@skyhook-io/radar-app 1.14.5 → 1.15.0

package/src/components/gitops/destination-toast.ts

@@ -0,0 +1,46 @@
+import type { DestinationCluster } from './useDestinationCluster'
+import { parseContextForSwitcher } from '../../utils/context-name'
+
+export interface DestinationToast {
+  message: string
+  detail: string
+  // Set when the resource can be opened by switching to a kubeconfig context.
+  actionLabel?: string
+}
+
+// What to tell someone who clicked a resource that lives on a remote GitOps
+// object's destination cluster, and how they can open it.
+export function destinationToast(resource: string, dest: DestinationCluster): DestinationToast {
+  if (dest.context) {
+    const cluster = parseContextForSwitcher(dest.context).clusterName
+    if (!dest.canSwitch) {
+      return {
+        message: `${resource} is on ${cluster}`,
+        detail: 'Switching clusters is turned off in this Radar.',
+      }
+    }
+    return {
+      message: `${resource} is on ${cluster}`,
+      detail: 'Opening it switches Radar to that cluster.',
+      actionLabel: `Open in ${cluster}`,
+    }
+  }
+  if (dest.server) {
+    return {
+      message: `${resource} is on another cluster`,
+      detail: `No kubeconfig context points at ${hostOf(dest.server)}. Add one to open it from Radar.`,
+    }
+  }
+  return {
+    message: `${resource} is on another cluster`,
+    detail: "Radar couldn't tell which cluster, so it can't open it from here.",
+  }
+}
+
+function hostOf(server: string): string {
+  try {
+    return new URL(server).host
+  } catch {
+    return server
+  }
+}

package/src/components/gitops/useDestinationCluster.ts

@@ -0,0 +1,30 @@
+import { useCapabilities, useContexts, useGitOpsDestination } from '../../api/client'
+import type { ContextInfo } from '../../types'
+
+export interface DestinationCluster {
+  // The destination's API server host, when Radar can tell.
+  server?: string
+  // A kubeconfig context for that cluster other than the current one.
+  context?: ContextInfo
+  // Whether this Radar may switch contexts at all.
+  canSwitch: boolean
+}
+
+// Resolves where a remote GitOps object deploys and which kubeconfig context
+// reaches it. The server does the matching; this only asks for remote objects.
+export function useDestinationCluster(
+  remote: boolean | undefined,
+  kind: string,
+  namespace: string,
+  name: string,
+): DestinationCluster {
+  const destination = useGitOpsDestination(kind, namespace, name, !!remote)
+  const contexts = useContexts()
+  const capabilities = useCapabilities()
+  const contextName = destination.data?.contexts[0]
+  return {
+    server: destination.data?.server || undefined,
+    context: contextName ? contexts.data?.find((c) => c.name === contextName) : undefined,
+    canSwitch: capabilities.data?.configManagement !== 'operator',
+  }
+}

package/src/components/helm/TrackChartSourceDialog.tsx

@@ -1,8 +1,9 @@
-import { useState } from 'react'
+import { useState, useId } from 'react'
 import { DialogPortal } from '@skyhook-io/k8s-ui/components/ui/DialogPortal'
 import { X, Plus, Trash2, Link2, AlertTriangle } from 'lucide-react'
 import { clsx } from 'clsx'
-import { useHelmOCISources, useAddOCISource, useRemoveOCISource, useClusterInfo } from '../../api/client'
+import { useHelmOCISources, useAddOCISource, useRemoveOCISource, useClusterInfo, useCapabilities } from '../../api/client'
+import { OperatorManagedNotice } from '../settings/OperatorManagedNotice'
 import { Input } from '@skyhook-io/k8s-ui'
 import type { UpgradeInfo } from '../../types'
 
@@ -15,12 +16,14 @@ interface TrackChartSourceDialogProps {
   sourceError?: string
 }
 
