@skyhook-io/radar-app 1.17.0 → 1.17.1

package/src/components/cnpg/useCNPGSidebarWorkspace.ts

@@ -1,10 +1,13 @@
 import { useMemo } from 'react'
-import { useNavigate } from 'react-router-dom'
 import { Database, FileCheck2, Settings2, ShieldCheck, Waypoints } from 'lucide-react'
-import { buildCNPGFleet, type CNPGFleet, type SidebarCategoryWorkspace } from '@skyhook-io/k8s-ui'
+import { applyCNPGDisk, applyCNPGFleetMetrics, buildCNPGFleet, type CNPGDiskReading, type CNPGFleet, type SidebarCategoryWorkspace } from '@skyhook-io/k8s-ui'
 import type { APIResource } from '../../types'
 import { useCNPGWorkspace } from '../../api/cnpg'
+import { useRadarFeature } from '../../api/client'
+import { useCNPGFleetDisk } from '../../api/cnpg-storage'
+import { useCNPGFleetMetrics } from '../../api/cnpg-history'
 import { CNPG_SCREENS, type CNPGScreen } from './routes'
+import { useCNPGNavigate } from './useCNPGNavigate'
 
 export const CNPG_SIDEBAR_CATEGORY = 'CloudNativePG'
 
@@ -20,24 +23,67 @@ export function cnpgDiscovered(apiResources: APIResource[] | undefined): boolean
   return !!apiResources?.some((r) => r.group === 'postgresql.cnpg.io')
 }
 
-export function useCNPGFleet(namespaces: string[], enabled = true) {
+// Disk use joins the fleet here, so low-disk clusters count toward Needs
+// attention on every screen and sidebar badge that reads the enriched fleet;
+// measured replication lag and disk growth join the same way. Both are
+// Prometheus fan-outs per namespace, so callers outside the CloudNativePG views
+// pass withMetrics=false.
+export function useCNPGFleet(namespaces: string[], enabled = true, withMetrics = true) {
   const query = useCNPGWorkspace(namespaces, { enabled })
-  const fleet = useMemo<CNPGFleet | null>(() => (query.data?.installed ? buildCNPGFleet(query.data) : null), [query.data])
+  const { support } = useRadarFeature('cnpgWorkspace')
+  const enrich = enabled && withMetrics && support === 'supported' && !!query.data?.installed
+  const disk = useCNPGFleetDisk(namespaces, enrich)
+  const metrics = useCNPGFleetMetrics(namespaces, enrich)
+  const fleet = useMemo<CNPGFleet | null>(
+    () =>
+      query.data?.installed
+        ? applyCNPGFleetMetrics(
+            applyCNPGDisk(buildCNPGFleet(query.data), enrich ? disk.data?.clusters ?? (disk.error ? diskFailed(query.data.objects.clusters ?? [], disk.error) : undefined) : undefined),
+            enrich ? metrics.data?.clusters : undefined,
+            enrich ? metrics.data : undefined,
+          )
+        : null,
+    [query.data, disk.data, disk.error, metrics.data, enrich],
+  )
   return { query, fleet }
 }
 
