Scan: port Calypso overview to wp-admin (Phases 0–8)

eslint.config.mjs

@@ -1,4 +1,51 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
 import autoProjects from 'jetpack-js-tools/eslintrc/auto-projects.mjs';
 import { makeBaseConfig, defineConfig } from 'jetpack-js-tools/eslintrc/base.mjs';
 
-export default defineConfig( makeBaseConfig( import.meta.url ), autoProjects );
+const rootdir = fileURLToPath( new URL( '.', import.meta.url ) );
+
+/**
+ * `projects/packages/scan` uses nested `routes/<name>/package.json` for wp-build.
+ * Root ESLint skips per-project configs; merge those deps for import/no-extraneous-dependencies.
+ *
+ * @return {string[]} Absolute paths of route folders that contain a `package.json`.
+ */
+function getJetpackScanRoutePackageDirs() {
+	const routesRoot = path.join( rootdir, 'projects/packages/scan/routes' );
+	if ( ! fs.existsSync( routesRoot ) ) {
+		return [];
+	}
+	return fs
+		.readdirSync( routesRoot, { withFileTypes: true } )
+		.filter( dirent => dirent.isDirectory() )
+		.map( dirent => path.join( routesRoot, dirent.name ) )
+		.filter( dir => fs.existsSync( path.join( dir, 'package.json' ) ) );
+}
+
+const jetpackScanRoutePackageDirs = getJetpackScanRoutePackageDirs();
+
+export default defineConfig(
+	makeBaseConfig( import.meta.url ),
+	autoProjects,
+	...( jetpackScanRoutePackageDirs.length > 0
+		? [
+				{
+					name: 'Jetpack Scan (wp-build routes): merge route package.json for import deps',
+					files: [ 'projects/packages/scan/routes/**/*.{js,jsx,ts,tsx,mjs,cjs}' ],
+					rules: {
+						'import/no-extraneous-dependencies': [
+							'error',
+							{
+								packageDir: [
+									path.join( rootdir, 'projects/packages/scan' ),
+									...jetpackScanRoutePackageDirs,
+								],
+							},
+						],
+					},
+				},
+		  ]
+		: [] )
+);

projects/js-packages/scan/changelog/add-empty-prop

@@ -0,0 +1,4 @@
+Significance: minor
+Type: added
+
+Add an optional `empty` prop to `ThreatsDataViews` that's forwarded to the underlying `DataViews` so consumers can render their own empty-state node (heading, body, CTA) instead of DataViews' built-in "no items" body.

projects/js-packages/scan/changelog/add-on-track-event-prop

@@ -0,0 +1,4 @@
+Significance: minor
+Type: added
+
+`ThreatsDataViews`: add `onTrackEvent?: ( event: string, properties?: Record< string, unknown > ) => void` prop. When supplied, the component fires DataViews-canonical event names on view transitions (`search` with `{ has_query }`, `layout_changed` with `{ layout }`, `page_change` with `{ page }`, `filter_change`, and a generic `view_change`) by diffing the previous view against the next one in `onChangeView`. Consumers add their own prefix (e.g. `jetpack_scan_*`, `jetpack_protect_*`) and forward to their analytics client. Backwards compatible — when `onTrackEvent` is omitted no events fire.

projects/js-packages/scan/changelog/add-persist-key-prop

@@ -0,0 +1,4 @@
+Significance: minor
+Type: added
+
+`ThreatsDataViews`: add `persistKey?: string` prop. When set, the component hydrates its initial view (filters, sort, search, pagination, layout) from `localStorage[persistKey]` and writes back on every change. Use stable, namespaced keys per panel (e.g. `jetpack-scan:active-threats:view`) so consumer panels don't collide. Quietly no-ops when `localStorage` is unavailable (privacy mode, full disk).

projects/js-packages/scan/changelog/add-render-view-modal-prop

@@ -0,0 +1,4 @@
+Significance: minor
+Type: added
+
+`ThreatsDataViews`: add `RenderViewModal?: ( props: RenderModalProps< Threat > ) => ReactElement` prop. Unlike the existing `RenderFixModal` / `RenderIgnoreModal` / `RenderUnignoreModal`, the resulting "View details" row action is always eligible (not gated by `fixable` / `status`) so the user can drill into any row regardless of state. Renders inside a `large` DataViews modal.

