@skyhook-io/radar-app 1.16.2 → 1.16.3

package/src/components/whats-new/releaseNotes.ts

@@ -1,38 +1,94 @@
 import type { LucideIcon } from 'lucide-react'
-import { Bot, GitCompareArrows, Layers, Network, Scale } from 'lucide-react'
+import { Bot, GitCompareArrows, Layers, Network, RefreshCcw, Scale, ScrollText, SlidersHorizontal } from 'lucide-react'
 import { compareVersions } from '../../utils/version'
 
 export interface ReleaseHighlight {
   id: string
   icon: LucideIcon
   title: string
+  /**
+   * Shown on a grid card, so at most 150 characters. Read next to other
+   * releases' highlights, so it must stand on its own.
+   */
   description: string
+  /**
+   * Fuller copy for when this highlight leads the dialog. Only a release's
+   * top highlight can ever lead (every other one scores at or below it), so
+   * only that one may set it.
+   */
+  leadDescription?: string
+  /**
+   * 1-10, comparable across releases: it decides which highlights a user who
+   * skipped releases sees, and whether the dialog opens by itself.
+   *   9-10  a new capability that defines the release
+   *   7-8   a solid feature a typical user would go try now
+   *   4-6   a useful improvement
+   *   1-3   polish
+   * Most highlights are not 9s. When every card is a 7, every release
+   * interrupts the user, which is what the score exists to prevent.
+   */
+  importance: number
   /** In-app route the highlight's call to action opens. */
   path?: string
   cta?: string
-  /** Icon tile color, so the cards read apart at a glance. The lead card always uses the accent. */
-  tone?: HighlightTone
 }
 
-export type HighlightTone = 'violet' | 'teal' | 'emerald' | 'indigo'
-
 export interface ReleaseNotes {
   version: string
-  /** The first highlight leads the dialog at full width. */
   highlights: ReleaseHighlight[]
   improvements: string[]
-  releaseUrl: string
 }
 
-// One entry per release that has something to announce. A version without its
-// own entry shows the newest entry at or below it, so a patch upgrade (or one
-// that skips the release with notes) still gets them. Every minor and major
-// release must have its own entry: scripts/check-whats-new.sh refuses to
+export const CHANGELOG_URL = 'https://radarhq.io/changelog'
+
+// One entry per release that has something to announce. A user sees the
+// entries for the releases they haven't seen yet, composed into one dialog, so
+// a patch upgrade, or one that skips releases, still gets them. Every minor and
+// major release must have its own entry: scripts/check-whats-new.sh refuses to
 // release one without it.
 export const RELEASE_NOTES: ReleaseNotes[] = [
+  {
+    version: 'v1.16.0',
+    highlights: [
+      {
+        id: 'restart-loop-issues',
+        icon: RefreshCcw,
+        title: 'One steady issue per crash loop',
+        description: 'A crash-looping container stays one issue until it recovers, with probe failures and exits as evidence. No more repeat alerts.',
+        leadDescription: 'A restarting container is one issue until it recovers, instead of a new one on every check, so no more repeat alerts and investigations. Probe failures, the last exit and how many replicas are affected sit on it as evidence, and severity follows impact.',
+        importance: 6,
+        path: '/issues',
+        cta: 'Open Issues',
+      },
+      {
+        id: 'log-viewer',
+        icon: ScrollText,
+        title: 'Log viewer enhancements',
+        description: 'Levels from the logger itself, stack traces kept with their errors, Hide matching, and a chip for lines without a level.',
+        importance: 5,
+      },
+      {
+        id: 'per-cluster-settings',
+        icon: SlidersHorizontal,
+        title: 'Separate settings for each cluster',
+        description: 'Running Radar locally, each kubeconfig context keeps its own Metrics, Argo CD and Cost connections.',
+        importance: 4,
+      },
+    ],
+    improvements: [
+      // The grid fills row by row: pair lines of similar length.
+      "A workload's Timeline shows only its own history",
+      "Timeline's Problems filter no longer hides crash loops",
+      'Live Traffic figures corrected for Cilium and Istio',
+      'Saved namespace picks survive a failing namespace list',
+      'Terminal tabs show and keep the context they opened for',
+      'YAML review flags a resource that changed after review',
+      'Helm chart meets the Pod Security restricted profile',
+      'Helm chart extraArgs passes through any Radar flag',
+    ],
+  },
   {
     version: 'v1.15.0',
-    releaseUrl: 'https://github.com/skyhook-io/radar/releases/tag/v1.15.0',
     highlights: [
       {
         id: 'ai-investigations',
@@ -40,14 +96,16 @@ export const RELEASE_NOTES: ReleaseNotes[] = [
         title: 'AI investigations that show their work',
         // No link: the investigations page redirects home when this run
         // mode can't host local agents.
-        description: 'A clear verdict and the story of what broke, with the charts, logs and config behind it placed where the agent cites them. Now also runs on OpenCode, including AWS Bedrock.',
+        description: 'A clear verdict and the story of what broke, with the evidence placed where the agent cites it. Runs on OpenCode too.',
+        leadDescription: 'A clear verdict and the story of what broke, with the charts, logs and config behind it placed where the agent cites them. Runs on OpenCode too, including AWS Bedrock.',
+        importance: 9,
       },
       {
         id: 'gitops-manifest-diff',
         icon: GitCompareArrows,
         title: 'Full manifest diffs for Argo CD resources',
         description: 'Compare the Git-rendered and live manifest of a drifted Argo CD resource, side by side or unified.',
-        tone: 'violet',
+        importance: 8,
         path: '/gitops',
         cta: 'Open GitOps',
       },
@@ -56,7 +114,7 @@ export const RELEASE_NOTES: ReleaseNotes[] = [
         icon: Scale,
         title: 'Rightsizing and cost data in MCP',
         description: 'Agents get new optimized tools. Risks (OOM, limit conflicts and throttling) lead before cost-saving, in the UI as well.',
-        tone: 'emerald',
+        importance: 7,
         path: '/cost/rightsizing',
         cta: 'Open Rightsizing',
       },
@@ -65,14 +123,14 @@ export const RELEASE_NOTES: ReleaseNotes[] = [
         icon: Layers,
         title: 'Deeper batch + AI/ML workloads support',
         description: 'Dedicated pages for Kueue, JobSet and Ray resources, and Job and JobSet details now show why a queued job has no Pods.',
-        tone: 'teal',
+        importance: 7,
       },
       {
         id: 'rollout-traffic-topology',
         icon: Network,
         title: 'Canary and blue-green in Topology',
         description: 'See canary and stable Pods, which Services route to each side, and the canary traffic weight.',
-        tone: 'indigo',
+        importance: 7,
         path: '/topology',
         cta: 'Open Topology',
       },
@@ -105,17 +163,90 @@ export function releaseLine(version: string): string {
   return version.replace(/^(v\d+\.\d+)\.\d+$/, '$1')
 }
 