-function destinationCount(screen: CNPGScreen, fleet: CNPGFleet | null): { count?: number | null; title?: string } {
+// A failed disk read is stated per cluster; left undefined it would render as
+// still loading.
+function diskFailed(clusters: any[], err: unknown): CNPGDiskReading[] {
+  const reason = `Disk usage could not be read: ${err instanceof Error ? err.message : 'request failed'}`
+  return clusters.map((c) => ({ namespace: c?.metadata?.namespace ?? '', name: c?.metadata?.name ?? '', state: 'error', reason, claims: 0, measured: 0 }))
+}
+
+const UNMEASURED_NOTE = 'Disk use and replication lag are counted on the CloudNativePG views.'
+
+function destinationCount(screen: CNPGScreen, fleet: CNPGFleet | null, withMetrics: boolean): { count?: number | null; lowerBound?: boolean; title?: string } {
   if (!fleet) return {}
-  const lowerBound = fleet.incompleteKinds.length > 0 ? ' Some CloudNativePG data is not readable, so this is a lower bound.' : ''
+  const partial = fleet.incompleteKinds.length > 0
+  const note = partial ? ' Some CloudNativePG data is not readable, so this is a lower bound.' : ''
+  // Disk use and measured lag only ever add problems, so a count without them
+  // is a lower bound, and its zero is not "none".
+  const at = (count: number, what: string, unmeasured?: string) => {
+    const lowerBound = partial || !!unmeasured
+    const extra = unmeasured ? ` ${unmeasured}` : ''
+    if (lowerBound && count === 0) {
+      return {
+        count: null,
+        lowerBound: true,
+        title: partial ? `Unknown: some CloudNativePG data could not be read.${extra}` : `None found in the workspace read.${extra}`,
+      }
+    }
+    return { count, lowerBound, title: `${lowerBound ? 'At least ' : ''}${count} ${what}.${note}${extra}` }
+  }
   switch (screen) {
     case 'overview':
-      return { count: fleet.attentionCount, title: `${fleet.attentionCount} clusters need attention.${lowerBound}` }
+      return at(fleet.attentionCount, 'clusters need attention', withMetrics ? undefined : UNMEASURED_NOTE)
     case 'protection':
-      return { count: fleet.categoryCounts.protection, title: `${fleet.categoryCounts.protection} clusters with failing backups or WAL archiving.${lowerBound}` }
+      return at(fleet.categoryCounts.protection, 'clusters with failing backups or WAL archiving')
     case 'declarations':
-      return { count: fleet.categoryCounts.declarations, title: `${fleet.categoryCounts.declarations} clusters with declarations that are not reconciled.${lowerBound}` }
+      return at(fleet.categoryCounts.declarations, 'clusters with declarations that are not reconciled')
     case 'pooling':
-      return { count: fleet.categoryCounts.pooling, title: `${fleet.categoryCounts.pooling} clusters with Pooler problems.${lowerBound}` }
+      return at(fleet.categoryCounts.pooling, 'clusters with Pooler problems')
     default:
       return {}
   }
@@ -52,25 +98,29 @@ export function useCNPGSidebarWorkspace({
   apiResources,
   namespaces,
   active,
+  withMetrics = !!active,
 }: {
   apiResources: APIResource[] | undefined
   namespaces: string[]
   active?: { screen: CNPGScreen; child?: { label: string; title?: string } }
+  /** Count disk use and replication lag too. Off by default outside the CloudNativePG views: every Resources page renders this sidebar. */
+  withMetrics?: boolean
 }): Record<string, SidebarCategoryWorkspace> | undefined {
-  const navigate = useNavigate()
-  const discovered = cnpgDiscovered(apiResources)
-  const { fleet } = useCNPGFleet(namespaces, discovered)
+  const navigate = useCNPGNavigate()
+  const available = cnpgDiscovered(apiResources)
+  const { fleet } = useCNPGFleet(namespaces, available, withMetrics)
   const nsKey = namespaces.join(',')
 
   return useMemo(() => {
-    if (!discovered) return undefined
+    if (!available) return undefined
     const destinations = CNPG_SCREENS.map((s) => {
-      const { count, title } = destinationCount(s.id, fleet)
+      const { count, lowerBound, title } = destinationCount(s.id, fleet, withMetrics)
       return {
         id: s.id,
         label: s.label,
         icon: ICONS[s.id],
         count,
+        countLowerBound: lowerBound,
         countTitle: title,
         active: active?.screen === s.id,
         child: active?.screen === s.id ? active.child : undefined,
@@ -84,5 +134,5 @@ export function useCNPGSidebarWorkspace({
         scopeNote: nsKey ? `Counts for namespace ${nsKey.split(',').join(', ')}` : undefined,
       },
     }
-  }, [discovered, fleet, active?.screen, active?.child?.label, active?.child?.title, navigate, nsKey]) // eslint-disable-line react-hooks/exhaustive-deps
+  }, [available, fleet, withMetrics, active?.screen, active?.child?.label, active?.child?.title, navigate, nsKey]) // eslint-disable-line react-hooks/exhaustive-deps
 }