-function getSourceIssueCopy(sourceIssue: UpgradeInfo['sourceIssue'], sourceError?: string) {
+function getSourceIssueCopy(sourceIssue: UpgradeInfo['sourceIssue'], sourceError?: string, operatorManaged = false) {
   switch (sourceIssue) {
     case 'repo_index_error':
       return {
         title: 'A Helm repo index failed',
-        body: 'Fix, refresh, or remove the broken Helm repo index. If this release came from OCI, add its registry prefix and Radar will check OCI before reporting that repo error.',
+        body: operatorManaged
+          ? 'Ask the operator to fix the Helm repo index, or add the chart’s OCI registry prefix to helm.ociSources if it came from OCI.'
+          : 'Fix, refresh, or remove the broken Helm repo index. If this release came from OCI, add its registry prefix and Radar will check OCI before reporting that repo error.',
       }
     case 'ambiguous_repository':
       return {
@@ -30,7 +33,9 @@ function getSourceIssueCopy(sourceIssue: UpgradeInfo['sourceIssue'], sourceError
     case 'untracked':
       return {
         title: 'Source not tracked',
-        body: 'Helm does not record the install source. Add the OCI prefix that contains this chart.',
+        body: operatorManaged
+          ? 'Helm does not record the install source. Ask the operator to add the OCI prefix that contains this chart to helm.ociSources.'
+          : 'Helm does not record the install source. Add the OCI prefix that contains this chart.',
       }
     default:
       return sourceError
@@ -45,11 +50,15 @@ function getSourceIssueCopy(sourceIssue: UpgradeInfo['sourceIssue'], sourceError
 // GitOps) Radar can only track upgrades once the user declares where they live.
 // Registering a registry/org prefix lets Radar probe "<prefix>/<chartName>".
 export function TrackChartSourceDialog({ open, onClose, chartName, sourceIssue, sourceError }: TrackChartSourceDialogProps) {
+  const titleId = useId()
   const [value, setValue] = useState('')
   const { data: sources } = useHelmOCISources()
   const { data: clusterInfo } = useClusterInfo()
   const addSource = useAddOCISource()
   const removeSource = useRemoveOCISource()
+  const { data: capabilities } = useCapabilities()
+  const operatorManaged = capabilities?.configManagement === 'operator'
+  const canEdit = capabilities != null && !operatorManaged
 
   // In-cluster Radar has no `helm registry login` store (the pod's HELM_CONFIG_HOME
   // points at an empty /tmp), so private registries can't authenticate — only
@@ -62,7 +71,7 @@ export function TrackChartSourceDialog({ open, onClose, chartName, sourceIssue,
   const normalizedChartName = chartName?.trim().replace(/^\/+|\/+$/g, '') ?? ''
   const probedRef = normalizedInput && normalizedChartName ? `${normalizedInput}/${normalizedChartName}` : ''
   const looksLikeFullChartRef = Boolean(normalizedInput && normalizedChartName && normalizedInput.endsWith(`/${normalizedChartName}`))
-  const sourceIssueCopy = getSourceIssueCopy(sourceIssue, sourceError)
+  const sourceIssueCopy = getSourceIssueCopy(sourceIssue, sourceError, operatorManaged)
 
   const handleAdd = () => {
     if (!trimmed || invalid) return
@@ -70,20 +79,21 @@ export function TrackChartSourceDialog({ open, onClose, chartName, sourceIssue,
   }
 
   return (
-    <DialogPortal open={open} onClose={onClose} className="max-w-lg w-full">
+    <DialogPortal ariaLabelledBy={titleId} open={open} onClose={onClose} className="max-w-lg w-full">
       <div className="flex items-start gap-3 p-4 border-b border-theme-border">
         <div className="flex items-center justify-center w-10 h-10 rounded-full shrink-0 bg-theme-hover">
           <Link2 className="w-5 h-5 text-theme-text-secondary" />
         </div>
         <div className="flex-1 min-w-0">
-          <h3 className="text-lg font-semibold text-theme-text-primary">Track chart source</h3>
+          <h3 id={titleId} className="text-lg font-semibold text-theme-text-primary">Track chart source</h3>
           <p className="text-sm text-theme-text-secondary mt-1">
-            Helm doesn&apos;t record where a chart was installed from. Register your OCI
-            registry prefix and Radar will check it for newer versions of your charts.
+            Helm doesn&apos;t record where a chart was installed from. Radar checks registered OCI
+            prefixes for newer versions of your charts.
           </p>
         </div>
         <button
           onClick={onClose}
+          aria-label="Close"
           className="p-1 text-theme-text-secondary hover:text-theme-text-primary hover:bg-theme-elevated rounded"
         >
           <X className="w-5 h-5" />
@@ -91,6 +101,7 @@ export function TrackChartSourceDialog({ open, onClose, chartName, sourceIssue,
       </div>
 
