check your account and organization, or ask the
+                      creator for access.
+                    </span>
+                  </div>
+                  <button
+                    onClick={retryDiagnosis}
+                    className="mt-2 inline-flex items-center gap-1.5 rounded-md border border-theme-border px-2.5 py-1 font-medium text-theme-text-primary hover:bg-theme-hover"
+                  >
+                    <Send className="h-3 w-3" />
+                    Re-run Diagnose
+                  </button>
                 </div>
-                <button
-                  onClick={retryDiagnosis}
-                  className="mt-2 inline-flex items-center gap-1.5 rounded-md border border-theme-border px-2.5 py-1 font-medium text-theme-text-primary hover:bg-theme-hover"
-                >
-                  <Send className="h-3 w-3" />
-                  Re-run Diagnose
-                </button>
-              </div>
-            )}
-            <RunContextCard run={run} />
-            {turns.map((t, i) => {
-              const isLast = i === turns.length - 1;
-              // Hosted runners are read-only — the server refuses apply turns.
-              const canApply = i === lastRemediationIdx && !stale && !hosted;
-              const canCheck = isLast && t.status === "done" && !!t.apply;
-              return (
-                <TurnView
-                  key={i}
-                  turn={t}
-                  synthLabel={isLast ? synth : null}
-                  reveal={isLast ? (reveal ?? "full") : "full"}
-                  onApply={canApply ? requestApply : undefined}
-                  onAsk={isLast && !busy && !stale ? askFollowup : undefined}
-                  onCheckStatus={canCheck ? checkStatus : undefined}
-                  onRetryDiagnosis={
-                    isLast &&
-                    t.status === "error" &&
-                    !t.question &&
-                    !t.apply &&
-                    !stale
-                      ? retryDiagnosis
-                      : undefined
-                  }
-                  hideVerdict={pinned && i === pinnedIdx}
-                />
-              );
-            })}
-            {actionError && (
-              <div className="flex items-start gap-2 rounded-lg border border-red-500/30 bg-red-500/10 p-3 text-sm text-theme-text-primary">
-                <AlertTriangle className="mt-0.5 h-4 w-4 shrink-0 text-red-400" />
-                <span>{actionError}</span>
-              </div>
-            )}
-            {/* A start that failed belongs to the investigation that never began,
+              )}
+              <RunContextCard run={run} />
+              {turns.map((t, i) => {
+                const isLast = i === turns.length - 1;
+                // Hosted runners are read-only — the server refuses apply turns.
+                const canApply = i === lastRemediationIdx && !stale && !hosted;
+                const canCheck = isLast && t.status === "done" && !!t.apply;
+                return (
+                  <TurnView
+                    key={i}
+                    turn={t}
+                    synthLabel={isLast ? synth : null}
+                    reveal={isLast ? (reveal ?? "full") : "full"}
+                    onApply={canApply ? requestApply : undefined}
+                    onAsk={
+                      isLast && !busy && canContinue ? askFollowup : undefined
+                    }
+                    onCheckStatus={canCheck ? checkStatus : undefined}
+                    onRetryDiagnosis={
+                      isLast &&
+                      t.status === "error" &&
+                      !t.question &&
+                      !t.apply &&
+                      !stale
+                        ? retryDiagnosis
+                        : undefined
+                    }
+                    hideVerdict={pinned && i === pinnedIdx}
+                  />
+                );
+              })}
+              {actionError && (
+                <div className="flex items-start gap-2 rounded-lg border border-red-500/30 bg-red-500/10 p-3 text-sm text-theme-text-primary">
+                  <AlertTriangle className="mt-0.5 h-4 w-4 shrink-0 text-red-400" />
+                  <span>{actionError}</span>
+                </div>
+              )}
+              {/* A start that failed belongs to the investigation that never began,
                 not to the one on screen. Unlabelled at the foot of a finished
                 transcript — verdict directly above — it reads as "this
                 investigation failed". It also outlives the click that caused it,
                 and this is the only place it surfaces while a run is focused, so
                 it needs a way out. */}
-            {startError && (
-              <div
-                role="alert"
-                className="flex items-start gap-2 rounded-lg border border-red-500/30 bg-red-500/10 p-3 text-sm text-theme-text-primary"
-              >
-                <AlertTriangle className="mt-0.5 h-4 w-4 shrink-0 text-red-400" />
-                <div className="min-w-0 flex-1">
-                  <div className="font-medium">
-                    Couldn&apos;t start a new investigation
+              {startError && (
+                <div
+                  role="alert"
+                  className="flex items-start gap-2 rounded-lg border border-red-500/30 bg-red-500/10 p-3 text-sm text-theme-text-primary"
+                >
+                  <AlertTriangle className="mt-0.5 h-4 w-4 shrink-0 text-red-400" />
+                  <div className="min-w-0 flex-1">
+                    <div className="font-medium">
+                      Couldn&apos;t start a new investigation
+                    </div>
+                    <div className="text-theme-text-secondary">
+                      {startError}
+                    </div>
                   </div>
-                  <div className="text-theme-text-secondary">{startError}</div>
+                  <button
+                    onClick={dismissError}
+                    className="shrink-0 rounded px-1.5 py-0.5 text-xs text-theme-text-tertiary hover:bg-theme-hover hover:text-theme-text-primary"
+                  >
+                    Dismiss
+                  </button>
                 </div>
-                <button
-                  onClick={dismissError}
-                  className="shrink-0 rounded px-1.5 py-0.5 text-xs text-theme-text-tertiary hover:bg-theme-hover hover:text-theme-text-primary"
-                >
-                  Dismiss
-                </button>
-              </div>
-            )}
+              )}
+            </div>
           </div>
         </div>
-      </div>
-      {pinned && (
-        <aside
-          className={`w-[400px] shrink-0 overflow-y-auto border-l border-theme-border px-4 py-3 ${busy ? "opacity-70" : ""}`}
-        >
-          <div className="mb-1 text-[11px] font-medium uppercase tracking-wide text-theme-text-tertiary">
-            {busy ? "Verdict · revising…" : "Verdict"}
-          </div>
-          <ResultCard
-            diagnosis={turns[pinnedIdx].diagnosis!}
-            onApply={
-              pinnedIdx === lastRemediationIdx && !stale && !hosted
-                ? requestApply
-                : undefined
-            }
-            onAsk={!busy && !stale ? askFollowup : undefined}
-            reveal="full"
-          />
-        </aside>
-      )}
+        {pinned && (
+          <aside
+            className={`w-[400px] shrink-0 overflow-y-auto border-l border-theme-border px-4 py-3 ${busy ? "opacity-70" : ""}`}
+          >
+            <div className="mb-1 text-[11px] font-medium uppercase tracking-wide text-theme-text-tertiary">
+              {busy ? "Verdict · revising…" : "Verdict"}
+            </div>
+            <ResultCard
+              diagnosis={turns[pinnedIdx].diagnosis!}
+              onApply={
+                pinnedIdx === lastRemediationIdx && !stale && !hosted
+                  ? requestApply
+                  : undefined
+              }
+              onAsk={!busy && canContinue ? askFollowup : undefined}
+              reveal="full"
+            />
+          </aside>
+        )}
       </div>
 