package/src/components/cnpg/workspaceRoute.ts

@@ -0,0 +1,23 @@
+import type { WorkspaceRoute } from '../../integrations/workspaceRoute'
+import { CNPG_SCREENS, parseCNPGRoute } from './routes'
+
+export const cnpgWorkspaceRoute: WorkspaceRoute = {
+  id: 'cnpg',
+  path: '/cnpg',
+  label: 'CloudNativePG',
+  navView: 'resources',
+  namespaceScope: 'view',
+  pageTitle(pathname) {
+    const route = parseCNPGRoute(pathname)
+    if (route.detail) return route.detail.name
+    const screen = CNPG_SCREENS.find(screen => screen.id === route.screen)
+    return `CloudNativePG ${screen?.label ?? 'Clusters'}`
+  },
+  contextSwitchSearch(pathname, search) {
+    // A detail's context pin prevents loading a same-named object after a switch.
+    const next = new URLSearchParams()
+    const context = search.get('ctx')
+    if (context && pathname.startsWith('/cnpg/')) next.set('ctx', context)
+    return next
+  },
+}

package/src/components/cost/ApplicationCostTab.test.ts

@@ -195,6 +195,13 @@ describe('getApplicationCostState', () => {
     ).toBe('not_found')
   })
 
+  it('does not report a cross-origin refusal as missing access', () => {
+    const refused = new ApiError('Radar refused this request because it came from http://radar.internal', 403, {
+      error_code: 'cross_origin_refused',
+    })
+    expect(getApplicationCostState(undefined, undefined, { currentError: refused })).toBe('load_error')
+  })
+
   it('queries only steady-state workload kinds', () => {
     const workloads = [
       { kind: 'Deployment', namespace: 'prod', name: 'api' },

package/src/components/cost/ApplicationCostTab.tsx

@@ -3,6 +3,7 @@ import { AlertCircle, Coins, HelpCircle, Loader2, TrendingUp } from 'lucide-reac
 import type { AppRow, AppWorkload } from '@skyhook-io/k8s-ui'
 import {
   COST_DISCOVERY_GRACE_MS,
+  crossOriginRefusalMessage,
   useOpenCostApplicationCost,
   useOpenCostApplicationCostTrend,
   type CostTimeRange,
@@ -149,7 +150,8 @@ export function ApplicationCostTab({
         />
       )
     }
-    return <ApplicationCostUnavailable state={state} settingsAvailable={settingsAvailable} />
+    const refusal = crossOriginRefusalMessage(currentQuery.error) ?? crossOriginRefusalMessage(trendQuery.error)
+    return <ApplicationCostUnavailable state={state} message={refusal} settingsAvailable={settingsAvailable} />
   }
 
   const current = currentQuery.data
@@ -512,11 +514,11 @@ function applicationCostKey(ref: { kind: string; namespace: string; name: string
 function reasonLabel(reason?: CostUnavailableReason) {
   if (reason === 'no_prometheus') return 'Metrics backend not found'
   if (reason === 'no_cost_source') return 'Cost source not found'
-  if (reason === 'query_error') return 'Cost query failed'
+  if (reason === 'query_error') return 'Cost data unavailable'
   if (reason === 'access_denied') return 'No access to this workload'
   if (reason === 'not_found') return 'Workload not found'
   if (reason === 'configuration_mismatch') return 'Kubecost settings are not valid for this cluster'
-  if (reason === 'deployment_configuration_error') return 'Radar cost deployment is misconfigured'
+  if (reason === 'deployment_configuration_error') return 'Radar configuration is invalid'
   if (reason === 'metrics_settings_error') return 'Saved metrics settings need review'
   if (reason === 'cost_settings_error') return 'Saved cost settings need review'
   return 'No workload cost metrics'
@@ -568,10 +570,8 @@ function ApplicationCostUnavailable({
     costIntegrationUnavailableMessage(state, settingsAvailable) ??
     (state === 'no_prometheus'
       ? 'No compatible metrics backend was found. OpenCost application cost requires OpenCost metrics in a PromQL-compatible backend.'
-      : state === 'query_error'
-        ? 'Cost data is temporarily unavailable. A metrics backend was found, but application cost queries failed.'
-        : state === 'history_unsupported'
-          ? 'Historical application cost is not available for Kubecost yet.'
+      : state === 'history_unsupported'
+        ? 'Historical application cost is not available for Kubecost yet.'
         : state === 'access_denied'
           ? 'Cost data is unavailable because these workloads are not accessible with your current permissions.'
           : state === 'not_found'