       <div className="p-4 space-y-4">
+        {operatorManaged && <OperatorManagedNotice helmValue="helm.ociSources" />}
         {sourceIssueCopy && (
           <div className="flex items-start gap-2 rounded-lg border border-theme-border bg-theme-elevated px-3 py-2 text-sm">
             <AlertTriangle className="w-4 h-4 shrink-0 mt-0.5 text-theme-text-secondary" />
@@ -101,7 +112,7 @@ export function TrackChartSourceDialog({ open, onClose, chartName, sourceIssue,
           </div>
         )}
 
-        <div>
+        {canEdit && <div>
           <label className="block text-sm font-medium text-theme-text-secondary mb-2">
             OCI registry prefix
           </label>
@@ -135,7 +146,7 @@ export function TrackChartSourceDialog({ open, onClose, chartName, sourceIssue,
                 ? `Radar will probe "${probedRef || `<prefix>/${normalizedChartName}`}".`
                 : 'Radar probes <prefix>/<chartName> for each untracked release.'}
           </p>
-        </div>
+        </div>}
 
         {sources && sources.length > 0 && (
           <div>
@@ -149,14 +160,14 @@ export function TrackChartSourceDialog({ open, onClose, chartName, sourceIssue,
                   className="flex items-center justify-between gap-2 px-3 py-2 bg-theme-elevated rounded-lg"
                 >
                   <span className="text-sm text-theme-text-primary font-mono truncate">{src}</span>
-                  <button
+                  {canEdit && <button
                     onClick={() => removeSource.mutate(src)}
                     disabled={removeSource.isPending}
                     className="p-1 text-theme-text-secondary hover:text-red-400 hover:bg-red-500/10 rounded disabled:opacity-50"
                     aria-label={`Remove ${src}`}
                   >
                     <Trash2 className="w-4 h-4" />
-                  </button>
+                  </button>}
                 </li>
               ))}
             </ul>

package/src/components/home/HomeView.tsx

@@ -52,9 +52,11 @@ interface HomeViewProps {
   onNavigateToUpgradeImpact?: () => void
   onNavigateToHelmRelease?: (namespace: string, release: string) => void
   onNavigateToManagerPath?: (path: string) => void
+  // Present only when release notes exist for this version.
+  onShowWhatsNew?: () => void
 }
 
-export function HomeView({ namespaces, topology, fallbackClusterLoadState, onNavigateToView, onNavigateToResourceKind, onNavigateToResource, onNavigateToCerts, onNavigateToUpgradeImpact, onNavigateToHelmRelease, onNavigateToManagerPath }: HomeViewProps) {
+export function HomeView({ namespaces, topology, fallbackClusterLoadState, onNavigateToView, onNavigateToResourceKind, onNavigateToResource, onNavigateToCerts, onNavigateToUpgradeImpact, onNavigateToHelmRelease, onNavigateToManagerPath, onShowWhatsNew }: HomeViewProps) {
   // The card itself decides whether the cluster has a capacity story
   // (available, softened-denied, or karpenterless-with-managers/groups) and
   // returns null otherwise — the outer gate only excludes states with nothing
@@ -138,9 +140,11 @@ export function HomeView({ namespaces, topology, fallbackClusterLoadState, onNav
         )}
         {/* Row 1: Cluster Health Card (combined health + resource counts) */}
         <ClusterHealthCard
-          radarVersion={deploymentMode === 'in-cluster' && versionInfo ? (
+          radarVersion={versionInfo && deploymentMode !== 'cloud' ? (
             <RadarVersionLine
               version={versionInfo}
+              showUpgrade={deploymentMode === 'in-cluster'}
+              onShowWhatsNew={onShowWhatsNew}
               manager={installationManager}
               managerLoading={installationManagerLoading}
               onNavigateToHelmRelease={onNavigateToHelmRelease}

package/src/components/home/MCPSetupDialog.tsx

@@ -176,6 +176,15 @@ export function MCPSetupDialog({ open, onClose, mcpUrl }: MCPSetupDialogProps) {
     }
   }, null, 2)
 