       {showJump && (
@@ -616,13 +672,23 @@ export function InvestigationView({
       <div
         className={`border-t border-theme-border px-3 py-2.5 ${maximized ? "[&>*]:mx-auto [&>*]:max-w-3xl" : ""}`}
       >
-        {busy ? (
+        {canStop ? (
           <button
             onClick={stop}
             className="w-full rounded-lg border border-theme-border py-1.5 text-sm text-theme-text-secondary hover:bg-theme-hover"
           >
             Stop
           </button>
+        ) : run.status === "stopping" ? (
+          <div className="rounded-lg border border-theme-border bg-theme-base px-3 py-2 text-xs text-theme-text-secondary">
+            Stopping investigation…
+          </div>
+        ) : !canContinue ? (
+          <div className="rounded-lg border border-theme-border bg-theme-base px-3 py-2 text-xs text-theme-text-secondary">
+            {run.trigger === "background"
+              ? "Automatic investigation · read-only. Start a new investigation on this resource to continue digging."
+              : "This investigation is read-only."}
+          </div>
         ) : (
           <div className="flex items-end gap-2">
             <textarea
@@ -635,7 +701,7 @@ export function InvestigationView({
                 }
               }}
               rows={1}
-              disabled={stale}
+              disabled={!canContinue || busy}
               placeholder={
                 stale
                   ? "Cluster changed — re-run Diagnose"
@@ -645,7 +711,7 @@ export function InvestigationView({
             />
             <button
               onClick={submitFollowup}
-              disabled={!input.trim() || stale}
+              disabled={!input.trim() || !canContinue || busy}
               className="shrink-0 rounded-lg btn-brand p-2 disabled:opacity-40"
               aria-label="Send follow-up"
             >