package/src/components/cost/CostView.test.ts

@@ -17,7 +17,8 @@ describe('costUnavailableMessage', () => {
     expect(costUnavailableMessage('source_unavailable')).toContain('Settings → Cost')
     expect(costUnavailableMessage('authentication_error')).toContain('API key')
     expect(costUnavailableMessage('configuration_mismatch')).toContain('not valid for this cluster')
-    expect(costUnavailableMessage('deployment_configuration_error')).toContain('Helm cost values')
+    expect(costUnavailableMessage('deployment_configuration_error')).toContain('launch flags')
+    expect(costUnavailableMessage('deployment_configuration_error')).toContain('Helm values')
   })
 
   it('distinguishes a scoped empty result from missing source data', () => {

package/src/components/cost/CostView.tsx

@@ -402,8 +402,6 @@ export function costUnavailableMessage(
       return 'No compatible cost source found — connect OpenCost metrics through a PromQL-compatible backend or configure Kubecost'
     case 'no_metrics':
       return 'Cost data is not ready — the selected source returned no allocation data'
-    case 'query_error':
-      return 'Cost data is temporarily unavailable — the selected source query failed'
     case 'access_denied':
       return 'You do not have access to view cluster cost data'
     default:

package/src/components/cost/WorkloadCostTab.tsx

@@ -363,10 +363,8 @@ function WorkloadCostUnavailable({
     costIntegrationUnavailableMessage(state, settingsAvailable) ??
     (state === 'no_prometheus'
       ? 'No compatible metrics backend was found. OpenCost workload cost requires OpenCost metrics in a PromQL-compatible backend.'
-      : state === 'query_error'
-        ? 'Cost data is temporarily unavailable. A metrics backend was found, but workload cost queries failed.'
-        : state === 'history_unsupported'
-          ? 'Historical workload cost is not available for Kubecost yet.'
+      : state === 'history_unsupported'
+        ? 'Historical workload cost is not available for Kubecost yet.'
         : state === 'access_denied'
           ? 'You do not have access to view cost for this workload.'
           : state === 'not_found'

package/src/components/cost/errors.ts

@@ -1,7 +1,9 @@
-import { ApiError, type CostUnavailableReason } from '../../api/client'
+import { ApiError, crossOriginRefusalMessage, type CostUnavailableReason } from '../../api/client'
 
 export function costUnavailableReasonFromError(error: unknown): CostUnavailableReason | undefined {
   if (!(error instanceof ApiError)) return undefined
+  // Not a permission problem: the server's message says what to fix.
+  if (crossOriginRefusalMessage(error)) return undefined
   if (error.status === 403) return 'access_denied'
   if (error.status === 404) return 'not_found'
   return undefined

package/src/components/cost/source.test.ts

@@ -58,3 +58,13 @@ describe('cost source presentation', () => {
     expect(costIntegrationUnavailableMessage('authentication_error', false)).not.toContain('Settings')
   })
 })
+
+it('gives connection guidance without claiming an unreachable source ran a query', () => {
+  const standalone = costIntegrationUnavailableMessage('query_error', true)
+  expect(standalone).toContain('Settings → Metrics')
+  expect(standalone).toContain('Settings → Cost')
+  expect(standalone).not.toContain('query failed')
+  const embedded = costIntegrationUnavailableMessage('query_error', false)
+  expect(embedded).toContain('Ask your operator')
+  expect(embedded).not.toContain('Settings')
+})