+  const opencodeConfig = JSON.stringify({
+    mcp: {
+      radar: {
+        type: "remote",
+        url: mcpUrl,
+      }
+    }
+  }, null, 2)
+
   return (
     <div className="fixed inset-0 z-50 flex items-center justify-center">
       <div className="absolute inset-0 bg-black/60 backdrop-blur-sm" onClick={onClose} />
@@ -283,6 +292,7 @@ export function MCPSetupDialog({ open, onClose, mcpUrl }: MCPSetupDialogProps) {
               { icon: Code2, name: 'VS Code Copilot', path: '.vscode/mcp.json', config: vsCodeConfig },
               { icon: Code2, name: 'Cline', path: 'Cline MCP settings (via UI)', config: clineConfig },
               { icon: Code2, name: 'JetBrains AI', path: 'Settings → Tools → AI Assistant → MCP', config: jetbrainsConfig },
+              { icon: Terminal, name: 'OpenCode', path: '~/.config/opencode/opencode.json', config: opencodeConfig },
               { icon: Terminal, name: 'OpenAI Codex', path: '~/.codex/config.toml', config: codexConfig },
               { icon: Terminal, name: 'Gemini CLI', path: '~/.gemini/settings.json', config: geminiConfig },
             ].map((agent) => (

package/src/components/home/RadarVersionLine.test.tsx

@@ -142,4 +142,18 @@ describe('RadarVersionLine', () => {
     expect(html).toContain('Open the in-cluster upgrade instructions and apply the change through GitOps')
     expect(html).not.toContain('Open it to upgrade through GitOps')
   })
+
+  it('offers What\'s new only when the host can open it', () => {
+    const upToDate = { ...version, latestVersion: '1.2.3', updateAvailable: false }
+    expect(renderToString(<RadarVersionLine version={upToDate} />)).not.toContain('What&#x27;s new')
+    expect(renderToString(<RadarVersionLine version={upToDate} onShowWhatsNew={() => {}} />)).toContain('What&#x27;s new')
+    expect(renderToString(<RadarVersionLine version={version} onShowWhatsNew={() => {}} />)).toContain('What&#x27;s new')
+  })
+
+  it('hides upgrade guidance when the host handles upgrades elsewhere', () => {
+    const html = renderToString(<RadarVersionLine version={version} showUpgrade={false} onShowWhatsNew={() => {}} />)
+    expect(html).toContain('v1.2.3')
+    expect(html).not.toContain('available')
+    expect(html).toContain('What&#x27;s new')
+  })
 })

package/src/components/home/RadarVersionLine.tsx

@@ -1,4 +1,4 @@
-import { ArrowUpCircle } from 'lucide-react'
+import { ArrowUpCircle, Megaphone } from 'lucide-react'
 import { gitOpsRouteForResource } from '@skyhook-io/k8s-ui'
 import type { CloudConnectSelf, VersionInfo } from '../../api/client'
 import {
@@ -14,6 +14,10 @@ interface RadarVersionLineProps {
   managerLoading?: boolean
   onNavigateToHelmRelease?: (namespace: string, release: string) => void
   onNavigateToGitOps?: (path: string) => void
+  // Local installs upgrade through the update notification, and this line's
+  // upgrade link points at in-cluster instructions.
+  showUpgrade?: boolean
+  onShowWhatsNew?: () => void
 }
 
 function displayVersion(version: string): string {
@@ -26,13 +30,33 @@ export function RadarVersionLine({
   managerLoading = false,
   onNavigateToHelmRelease,
   onNavigateToGitOps,
+  showUpgrade: upgradeAllowed = true,
+  onShowWhatsNew,
 }: RadarVersionLineProps) {
   const latestVersion = version.latestVersion
   const updateStatus = getVersionUpdateStatus(version.currentVersion, latestVersion)
-  const showUpgrade = version.updateAvailable && !!latestVersion && updateStatus.tier !== 'none'
+  const showUpgrade = upgradeAllowed && version.updateAvailable && !!latestVersion && updateStatus.tier !== 'none'
+  const whatsNew = onShowWhatsNew && (
+    <span className="inline-flex items-center gap-1">
+      <span aria-hidden>·</span>
+      <button
+        type="button"
+        onClick={onShowWhatsNew}
+        className="inline-flex items-center gap-1 text-accent-text hover:text-accent transition-colors"
+      >
+        <Megaphone className="h-3.5 w-3.5 shrink-0" aria-hidden />
+        What's new
+      </button>
+    </span>
+  )
 