-/** The newest notes for a release at or below `version` — what that version's user has access to. */
+/** The entries at or below `version`, newest first: what that version's user has access to. */
+function releasesUpTo(version: string, catalog: ReleaseNotes[]): ReleaseNotes[] {
+  return catalog
+    .filter(notes => (compareVersions(notes.version, version) ?? 1) <= 0)
+    .sort((a, b) => compareVersions(b.version, a.version) ?? 0)
+}
+
+/** The newest notes for a release at or below `version`. */
 export function latestReleaseNotesFor(
   version: string | undefined,
   catalog: ReleaseNotes[] = RELEASE_NOTES,
 ): ReleaseNotes | undefined {
   if (!version) return undefined
-  let latest: ReleaseNotes | undefined
-  for (const notes of catalog) {
-    const atOrBelow = compareVersions(notes.version, version)
-    if (atOrBelow === null || atOrBelow > 0) continue
-    if (!latest || (compareVersions(notes.version, latest.version) ?? 0) > 0) latest = notes
+  return releasesUpTo(version, catalog)[0]
+}
+
+/**
+ * The entries a user hasn't seen, newest first: those after `lastSeen`, up to
+ * the running version. A fresh install has nothing to compare against and gets
+ * none; an install that predates the seen record, or whose record isn't a
+ * version, gets them all.
+ */
+export function unreadReleases(
+  currentVersion: string,
+  lastSeen: string | null,
+  priorInstall: boolean,
+  catalog: ReleaseNotes[] = RELEASE_NOTES,
+): ReleaseNotes[] {
+  const available = releasesUpTo(currentVersion, catalog)
+  if (lastSeen === null) return priorInstall ? available : []
+  return available.filter(notes => (compareVersions(notes.version, lastSeen) ?? 1) > 0)
+}
+
+// How much a highlight counts by how far back its release is. A user who
+// skipped releases sees the best of them, weighted toward the newest; older
+// releases than this list covers are left to the changelog.
+export const RELEASE_WEIGHTS = [1, 0.75, 0.5]
+export const MAX_CARDS = 5
+export const MAX_LINES = 8
+// The dialog opens by itself only when the cards it shows add up to this.
+// A release of mostly 4-6s stays behind the unread dot; one with a few solid
+// features, or a skipped release with them, opens it.
+export const AUTO_OPEN_SCORE = 25
+
+export interface ComposedHighlight extends ReleaseHighlight {
+  version: string
+  score: number
+}
+
+export interface ComposedLine {
+  version: string
+  text: string
+}
+
+export interface ComposedNotes {
+  /** The releases shown, newest first. */
+  versions: string[]
+  /** The first one leads the dialog at full width. */
+  highlights: ComposedHighlight[]
+  lines: ComposedLine[]
+  /** Sum of the shown highlights' scores. */
+  score: number
+  /** False when older unseen releases were left out. */
+  complete: boolean
+}
+
+/** One dialog from releases ordered newest first. */
+export function composeReleaseNotes(releases: ReleaseNotes[]): ComposedNotes {
+  const shown = releases.slice(0, RELEASE_WEIGHTS.length)
+  // Built newest release first, in authored order, so the stable sort breaks
+  // ties the same way.
+  const ranked = shown
+    .flatMap((notes, i) => notes.highlights.map(h => ({ ...h, version: notes.version, score: h.importance * RELEASE_WEIGHTS[i] })))
+    .sort((a, b) => b.score - a.score)
+  const highlights = ranked.slice(0, MAX_CARDS)
+  const lines: ComposedLine[] = [
+    ...ranked.slice(MAX_CARDS).map(h => ({ version: h.version, text: h.title })),
+    ...shown.flatMap(notes => notes.improvements.map(text => ({ version: notes.version, text }))),
+  ].slice(0, MAX_LINES)
+  return {
+    versions: shown.map(notes => notes.version),
+    highlights,
+    lines,
+    score: highlights.reduce((sum, h) => sum + h.score, 0),
+    complete: shown.length === releases.length,
   }
-  return latest
 }