package/src/components/cost/source.ts

@@ -107,6 +107,10 @@ export function costIntegrationUnavailableMessage(
   settingsAvailable = true,
 ): string | undefined {
   switch (reason) {
+    case 'query_error':
+      return settingsAvailable
+        ? 'The selected cost source could not provide data. Check its connection in Settings → Metrics (OpenCost) or Settings → Cost (Kubecost).'
+        : 'The selected cost source could not provide data. Ask your operator to check its connection and query health.'
     case 'no_cost_source':
       return settingsAvailable
         ? 'No compatible cost source was found. Connect OpenCost metrics in Settings → Metrics or configure Kubecost in Settings → Cost.'
@@ -120,7 +124,7 @@ export function costIntegrationUnavailableMessage(
     case 'cost_settings_error':
       return 'This cluster’s saved cost settings need review before cost data can load. Review them in Settings → Cost.'
     case 'deployment_configuration_error':
-      return 'Cost collection is misconfigured by this Radar deployment. Update its environment variables or Helm cost values, then restart Radar.'
+      return "Radar's operator-supplied cost or metrics configuration is invalid. Check local launch flags or the deployment environment variables and Helm values."
     case 'authentication_error':
       return settingsAvailable
         ? 'Kubecost rejected the configured API key. Update it in Settings → Cost.'

package/src/components/diagnose/investigationEvidence/adapters/issues.ts

@@ -71,6 +71,14 @@ export function adaptIssues(
       "truncated",
     );
   }
+  if (nonEmptyString(value.recent_changes_error)) {
+    builder.limit(
+      source,
+      "Issue-related changes",
+      value.recent_changes_error,
+      "error",
+    );
+  }
   if (value.correlation_truncated === true) {
     builder.limit(
       source,

package/src/components/diagnose/investigationEvidence/projection.test.ts

@@ -247,6 +247,22 @@ describe("strict evidence adapters", () => {
       }),
     ]);
 
+    const unreadIssueFeed = project([
+      tool("issues-down", "issues", {
+        issues: [],
+        total: 0,
+        total_matched: 0,
+        recent_changes_error: "timeline history is unavailable",
+      }),
+    ]);
+    expect(unreadIssueFeed.limitations).toEqual([
+      expect.objectContaining({
+        source: "Issue-related changes",
+        kind: "error",
+        message: "timeline history is unavailable",
+      }),
+    ]);
+
     const filtered = project([
       tool("filtered", "get_resource", {
         resource: deployment,

package/src/components/dock/BottomDock.tsx

@@ -17,6 +17,8 @@ function renderTabContent(tab: DockTab, isActive: boolean) {
         containerName={tab.containerName!}
         containers={tab.containers!}
         isActive={isActive}
+        shell={tab.shell}
+        note={tab.sessionNote}
       />
     )
   }

package/src/components/dock/TerminalTab.test.tsx

@@ -0,0 +1,17 @@
+import { renderToString } from 'react-dom/server'
+import { expect, it, vi } from 'vitest'
+import type { TerminalTabProps } from '@skyhook-io/k8s-ui'
+import { TerminalTab } from './TerminalTab'
+const captured = vi.hoisted(() => ({ props: null as TerminalTabProps | null }))
+vi.mock('@skyhook-io/k8s-ui', () => ({ TerminalTab: (props: TerminalTabProps) => { captured.props = props; return null } }))
+vi.mock('../../api/config', () => ({ apiUrl: (path: string) => `/api${path}`, getWsUrl: (path: string) => `ws://localhost/api${path}` }))
+it.each([undefined, '/bin/custom+command'])('forwards the executable and context through the shared terminal (%s)', async shell => {
+  renderToString(<TerminalTab namespace="app" podName="worker" containerName="app" containers={['app', 'sidecar']} shell={shell} note="Primary" />)
+  const props = captured.props!
+  expect(props.command).toBe(shell); expect(props.note).toBe('Primary')
+  expect(Boolean(props.createDebugContainer)).toBe(!shell)
+  const { wsUrl } = await props.createSession('app')
+  const url = new URL(wsUrl)
+  expect(url.pathname).toBe('/api/pods/app/worker/exec'); expect(url.searchParams.get('container')).toBe('app')
+  expect(url.searchParams.get('shell')).toBe(shell ?? null)
+})

package/src/components/dock/TerminalTab.tsx

@@ -8,12 +8,14 @@ interface TerminalTabProps {
   containerName: string
   containers: string[]
   isActive?: boolean
+  shell?: string
+  note?: string
 }
 