   if (!showUpgrade) {
-    return <span>Radar <span className="font-mono">{displayVersion(version.currentVersion)}</span></span>
+    return (
+      <span className="inline-flex flex-wrap items-center gap-x-1">
+        <span>Radar <span className="font-mono">{displayVersion(version.currentVersion)}</span></span>
+        {whatsNew}
+      </span>
+    )
   }
 
   const controller = manager?.controllerRef
@@ -111,6 +135,7 @@ export function RadarVersionLine({
           {action}
         </Tooltip>
       </span>
+      {whatsNew}
     </span>
   )
 }

package/src/components/logs/ScheduledWorkloadLogsViewer.tsx

@@ -1,9 +1,9 @@
 import { useEffect, useMemo, useState } from 'react'
 import { Loader2, Terminal } from 'lucide-react'
 import { clsx } from 'clsx'
-import { useWorkloadRuns, type WorkloadRun } from '../../api/client'
+import { useWorkloadRuns, useResource, type WorkloadRun } from '../../api/client'
 import { WorkloadLogsViewer } from './WorkloadLogsViewer'
-import { pickDefaultRun, workloadRunKey } from '../execution/BatchExecutionView'
+import { pickDefaultRun, selectedRunMissing, workloadRunKey } from '../execution/BatchExecutionView'
 
 interface ScheduledWorkloadLogsViewerProps {
   kind: string
@@ -15,34 +15,61 @@ interface ScheduledWorkloadLogsViewerProps {
 
 const EMPTY_RUNS: WorkloadRun[] = []
 
-export function ScheduledWorkloadLogsViewer({ kind, namespace, name, selectedRunKey, onSelectRun }: ScheduledWorkloadLogsViewerProps) {
+export function ScheduledWorkloadLogsViewer(props: ScheduledWorkloadLogsViewerProps) {
+  return <ScheduledWorkloadLogsContent key={JSON.stringify([props.kind, props.namespace, props.name])} {...props} />
+}
+
+function ScheduledWorkloadLogsContent({ kind, namespace, name, selectedRunKey, onSelectRun }: ScheduledWorkloadLogsViewerProps) {
   const clusterScoped = kind === 'ClusterWorkflowTemplate' || kind === 'clusterworkflowtemplates'
-  const runsQuery = useWorkloadRuns(kind, namespace, name, true, { clusterScoped, refetchActive: true })
-  const runs = runsQuery.data?.runs ?? EMPTY_RUNS
-  const defaultRun = useMemo(() => pickDefaultRun(runs), [runs])
+  const jobSet = kind.toLowerCase() === 'jobset' || kind.toLowerCase() === 'jobsets'
   const [localRunKey, setLocalRunKey] = useState('')
   const effectiveRunKey = selectedRunKey ?? localRunKey
   const selectRun = onSelectRun ?? setLocalRunKey
+  const [scope, setScope] = useState('selected')
+  const [role, setRole] = useState('')
+  const rootQuery = useResource<any>('jobsets', namespace, name, 'jobset.x-k8s.io', { enabled: jobSet })
+  const runsQuery = useWorkloadRuns(kind, namespace, name, true, { clusterScoped, refetchActive: true, ...(jobSet ? { selected: effectiveRunKey } : {}) })
+  const memberCollection = runsQuery.data?.collection === 'members'
+  const runs = runsQuery.data?.runs ?? EMPTY_RUNS
+  const selectedRunFromResponse = runsQuery.data?.selected
+  const resolvedRuns = useMemo(
+    () => selectedRunFromResponse && !runs.some(run => workloadRunKey(run) === workloadRunKey(selectedRunFromResponse))
+      ? [...runs, selectedRunFromResponse]
+      : runs,
+    [runs, selectedRunFromResponse],
+  )
+  const defaultRun = useMemo(() => memberCollection ? runs[0] : pickDefaultRun(runs), [memberCollection, runs])
+  const roles: string[] = [...new Set<string>([...(rootQuery.data?.spec?.replicatedJobs?.map((r: { name: string }) => r.name) ?? []), ...(role ? [role] : [])])]
+  const effectiveRole = role || roles[0] || ''
+  const aggregate = memberCollection && scope !== 'selected'
+  const scopeControls = memberCollection && <div className="flex flex-wrap items-center gap-2 border-b border-theme-border bg-theme-surface px-3 py-2 text-xs">
+    <label htmlFor="jobset-log-scope" className="text-theme-text-secondary">Log scope</label>
+    <select id="jobset-log-scope" value={scope} onChange={event => { if (event.target.value === 'role') setRole(effectiveRole); setScope(event.target.value) }} className="rounded border border-theme-border bg-theme-elevated px-2 py-1 text-theme-text-primary"><option value="selected">Selected Job</option><option value="role" disabled={roles.length === 0}>Role</option><option value="all">All current members</option></select>
+    {scope === 'role' && <select aria-label="Log role" value={effectiveRole} onChange={event => setRole(event.target.value)} className="rounded border border-theme-border bg-theme-elevated px-2 py-1 text-theme-text-primary">{roles.map(r => <option key={r} value={r}>{r}</option>)}</select>}
+    {aggregate && <span className="text-theme-text-secondary">Snapshot · Refresh for new logs · up to 40 container sources, 1,000 lines and 64 KiB per source · retained Pods only</span>}
+  </div>
+
+  const selectionMissing = memberCollection && selectedRunMissing(resolvedRuns, effectiveRunKey)
 