package/src/components/workload/WorkloadView.tsx

@@ -3,18 +3,20 @@ import { JobRenderer, JobSetRenderer } from '../resources/renderers/JobAdmission
 import { RayClusterRenderer } from '../resources/renderers/RayClusterRenderer'
 import { RayServiceRenderer } from '../resources/renderers/RayServiceRenderer'
 import { KueueWorkloadRenderer } from '../resources/renderers/KueueWorkloadRenderer'
-import { useMemo, useEffect, useCallback, useRef, useState } from 'react'
+import { useMemo, useEffect, useCallback, useRef, useState, type ReactNode } from 'react'
 import { useQueries, useQueryClient } from '@tanstack/react-query'
-import { useNavigate, useLocation, useSearchParams } from 'react-router-dom'
+import { Navigate, useNavigate, useLocation, useSearchParams } from 'react-router-dom'
 import { workloadPodAwaitsScheduling } from '../capacity/podDemandGate'
 import { clsx } from 'clsx'
 import { Terminal, Stethoscope } from 'lucide-react'
 import {
   WorkloadView as BaseWorkloadView,
+  isApiGroup,
   EditableYamlView,
   FetchResult,
   Section,
   type WorkloadTabType,
+  type WorkloadExtraTab,
   type RendererOverrides,
   type GitOpsOwnerRef,
   type GitOpsStatus,
@@ -148,6 +150,9 @@ import {
   CNPGSubscriptionRenderer,
 } from '../resources/renderers/CNPGDeclarativeRenderer'
 import { CreateResourceDialog } from '../shared/CreateResourceDialog'
+import { renderCNPGSummary } from '../cnpg/CNPGSummaryHost'
+import { CNPGClusterLogs } from '../cnpg/CNPGClusterLogs'
+import { cnpgDetailKindFor, cnpgDetailPath } from '../cnpg/routes'
 import { cleanYamlForDuplicate } from '../../utils/skeleton-yaml'
 import { useDesktopDownload } from '../../hooks/useDesktopDownload'
 import { useCompareLauncher } from '../compare/useCompareLauncher'
@@ -277,6 +282,17 @@ export function WorkloadViewRoute({ onNavigateToResource }: WorkloadViewRoutePro
     )
   }
 