-export function TerminalTab({ namespace, podName, containerName, containers, isActive }: TerminalTabProps) {
+export function TerminalTab({ namespace, podName, containerName, containers, isActive, shell, note }: TerminalTabProps) {
   const createSession = (container: string) =>
     Promise.resolve({
-      wsUrl: getWsUrl(`/pods/${namespace}/${podName}/exec?container=${container}`),
+      wsUrl: getWsUrl(`/pods/${namespace}/${podName}/exec?container=${container}${shell ? `&shell=${encodeURIComponent(shell)}` : ''}`),
     })
 
   const createDebugContainer = async (targetContainer: string) => {
@@ -37,7 +39,9 @@ export function TerminalTab({ namespace, podName, containerName, containers, isA
       containers={containers}
       isActive={isActive}
       createSession={createSession}
-      createDebugContainer={createDebugContainer}
+      createDebugContainer={shell ? undefined : createDebugContainer}
+      note={note}
+      command={shell}
     />
   )
 }

package/src/components/gitops/ArgoResourceDiffLoader.tsx

@@ -1,23 +1,25 @@
 import { ArgoResourceDiff } from '@skyhook-io/k8s-ui'
-import type { GitOpsInsightRef } from '@skyhook-io/k8s-ui'
+import type { GitOpsDrift, GitOpsInsightRef } from '@skyhook-io/k8s-ui'
 import { useArgoResourceDiff } from '../../api/client'
 
 interface ArgoResourceDiffLoaderProps {
   appNamespace: string
   appName: string
   resourceRef: GitOpsInsightRef
+  fallbackDrift?: GitOpsDrift
 }
 
 // Host wrapper: fetches the Argo CD resource diff and hands the data to the
 // pure k8s-ui presentation component. Mirrors the data-in-web / render-in-
 // k8s-ui split the resource renderers use for their host-wired data.
-export function ArgoResourceDiffLoader({ appNamespace, appName, resourceRef }: ArgoResourceDiffLoaderProps) {
+export function ArgoResourceDiffLoader({ appNamespace, appName, resourceRef, fallbackDrift }: ArgoResourceDiffLoaderProps) {
   const { data, isLoading, error } = useArgoResourceDiff(appNamespace, appName, resourceRef)
   return (
     <ArgoResourceDiff
       diff={data ?? null}
       loading={isLoading}
       error={(error as Error | null)?.message ?? null}
+      fallbackDrift={fallbackDrift}
     />
   )
 }

package/src/components/gitops/GitOpsView.tsx

@@ -25,7 +25,6 @@ import {
   isArgoOperationInProgress,
   isArgoSuspendedByRadar,
   gitOpsInsightChangeKey,
-  initNavigationMap,
   kindToPluralWithGroup,
   normalizeArgoApplication,
   normalizeArgoApplicationSet,
@@ -72,7 +71,7 @@ import {
   useGitOpsTree,
   useResource,
 } from '../../api/client'
-import { useAPIResources } from '../../api/apiResources'
+import { useAPIResources, GITOPS_KINDS } from '../../api/apiResources'
 import { useConnection } from '../../context/ConnectionContext'
 import { apiUrl, getAuthHeaders, getCredentialsMode } from '../../api/config'
 import { useRegisterShortcut } from '../../hooks/useKeyboardShortcuts'
@@ -84,17 +83,6 @@ import { RemoteDestinationCloudHint } from './RemoteDestinationCloudHint'
 const GITOPS_HEALTH_DOCS_URL = 'https://radarhq.io/docs/features/gitops#per-resource-health'
 import type { GitOpsHistoryItem } from '@skyhook-io/k8s-ui'
 