   useEffect(() => {
-    if (!runsQuery.data) return
-    if (runs.length === 0) {
+    if (!runsQuery.data || runsQuery.isPlaceholderData || selectionMissing) return
+    if (resolvedRuns.length === 0) {
       if (effectiveRunKey) selectRun('')
       return
     }
-    if (!runs.some(run => workloadRunKey(run) === effectiveRunKey)) {
+    if (!resolvedRuns.some(run => workloadRunKey(run) === effectiveRunKey)) {
       selectRun(workloadRunKey(defaultRun ?? runs[0]))
     }
-  }, [runsQuery.data, runs, effectiveRunKey, defaultRun, selectRun])
+  }, [runsQuery.data, runsQuery.isPlaceholderData, runs, resolvedRuns, effectiveRunKey, defaultRun, selectRun, selectionMissing])
 
-  const selectedRun = runs.find(run => workloadRunKey(run) === effectiveRunKey) ?? defaultRun
+  const selectedRun = selectionMissing ? undefined : resolvedRuns.find(run => workloadRunKey(run) === effectiveRunKey) ?? defaultRun
 
   if (runsQuery.isLoading) {
     return (
       <div className="flex h-full items-center justify-center text-theme-text-tertiary">
         <div className="flex items-center gap-2">
           <Loader2 className="h-4 w-4 animate-spin" />
-          <span>Loading runs...</span>
+          <span>{kind === 'JobSet' || kind === 'jobsets' ? 'Loading member Jobs...' : 'Loading runs...'}</span>
         </div>
       </div>
     )
@@ -52,7 +79,21 @@ export function ScheduledWorkloadLogsViewer({ kind, namespace, name, selectedRun
     return (
       <div className="flex h-full flex-col items-center justify-center gap-2 text-theme-text-tertiary">
         <Terminal className="h-8 w-8" />
-        <span>{runsQuery.error instanceof Error ? runsQuery.error.message : 'Failed to load runs'}</span>
+        <span>{runsQuery.error instanceof Error ? runsQuery.error.message : kind === 'JobSet' || kind === 'jobsets' ? 'Failed to load member Jobs' : 'Failed to load runs'}</span>
+      </div>
+    )
+  }
+
+  if (aggregate) return <div className="flex h-full min-h-0 flex-col">{scopeControls}<div className="min-h-0 flex-1"><WorkloadLogsViewer key={JSON.stringify([rootQuery.data?.metadata?.uid, scope, effectiveRole])} kind="jobsets" namespace={namespace} name={name} snapshotOnly role={scope === 'role' ? effectiveRole : undefined} autoStream={false} /></div></div>
+
+  if (selectionMissing) {
+    return (
+      <div className="space-y-3 p-4">{scopeControls}
+        <p className="text-sm text-theme-text-secondary">Selected Job is currently unavailable. It may have been removed or be waiting for recreation. Your selection is preserved if it reappears; choose another shown Job to switch.</p>
+        {runs.length > 0 && <select aria-label="Select a shown member Job" value={effectiveRunKey} onChange={(event) => selectRun(event.target.value)} className="max-w-full rounded-md border border-theme-border bg-theme-elevated px-2 py-1 text-sm text-theme-text-primary">