package/src/components/diagnose/parts.test.tsx

@@ -41,9 +41,12 @@ describe("AgentControls execution profile explanation", () => {
     const html = renderAgent("cursor-agent", ["full-local"], "safeguarded");
     expect(html).toContain("must use this agent");
     expect(html).toContain("normal setup");
-    expect(html).toContain("always loads your global MCP servers");
-    expect(html).toContain("still enables the agent CLI");
-    expect(html).toContain("does not constrain external MCP servers");
+    expect(html).toContain("--force");
+    expect(html).toContain("auto-approves its built-in tools");
+    expect(html).toContain("including your global servers");
+    expect(html).toContain("does not reliably confine those tools");
+    expect(html).not.toContain("still enables the agent CLI");
+    expect(html).not.toContain("does not constrain external MCP servers");
     expect(html).not.toContain("always runs this agent with safeguards");
   });
 
@@ -104,7 +107,12 @@ describe("ConsentCard execution profile treatment", () => {
     expect(html).toContain("border-amber-500/40");
     expect(html).toContain("text-amber-500");
     expect(html).toContain("Radar cannot constrain");
-    expect(html).toContain("always loads your global MCP servers");
+    expect(html).toContain("--force");
+    expect(html).toContain("auto-approves its built-in tools");
+    expect(html).toContain("including your global servers");
+    expect(html).toContain("does not reliably confine those tools");
+    expect(html).not.toContain("still enables the agent CLI");
+    expect(html).not.toContain("does not constrain external MCP servers");
     expect(html).not.toContain("text-accent");
   });
 

package/src/components/diagnose/parts.tsx

@@ -33,6 +33,9 @@ import {
 import { StatusDot } from "@skyhook-io/k8s-ui";
 import { Markdown } from "../ui/Markdown";
 