-const GITOPS_KINDS: APIResource[] = [
-  { name: 'applications', kind: 'Application', group: 'argoproj.io', version: 'v1alpha1', namespaced: true, verbs: ['list', 'get'], isCrd: true },
-  { name: 'applicationsets', kind: 'ApplicationSet', group: 'argoproj.io', version: 'v1alpha1', namespaced: true, verbs: ['list', 'get'], isCrd: true },
-  { name: 'appprojects', kind: 'AppProject', group: 'argoproj.io', version: 'v1alpha1', namespaced: true, verbs: ['list', 'get'], isCrd: true },
-  { name: 'kustomizations', kind: 'Kustomization', group: 'kustomize.toolkit.fluxcd.io', version: 'v1', namespaced: true, verbs: ['list', 'get'], isCrd: true },
-  { name: 'helmreleases', kind: 'HelmRelease', group: 'helm.toolkit.fluxcd.io', version: 'v2', namespaced: true, verbs: ['list', 'get'], isCrd: true },
-  { name: 'gitrepositories', kind: 'GitRepository', group: 'source.toolkit.fluxcd.io', version: 'v1', namespaced: true, verbs: ['list', 'get'], isCrd: true },
-  { name: 'ocirepositories', kind: 'OCIRepository', group: 'source.toolkit.fluxcd.io', version: 'v1beta2', namespaced: true, verbs: ['list', 'get'], isCrd: true },
-  { name: 'helmrepositories', kind: 'HelmRepository', group: 'source.toolkit.fluxcd.io', version: 'v1', namespaced: true, verbs: ['list', 'get'], isCrd: true },
-  { name: 'alerts', kind: 'Alert', group: 'notification.toolkit.fluxcd.io', version: 'v1beta3', namespaced: true, verbs: ['list', 'get'], isCrd: true },
-]
 
 type ArgoSyncDialogTarget =
   | { scope: 'application' }
@@ -164,9 +152,6 @@ function GitOpsTableView({ namespaces, onClearNamespaces }: { namespaces: string
     })
   }
 
-  useEffect(() => {
-    initNavigationMap([...(apiResources ?? []), ...GITOPS_KINDS])
-  }, [apiResources])
 