+          <option value={effectiveRunKey} disabled>Choose a shown Job</option>
+          {runs.map((run) => <option key={workloadRunKey(run)} value={workloadRunKey(run)}>{formatRunOption(run, false, true)}</option>)}
+        </select>}
       </div>
     )
   }
@@ -61,38 +102,42 @@ export function ScheduledWorkloadLogsViewer({ kind, namespace, name, selectedRun
     return (
       <div className="flex h-full flex-col items-center justify-center gap-2 text-theme-text-tertiary">
         <Terminal className="h-8 w-8" />
-        <span>No retained runs found</span>
+        <span>{memberCollection ? 'No child Jobs found' : 'No retained runs found'}</span>
       </div>
     )
   }
 
   return (
     <div className="flex h-full min-h-0 flex-col">
+      {scopeControls}
       <div className="shrink-0 border-b border-theme-border bg-theme-surface px-3 py-2">
         <div className="flex flex-wrap items-center gap-2">
-          <span className="text-xs font-medium text-theme-text-secondary">Run</span>
+          <span className="text-xs font-medium text-theme-text-secondary">{memberCollection ? 'Job' : 'Run'}</span>
           <select
             value={workloadRunKey(selectedRun)}
             onChange={(event) => selectRun(event.target.value)}
             className="min-w-0 max-w-full rounded-md border border-theme-border bg-theme-elevated px-2 py-1 text-sm text-theme-text-primary"
           >
-            {runs.map(run => (
+            {resolvedRuns.map(run => (
               <option key={workloadRunKey(run)} value={workloadRunKey(run)}>
-                {formatRunOption(run, clusterScoped)}
+                {formatRunOption(run, clusterScoped, memberCollection)}
               </option>
             ))}
           </select>
           <span className={clsx('badge-sm', phaseBadgeClass(selectedRun.phase))}>
-            {selectedRun.phase}
+            {selectedRun.phase}{selectedRun.deleting ? ' · deleting' : ''}
           </span>
           <span className="text-xs text-theme-text-tertiary">
             {formatRunTime(selectedRun)}
           </span>
+          {memberCollection && runsQuery.data?.truncated && (
+            <span className="text-xs text-theme-text-tertiary">Showing {runs.length} of {runsQuery.data.total} Jobs</span>
+          )}
         </div>
       </div>
       <div className="min-h-0 flex-1">
         <WorkloadLogsViewer
-          key={`${selectedRun.kind}/${selectedRun.namespace}/${selectedRun.name}`}
+          key={workloadRunLogsKey(selectedRun)}
           kind={selectedRun.kind}
           namespace={selectedRun.namespace}
           name={selectedRun.name}
@@ -125,11 +170,19 @@ function formatRunTime(run: WorkloadRun): string {
   return new Date(raw).toLocaleString()
 }
 