+const CURSOR_FULL_LOCAL_WARNING =
+  "Radar passes Cursor --force, which auto-approves its built-in tools and every MCP server it loads, including your global servers. Cursor’s sandbox does not reliably confine those tools to Radar’s temporary workspace.";
+
 // Segmented two-or-more-way selector — shared shape for the agent and execution
 // profile pickers.
 function Segmented<T extends string | boolean>({
@@ -309,9 +312,11 @@ export function AgentControls({
                     configured tools and MCP servers. Radar cannot constrain that
                     external tooling; it may access local files or the network
                     and may be able to change your cluster.{" "}
-                    {isClaude
-                      ? "Claude uses the permissions from your setup; Radar does not override them."
-                      : "Radar still enables the agent CLI’s own sandbox, but that sandbox does not constrain external MCP servers."}{" "}
+                    {isCursor
+                      ? CURSOR_FULL_LOCAL_WARNING
+                      : isClaude
+                        ? "Claude uses the permissions from your setup; Radar does not override them."
+                        : "Radar still enables the agent CLI’s own sandbox, but that sandbox does not constrain external MCP servers."}{" "}
                     Choose this only when you need that setup.
                   </span>
                 </div>
@@ -336,10 +341,14 @@ export function AgentControls({
                 Radar must use this agent&apos;s normal setup. Radar cannot
                 constrain its external tools or MCP servers; they may access
                 local files or the network and may be able to change your
-                cluster. Radar still enables the agent CLI&apos;s own sandbox,
-                but that sandbox does not constrain external MCP servers.
-                {isCursor &&
-                  " Cursor always loads your global MCP servers, so Radar cannot exclude them."}
+                cluster. {isCursor ? (
+                  CURSOR_FULL_LOCAL_WARNING
+                ) : (
+                  <>
+                    Radar still enables the agent CLI&apos;s own sandbox, but that
+                    sandbox does not constrain external MCP servers.
+                  </>
+                )}
               </span>
             </div>
           )}
@@ -396,6 +405,7 @@ export function AgentControls({
 // or a follow-up, each with its own transcript + result.
 export type Turn = {
   question?: string;
+  actor?: string;
   timeline: TimelineItem[];
   diagnosis: Diagnosis | null;
   error: string | null;
@@ -500,8 +510,15 @@ export function TurnView({
     <div className="space-y-2">
       {turn.question && (
         <div className="flex justify-end">
-          <div className="max-w-[85%] rounded-lg rounded-br-sm bg-accent/10 px-3 py-1.5 text-sm text-theme-text-primary [overflow-wrap:anywhere]">
-            {turn.question}
+          <div className="max-w-[85%]">
+            {turn.actor && (
+              <div className="mb-0.5 text-right text-[10px] text-theme-text-tertiary">
+                {turn.actor}
+              </div>
+            )}
+            <div className="rounded-lg rounded-br-sm bg-accent/10 px-3 py-1.5 text-sm text-theme-text-primary [overflow-wrap:anywhere]">
+              {turn.question}
+            </div>
           </div>
         </div>
       )}
@@ -832,7 +849,9 @@ export function ConsentCard({
                 MCP servers. They may access local files or the network and may
                 be able to change your cluster.
               </>,
-              agent === "claude" ? (
+              agent === "cursor-agent" ? (
+                CURSOR_FULL_LOCAL_WARNING
+              ) : agent === "claude" ? (
                 <>
                   Claude uses the permissions from your setup; Radar does not
                   override them.
@@ -841,13 +860,6 @@ export function ConsentCard({
                 <>
                   Radar still enables the agent CLI&apos;s own sandbox, but that
                   sandbox does not constrain external MCP servers.
-                  {agent === "cursor-agent" && (
-                    <>
-                      {" "}
-                      Cursor always loads your global MCP servers; Radar cannot
-                      exclude them.
-                    </>
-                  )}
                 </>
               ),
             ]

package/src/components/execution/BatchExecutionView.render.test.tsx

@@ -0,0 +1,35 @@
+import { renderToStaticMarkup } from 'react-dom/server'
+import { describe, expect, it, vi } from 'vitest'
+import { BatchExecutionFullscreen } from './BatchExecutionView'
+
+vi.mock('../../api/client', () => ({
+  useResource: () => ({}),
+  useWorkloadPods: () => ({}),
+  useWorkloadRuns: () => ({ data: { runs: [] } }),
+}))
+
+describe.each(['Job', 'CronJob', 'ScaledJob'])('%s cleanup retention display', (kind) => {
+  function render(ttlSecondsAfterFinished?: number) {
+    const jobSpec = { ttlSecondsAfterFinished, activeDeadlineSeconds: 60 }
+    const spec = kind === 'CronJob'
+      ? { jobTemplate: { spec: jobSpec } }
+      : kind === 'ScaledJob'
+        ? { jobTargetRef: jobSpec }
+        : jobSpec
+    return renderToStaticMarkup(
+      <BatchExecutionFullscreen kind={kind} apiKind={`${kind.toLowerCase()}s`} namespace="default" name="example" resource={{ spec }} />,
+    )
+  }
+
+  it.each([0, 300])('shows a configured TTL of %i seconds exactly once alongside the definition', (ttl) => {
+    const html = render(ttl)
+    expect(html.match(/TTL after finish/g)).toHaveLength(1)
+    expect(html).toContain(`>${ttl}s<`)
+    expect(html).toContain('>Deadline<')
+    expect(html).toContain('>60s<')
+  })
+
+  it('omits TTL when cleanup retention is unconfigured', () => {
+    expect(render()).not.toContain('TTL after finish')
+  })
+})