+  const cnpgPlural = cnpgDetailKindFor(kind, group)
+  if (cnpgPlural) {
+    const params = new URLSearchParams(searchParams)
+    params.delete('apiGroup')
+    const tab = params.get('tab')
+    if (cnpgPlural === 'clusters' && (tab === 'timeline' || tab === 'events')) params.set('tab', 'activity')
+    const base = cnpgDetailPath({ plural: cnpgPlural, namespace, name })
+    const qs = params.toString()
+    return <Navigate replace to={qs ? `${base}?${qs}` : base} state={location.state} />
+  }
+
   return (
     <WorkloadView
       kind={kind}
@@ -312,6 +328,8 @@ interface WorkloadViewProps {
   initialTab?: 'detail' | 'yaml'
   group?: string
   pushTabHistory?: boolean
+  breadcrumb?: ReactNode
+  extraTabs?: WorkloadExtraTab[]
 }
 
 interface ImageTargetOwnershipContext {
@@ -536,6 +554,7 @@ export function WorkloadView({
   ...rest
 }: WorkloadViewProps) {
   const [searchParams, setSearchParams] = useSearchParams()
+  const location = useLocation()
   const apiKind = kindToPluralWithGroup(kindProp, rest.group ?? '')
   const queryClient = useQueryClient()
   const [imageTargetOwnership, setImageTargetOwnership] =
@@ -561,9 +580,9 @@ export function WorkloadView({
       } else {
         params.set('tab', tab)
       }
-      setSearchParams(params, { replace: opts?.replace ?? !pushTabHistory })
+      setSearchParams(params, { replace: opts?.replace ?? !pushTabHistory, state: location.state })
     },
-    [pushTabHistory, searchParams, setSearchParams],
+    [pushTabHistory, searchParams, setSearchParams, location.state],
   )
 
   const selectedRunKey = searchParams.get('run') ?? ''
@@ -1264,6 +1283,9 @@ export function WorkloadView({
             onSelectRun={handleSelectedRunChange}
           />
         )}
+        renderSummary={({ apiKind: ak, namespace: ns, name: n, resource: res, context, onNavigate }) =>
+          renderCNPGSummary({ apiKind: ak, namespace: ns, name: n, group: effectiveGroup, resource: res, context, onNavigate })
+        }
         renderExpandedOverview={({ kind: k, apiKind, namespace: ns, name: n, resource: res }) =>
           supportsBatchExecution(k, apiKind, effectiveGroup, res?.apiVersion) &&
           res ? (
@@ -1672,6 +1694,10 @@ function LogsTabContent({
     )
   }
 
+  if (kind === 'Cluster' && isApiGroup(resource?.apiVersion, 'postgresql.cnpg.io')) {
+    return <CNPGClusterLogs namespace={namespace} name={name} />
+  }
+
   // Workload kinds with stable pod selectors use the aggregated workload logs viewer
   if (WORKLOAD_LOG_KINDS.has(kind) && (kind !== 'Job' || isCoreBatchJob(apiKind, group))) {
     return (

package/src/contexts/CapabilitiesContext.tsx

@@ -114,6 +114,10 @@ export function useCanHelmWrite(): boolean {
   return useContext(CapabilitiesContext).helmWrite
 }
 
+export function useIsAuthEnabled(): boolean {
+  return useContext(CapabilitiesContext).authEnabled === true
+}
+
 export function useCanNodeWrite(): boolean {
   return useContext(CapabilitiesContext).nodeWrite
 }
@@ -158,7 +162,11 @@ export function useNamespacedCapabilities(namespace: string | undefined) {
     canExec: nsCaps?.exec ?? globalCaps.exec,
     canViewLogs: nsCaps?.logs ?? globalCaps.logs,
     canPortForward: nsCaps?.portForward ?? globalCaps.portForward,
+    canHelmWrite: nsCaps?.helmWrite ?? globalCaps.helmWrite,
     workloadWrites: nsCaps?.workloadWrites ?? globalCaps.workloadWrites,
     workloadWritesPending: Boolean(namespace && isPending),
-  }), [globalCaps.exec, globalCaps.logs, globalCaps.portForward, globalCaps.workloadWrites, isPending, namespace, nsCaps])
+    // A failed refetch keeps the last successful namespace answer; with none,
+    // the global value is not an answer for this namespace.
+    helmWriteUnknown: Boolean(namespace && !nsCaps && (isPending || error)),
+  }), [globalCaps.exec, globalCaps.logs, globalCaps.portForward, globalCaps.helmWrite, globalCaps.workloadWrites, error, isPending, namespace, nsCaps])
 }