-function formatRunOption(run: WorkloadRun, showNamespace: boolean): string {
-  const bits = [showNamespace ? `${run.namespace}/${run.name}` : run.name, run.phase]
+function formatRunOption(run: WorkloadRun, showNamespace: boolean, memberCollection: boolean): string {
+  const bits = [showNamespace ? `${run.namespace}/${run.name}` : run.name, `${run.phase}${run.deleting ? ' · deleting' : ''}`]
+  if (memberCollection && run.jobset?.replicatedJob) {
+    bits.push(`${run.jobset?.replicatedJob}${run.jobset?.jobIndex ? ` #${run.jobset?.jobIndex}` : ''}`)
+  }
   if (run.progress) bits.push(run.progress)
   else if (run.desired) bits.push(`${run.succeeded ?? 0}/${run.desired}`)
-  const work = run.podTotal ? `${run.podSucceeded ?? 0}/${run.podTotal} pods` : ''
+  const work = run.podTotal ? `${run.podSucceeded ?? 0}/${run.podTotal} completed Pods` : ''
   if (work) bits.push(work)
   return bits.join(' · ')
 }
+
+// A JobSet retry can replace a child Job at the same resource address.
+export function workloadRunLogsKey(run: WorkloadRun): string {
+  return JSON.stringify([run.group, workloadRunKey(run), run.jobset?.restartAttempt, run.jobset?.jobRestartAttempt])
+}

package/src/components/logs/WorkloadLogsViewer.tsx

@@ -10,24 +10,27 @@ interface WorkloadLogsViewerProps {
   namespace: string
   name: string
   /** Start streaming on mount. Default true — workload logs are aggregated from live pods. */
+  snapshotOnly?: boolean
+  role?: string
   autoStream?: boolean
 }
 
-export function WorkloadLogsViewer({ kind, namespace, name, autoStream = true }: WorkloadLogsViewerProps) {
+export function WorkloadLogsViewer({ kind, namespace, name, autoStream = true, snapshotOnly = false, role }: WorkloadLogsViewerProps) {
   const desktopDownload = useDesktopDownload()
   const { theme } = useTheme()
 
   const fetchAll = useCallback(async (params: WorkloadLogsFetchParams): Promise<WorkloadLogsResult> => {
     const query = new URLSearchParams()
     if (params.container) query.set('container', params.container)
+    if (role) query.set('role', role)
     if (params.tailLines) query.set('tailLines', String(params.tailLines))
     if (params.sinceSeconds) query.set('sinceSeconds', String(params.sinceSeconds))
     const qs = query.toString()
     const data = await fetchJSON<WorkloadLogsResult>(
-      `/workloads/${kind}/${namespace}/${name}/logs${qs ? `?${qs}` : ''}`
+      `${snapshotOnly ? `/jobsets/${namespace}/${name}` : `/workloads/${kind}/${namespace}/${name}`}/logs${qs ? `?${qs}` : ''}`, { signal: params.signal }
     )
     return data
-  }, [kind, namespace, name])
+  }, [kind, namespace, name, snapshotOnly, role])
 
   const makeStream = useCallback((params: WorkloadLogsFetchParams) => {
     return createWorkloadLogStream(kind, namespace, name, params)
@@ -37,7 +40,7 @@ export function WorkloadLogsViewer({ kind, namespace, name, autoStream = true }:
     <SharedWorkloadLogsViewer
       name={name}
       fetchAll={fetchAll}
-      createStream={makeStream}
+      createStream={snapshotOnly ? undefined : makeStream}
       overrideDownload={desktopDownload}
       forceDark={theme === 'dark' ? true : undefined}
       autoStream={autoStream}

package/src/components/nav/PrimaryNavRail.test.tsx

@@ -2,13 +2,14 @@ import { describe, expect, it } from "vitest";
 import { renderToString } from "react-dom/server";
 import { PrimaryNavRail } from "./PrimaryNavRail";
 
-function renderRail() {
+function renderRail(whatsNew?: { unread: boolean; onOpen: () => void }) {
   return renderToString(
     <PrimaryNavRail
       activeView="home"
       onNavigate={() => {}}
       pinned
       onTogglePinned={() => {}}
+      whatsNew={whatsNew}
     />,
   );
 }
@@ -17,4 +18,12 @@ describe("PrimaryNavRail", () => {
   it("always surfaces Capacity — the view reads cluster capacity across every node manager, not just Karpenter", () => {
     expect(renderRail()).toContain("Capacity");
   });
+
+  it("shows What's new only when the host has notes, and marks it while unread", () => {
+    expect(renderRail()).not.toContain("What&#x27;s new");
+    const read = renderRail({ unread: false, onOpen: () => {} });
+    expect(read).toContain("What&#x27;s new");
+    expect(read).not.toContain("(unread)");
+    expect(renderRail({ unread: true, onOpen: () => {} })).toContain("(unread)");
+  });
 });