projects/js-packages/scan/changelog/add-show-status-filter-prop

@@ -0,0 +1,4 @@
+Significance: patch
+Type: added
+
+`ThreatsDataViews`: add `showStatusFilter?: boolean` prop (defaults to `true`). Lets consumers that already filter the dataset by status outside the component (e.g. page-level Active threats / History tabs in Scan) opt out of the in-table active/historic toggle. Existing callers (Protect) keep the toggle by default.

projects/js-packages/scan/changelog/add-threats-data-views-render-modal-props

@@ -0,0 +1,4 @@
+Significance: minor
+Type: added
+
+`ThreatsDataViews`: accept `RenderFixModal` / `RenderIgnoreModal` / `RenderUnignoreModal` props so consumers can route the row actions through DataViews-managed confirmation modals (`RenderModalProps< Threat >`) instead of fire-and-forget callbacks. The existing `onFixThreats` / `onIgnoreThreats` / `onUnignoreThreats` callbacks are still honoured when no render-modal is supplied; render-modal props take precedence when both are passed for the same action.

projects/js-packages/scan/changelog/anchor-empty-state-min-height

@@ -0,0 +1,4 @@
+Significance: patch
+Type: changed
+
+`ThreatsDataViews`: anchor the DataViews empty body (`.dataviews-no-results`) to `calc(100vh - 320px)` so it always reads as a full-height empty state. The internal `.dataviews-no-results` element already grows via `flex-grow: 1`, but only when its parent has a defined height — pinning the min-block-size from inside the component means consumers (Scan page, Protect) get the full-height layout without having to wire a custom flex chain.

projects/js-packages/scan/changelog/drop-build-step

@@ -0,0 +1,4 @@
+Significance: patch
+Type: changed
+
+Switch the package to source-exports (mirrors `@automattic/jetpack-connection`): consumers resolve `@automattic/jetpack-scan` directly to `./src/index.ts`, so `tsgo` compile is no longer needed. `@wordpress/build` (esbuild) consumers process the TS + `*.module.scss` natively; webpack consumers (Protect plugin) keep working through the same `jetpack:src` resolution condition the rest of the monorepo already uses.

projects/js-packages/scan/composer.json

@@ -5,16 +5,6 @@
 	"license": "GPL-2.0-or-later",
 	"require": {},
 	"scripts": {
-		"build-development": [
-			"pnpm run build"
-		],
-		"build-production": [
-			"NODE_ENV=production BABEL_ENV=production pnpm run build"
-		],
-		"watch": [
-			"Composer\\Config::disableProcessTimeout",
-			"pnpm run watch"
-		],
 		"test-coverage": "pnpm run test-coverage",
 		"test-js": [
 			"pnpm run test"

projects/js-packages/scan/package.json

@@ -13,20 +13,15 @@
 	},
 	"license": "GPL-2.0-or-later",
 	"author": "Automattic",
+	"sideEffects": [
+		"*.css",
+		"*.scss"
+	],
 	"type": "module",
 	"exports": {
-		".": {
-			"jetpack:src": "./src/index.ts",
-			"types": "./build/index.d.ts",
-			"default": "./build/index.js"
-		}
+		".": "./src/index.ts"
 	},
-	"main": "./build/index.js",
-	"types": "./build/index.d.ts",
 	"scripts": {
-		"build": "pnpm run clean && pnpm run compile-ts",
-		"clean": "rm -rf build/",
-		"compile-ts": "tsgo --pretty",
 		"test": "NODE_OPTIONS=--experimental-vm-modules jest",
 		"test-coverage": "pnpm run test --coverage",
 		"typecheck": "tsgo --noEmit"

projects/js-packages/scan/src/components/threats-data-views/constants.ts

@@ -46,3 +46,4 @@ export const THREAT_FIELD_AUTO_FIX = 'auto-fix';
 export const THREAT_ACTION_FIX = 'fix';
 export const THREAT_ACTION_IGNORE = 'ignore';
 export const THREAT_ACTION_UNIGNORE = 'unignore';
+export const THREAT_ACTION_VIEW = 'view';