package/src/components/execution/BatchExecutionView.tsx

@@ -475,9 +475,7 @@ function sourceFacts(kind: string, resource: any, runs: WorkloadRun[]) {
       progress: latest?.progress,
       duration: latest ? formatRunDuration(latest) : '',
       work: latest ? workCount(latest) : '',
-      facts: [
-        ['TTL after finish', spec.ttlSecondsAfterFinished != null ? `${spec.ttlSecondsAfterFinished}s` : 'None'],
-      ],
+      facts: [],
       definition,
     }
   }
@@ -544,6 +542,7 @@ function ExecutionDefinitionDetails({ summary, namespace, compact = false }: { s
             <DefinitionFact label="Service account" value={summary.serviceAccount} mono />
             {summary.configMaps.length > 0 && <DefinitionFact label="ConfigMaps" value={summary.configMaps.join(', ')} mono />}
             {summary.secrets.length > 0 && <DefinitionFact label="Secrets" value={summary.secrets.join(', ')} mono />}
+            {summary.ttlAfterFinished && <DefinitionFact label="TTL after finish" value={summary.ttlAfterFinished} />}
           </>
         )}
       </div>

package/src/components/execution/execution-definition.test.ts

@@ -48,6 +48,25 @@ describe('executionDefinitionSummary', () => {
     })
   })
 
+  describe.each(['Job', 'CronJob', 'ScaledJob'])('%s retention', (kind) => {
+    function resource(jobSpec: Record<string, unknown>) {
+      if (kind === 'CronJob') return { spec: { jobTemplate: { spec: jobSpec } } }
+      if (kind === 'ScaledJob') return { spec: { jobTargetRef: jobSpec } }
+      return { spec: jobSpec }
+    }
+
+    it.each([0, 300])('keeps a configured TTL of %i seconds separate from the execution deadline', (ttl) => {
+      expect(executionDefinitionSummary(kind, resource({
+        ttlSecondsAfterFinished: ttl,
+        activeDeadlineSeconds: 60,
+      }))).toMatchObject({ ttlAfterFinished: `${ttl}s`, deadline: '60s' })
+    })
+
+    it('does not invent a TTL when cleanup retention is unconfigured', () => {
+      expect(executionDefinitionSummary(kind, resource({}))).not.toHaveProperty('ttlAfterFinished')
+    })
+  })
+
   it('explains Argo DAG shape, executable templates, policy, and dependencies', () => {
     const summary = executionDefinitionSummary('WorkflowTemplate', {
       spec: {

package/src/components/execution/execution-definition.ts

@@ -19,6 +19,7 @@ export interface ExecutionDefinitionSummary {
   serviceAccount: string
   retry: string
   deadline?: string
+  ttlAfterFinished?: string
   parallelism?: string
 }
 
@@ -79,6 +80,7 @@ function kubernetesJobSummary(jobSpec: any): ExecutionDefinitionSummary {
     serviceAccount: podSpec.serviceAccountName || 'default',
     retry: `Backoff limit ${jobSpec.backoffLimit ?? 6} · restart ${podSpec.restartPolicy || 'Never'}`,
     ...(jobSpec.activeDeadlineSeconds != null ? { deadline: `${jobSpec.activeDeadlineSeconds}s` } : {}),
+    ...(jobSpec.ttlSecondsAfterFinished != null ? { ttlAfterFinished: `${jobSpec.ttlSecondsAfterFinished}s` } : {}),
     parallelism: `${parallelism} parallel · ${completions} ${completions === 1 ? 'completion' : 'completions'} · ${completionMode}`,
   }
 }