   const hasGitOpsRowResource = useMemo(() => (
     hasAPIResource(apiResources, 'applications', 'argoproj.io') ||
@@ -816,8 +801,8 @@ function GitOpsDetailView({ namespaces, onOpenResource, onOpenSettings }: GitOps
               ) : undefined}
               focusKey={changesFocusKey}
               tree={tree}
-              renderResourceDiff={isArgoApp ? (ref) => (
-                <ArgoResourceDiffLoader appNamespace={namespace} appName={name} resourceRef={ref} />
+              renderResourceDiff={isArgoApp ? (ref, fallbackDrift) => (
+                <ArgoResourceDiffLoader appNamespace={namespace} appName={name} resourceRef={ref} fallbackDrift={fallbackDrift} />
               ) : undefined}
               onOpenSettings={onOpenSettings}
               settingsNote={settingsNote}
@@ -1097,18 +1082,26 @@ function newestConditionTime(resource: any): string {
 // many of them are healthy / drifted" at a glance, without making the user
 // count facets in the filter rail.
 function TopologyCounts({ tree }: { tree: GitOpsResourceTree }) {
-  const nodes = (tree.nodes ?? []).filter((n) => n.role !== 'group' && n.role !== 'root')
+  const counted = (tree.nodes ?? []).filter((n) => n.role !== 'group' && n.role !== 'root')
+  // Dependencies (Flux sources, charts, dependsOn targets) are consumed, not
+  // managed: they get their own count and never inflate the managed totals.
+  const nodes = counted.filter((n) => !n.dependency)
+  const dependencies = counted.length - nodes.length
   const total = nodes.length
-  if (total === 0) return null
-  const healthy = nodes.filter((n) => (n.health || '').toLowerCase() === 'healthy').length
-  const degraded = nodes.filter((n) => {
+  if (counted.length === 0) return null
+  const isDegraded = (n: GitOpsTreeNode) => {
     const h = (n.health || '').toLowerCase()
     return h === 'degraded' || h === 'missing' || h === 'unhealthy'
-  }).length
+  }
+  const healthy = nodes.filter((n) => (n.health || '').toLowerCase() === 'healthy').length
+  const degraded = nodes.filter(isDegraded).length
+  const failingDependencies = counted.filter((n) => n.dependency && isDegraded(n)).length
   const outOfSync = nodes.filter((n) => (n.sync || '').toLowerCase() === 'outofsync').length
   return (
     <div className="hidden min-w-0 flex-1 items-center gap-3 truncate text-[11px] text-theme-text-tertiary sm:flex">
       <span><span className="text-theme-text-primary">{total}</span> resources</span>
+      {dependencies > 0 && <span><span className="text-theme-text-primary">{dependencies}</span> {dependencies === 1 ? 'dependency' : 'dependencies'}</span>}
+      {failingDependencies > 0 && <span className="flex items-center gap-1 font-medium text-red-600 dark:text-red-400"><span className="h-1.5 w-1.5 rounded-full bg-red-500" /> {failingDependencies} {failingDependencies === 1 ? 'dependency' : 'dependencies'} failing</span>}
       {healthy > 0 && <span className="flex items-center gap-1"><span className="h-1.5 w-1.5 rounded-full bg-emerald-500" /> {healthy} healthy</span>}
       {/* Bad-news counts use status colors on the number itself so the worst
           fact in the row visually pops, not just the dot next to it. */}

package/src/components/helm/HelmCompareRoute.test.tsx

@@ -0,0 +1,59 @@
+// @vitest-environment jsdom
+import { renderToStaticMarkup } from 'react-dom/server'
+import { describe, expect, it } from 'vitest'
+import { CompareSummary } from './HelmCompareRoute'
+
+const sameDiff = '--- revision-1\n+++ revision-2\n'
+const changedDiff = '--- revision-1\n+++ revision-2\n@@ -1 +1 @@\n-old\n+new\n'
+
+function renderSummary(overridesDiff: string, effectiveValuesDiff: string) {
+  document.body.innerHTML = renderToStaticMarkup(
+    <CompareSummary
+      revision1={1}
+      revision2={2}
+      manifestDiff={sameDiff}
+      manifestLoading={false}
+      manifestError={null}
+      overridesDiff={overridesDiff}
+      overridesLoading={false}
+      overridesError={null}
+      effectiveValuesDiff={effectiveValuesDiff}
+      effectiveValuesLoading={false}
+      effectiveValuesError={null}
+      notesDiff={sameDiff}
+      notesLoading={false}
+      notesError={null}
+      hooksLoading={false}
+      hooksError={null}
+      resourceLoading={false}
+      resourceError={null}
+    />,
+  )
+}
+
+function signalText(section: string) {
+  return document.querySelector(`a[href="#${section}"]`)?.textContent
+}
+
+describe('CompareSummary value signals', () => {
+  it('shows unchanged overrides and changed effective values when chart defaults change', () => {
+    renderSummary(sameDiff, changedDiff)
+
+    expect(signalText('overrides')).toBe('Overridessame')
+    expect(signalText('effective-values')).toBe('Effective values1 add / 1 remove')
+  })
+
+  it('shows both signals changed when an override changes effective values', () => {
+    renderSummary(changedDiff, changedDiff)
+
+    expect(signalText('overrides')).toBe('Overrides1 add / 1 remove')
+    expect(signalText('effective-values')).toBe('Effective values1 add / 1 remove')
+  })
+
+  it('shows both signals unchanged when both value sets are identical', () => {
+    renderSummary(sameDiff, sameDiff)
+
+    expect(signalText('overrides')).toBe('Overridessame')
+    expect(signalText('effective-values')).toBe('Effective valuessame')
+  })
+})