package/src/hooks/useResourceCounts.ts

@@ -0,0 +1,49 @@
+import { useQuery } from '@tanstack/react-query'
+import { debugNamespaceLog, fetchJSON, isStillLoadingError } from '../api/client'
+import { useConnection } from '../context/ConnectionContext'
+
+export interface ResourceCountsResponse {
+  counts: Record<string, number>
+  forbidden?: string[]
+  reasons?: Record<string, string>
+  unavailable?: string[]
+}
+
+// Lightweight per-kind counts for the Resources sidebar badges. Shared by the
+// Resources view and any surface that renders the same sidebar standalone, so
+// both read one cache entry.
+export function useResourceCounts(namespaces: string[]) {
+  const { connection } = useConnection()
+  const namespacesParam = namespaces.join(',')
+  return useQuery({
+    queryKey: ['resource-counts', namespacesParam],
+    queryFn: async () => {
+      const params = new URLSearchParams()
+      if (namespaces.length > 0) params.set('namespaces', namespacesParam)
+      const startedAt = performance.now()
+      debugNamespaceLog('resources:counts-fetch-start', { namespaces, params: params.toString() })
+      try {
+        return await fetchJSON<ResourceCountsResponse>(`/resource-counts?${params}`)
+      } finally {
+        debugNamespaceLog('resources:counts-fetch-end', {
+          namespaces,
+          params: params.toString(),
+          durationMs: Math.round(performance.now() - startedAt),
+        })
+      }
+    },
+    staleTime: 10000,
+    // SSE invalidation isn't running while connecting, and mid-sync counts
+    // are what unlatch guarded kinds as their informers finish — poll fast
+    // during the shell, settle to the safety net once connected.
+    refetchInterval: connection.state === 'connecting' ? 3000 : 60000,
+    // During the first seconds of the progressive shell the endpoint 503s
+    // (cluster_connecting) until the mid-sync cache handle exists; keep the
+    // query pending rather than parking it in error state, which would
+    // unlatch the large-list guard at the connected flip.
+    retry: (failureCount: number, error: Error) =>
+      isStillLoadingError(error) ? true : failureCount < 3,
+    retryDelay: (failureCount: number, error: Error) =>
+      isStillLoadingError(error) ? 2000 : Math.min(1000 * 2 ** failureCount, 30000),
+  })
+}

package/src/components/helm/RoleGatedPanel.tsx

@@ -1,47 +0,0 @@
-import { Lock } from 'lucide-react'
-import { useCloudRole, type CloudRole } from '../../api/client'
-
-interface RoleGatedPanelProps {
-  /** Minimum Cloud tier required to view the children. */
-  min: CloudRole
-  /** Human-readable name of the gated content, e.g. "release manifests". */
-  feature: string
-  children: React.ReactNode
-}
-
-/**
- * RoleGatedPanel wraps tab-content surfaces that require a Cloud role
- * (member+) to view. Renders the children when the gate passes; renders
- * an explanatory empty state when the caller's role is insufficient.
- *
- * Why a per-tab gate rather than hiding tabs from the list: viewers
- * should learn what the platform offers and what their tier can't do,
- * not have features silently vanish. This mirrors how the action
- * buttons (Uninstall, Upgrade, etc.) are rendered visible-but-disabled
- * with a role-aware tooltip.
- *
- * Bypasses for non-Cloud users (OSS, OIDC, etc.) — `canAtLeast` returns
- * true when no Cloud role is present. The backend gate has the same
- * shape, so the frontend stays in lockstep.
- */
-export function RoleGatedPanel({ min, feature, children }: RoleGatedPanelProps) {
-  const { role, canAtLeast } = useCloudRole()
-  if (canAtLeast(min)) {
-    return <>{children}</>
-  }
-  return (
-    <div className="flex flex-col items-center justify-center h-full py-12 px-6 text-center">
-      <div className="rounded-full bg-theme-surface p-3 mb-3">
-        <Lock className="w-5 h-5 text-theme-text-tertiary" aria-hidden />
-      </div>
-      <div className="text-sm font-medium text-theme-text-primary">
-        Your role can't view {feature}
-      </div>
-      <div className="mt-1 max-w-md text-xs text-theme-text-secondary">
-        You're signed in as <span className="inline-code">{role ?? 'viewer'}</span>.
-        This view requires <span className="inline-code">{min}</span> or higher.
-        Ask a {min} or owner if you need access.
-      </div>
-    </div>
-  )
-}