okengine 0.1.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (674) hide show
  1. package/AGENTS.md +91 -0
  2. package/README.md +327 -0
  3. package/docs/spec/complete-example.md +1188 -0
  4. package/docs/spec/console.md +739 -0
  5. package/docs/spec/four-applications.md +1188 -0
  6. package/docs/spec/unified-theory.md +489 -0
  7. package/package.json +152 -0
  8. package/spec/manifest.v1.schema.json +624 -0
  9. package/src/auth/api-keys.ts +168 -0
  10. package/src/auth/attenuation.ts +116 -0
  11. package/src/auth/auth.test.ts +273 -0
  12. package/src/auth/cross-plane.ts +98 -0
  13. package/src/auth/index.ts +112 -0
  14. package/src/auth/invites.ts +66 -0
  15. package/src/auth/invoke-as.ts +49 -0
  16. package/src/auth/operator.ts +178 -0
  17. package/src/auth/planes.ts +102 -0
  18. package/src/auth/plugin.ts +44 -0
  19. package/src/auth/roles.ts +84 -0
  20. package/src/auth/sessions.ts +418 -0
  21. package/src/auth/tables.ts +131 -0
  22. package/src/cli/args.ts +50 -0
  23. package/src/cli/branch.ts +75 -0
  24. package/src/cli/build.ts +86 -0
  25. package/src/cli/client-add.test.ts +140 -0
  26. package/src/cli/client-add.ts +164 -0
  27. package/src/cli/completion.test.ts +58 -0
  28. package/src/cli/completion.ts +296 -0
  29. package/src/cli/dev-app-runner.ts +77 -0
  30. package/src/cli/dev.test.ts +435 -0
  31. package/src/cli/dev.ts +594 -0
  32. package/src/cli/doc-drift.test.ts +146 -0
  33. package/src/cli/doc-drift.ts +397 -0
  34. package/src/cli/docker-cli.test.ts +221 -0
  35. package/src/cli/docker.ts +127 -0
  36. package/src/cli/doctor-diff-examples.ts +92 -0
  37. package/src/cli/doctor-diff.test.ts +91 -0
  38. package/src/cli/doctor-diff.ts +274 -0
  39. package/src/cli/doctor-pii.test.ts +98 -0
  40. package/src/cli/doctor-pii.ts +151 -0
  41. package/src/cli/doctor.test.ts +150 -0
  42. package/src/cli/doctor.ts +223 -0
  43. package/src/cli/eval.ts +122 -0
  44. package/src/cli/exit.ts +19 -0
  45. package/src/cli/gates-list.test.ts +47 -0
  46. package/src/cli/gates-list.ts +84 -0
  47. package/src/cli/images.ts +277 -0
  48. package/src/cli/index.ts +99 -0
  49. package/src/cli/json-out.test.ts +129 -0
  50. package/src/cli/load-config.ts +71 -0
  51. package/src/cli/mcp-from-console.ts +50 -0
  52. package/src/cli/privacy-erase.ts +73 -0
  53. package/src/cli/registry.ts +455 -0
  54. package/src/cli/safe-defaults.test.ts +92 -0
  55. package/src/cli/schema.ts +196 -0
  56. package/src/cli/stack.ts +82 -0
  57. package/src/cli/start.ts +106 -0
  58. package/src/cli/upgrade.ts +105 -0
  59. package/src/cli/vault-cmd.ts +140 -0
  60. package/src/client/budget-entry.ts +34 -0
  61. package/src/client/budget.test.ts +17 -0
  62. package/src/client/create.test.ts +159 -0
  63. package/src/client/create.ts +152 -0
  64. package/src/client/errors.ts +60 -0
  65. package/src/client/index.ts +35 -0
  66. package/src/client/notes-contract.test.ts +289 -0
  67. package/src/client/transport.test.ts +123 -0
  68. package/src/client/transport.ts +254 -0
  69. package/src/client/types.ts +282 -0
  70. package/src/compiler/aot.test.ts +248 -0
  71. package/src/compiler/aot.ts +182 -0
  72. package/src/compiler/differential.test.ts +241 -0
  73. package/src/compiler/dynamic.ts +54 -0
  74. package/src/compiler/effects-infer.ts +541 -0
  75. package/src/compiler/emit.ts +40 -0
  76. package/src/compiler/extract.test.ts +177 -0
  77. package/src/compiler/extract.ts +1368 -0
  78. package/src/compiler/fixtures/raw/raw-unannotated.ts +28 -0
  79. package/src/compiler/fixtures/skyport/oke.config.ts +24 -0
  80. package/src/compiler/fixtures/skyport/src/ai.ts +15 -0
  81. package/src/compiler/fixtures/skyport/src/app.ts +10 -0
  82. package/src/compiler/fixtures/skyport/src/channels.ts +6 -0
  83. package/src/compiler/fixtures/skyport/src/core.ts +3 -0
  84. package/src/compiler/fixtures/skyport/src/flows/bookings/index.ts +57 -0
  85. package/src/compiler/fixtures/skyport/src/flows/bookings/signals.ts +11 -0
  86. package/src/compiler/fixtures/skyport/src/flows/payments/index.ts +14 -0
  87. package/src/compiler/fixtures/skyport/src/flows/support/index.ts +20 -0
  88. package/src/compiler/fixtures/skyport/src/gates.ts +14 -0
  89. package/src/compiler/fixtures/skyport/src/journeys.ts +9 -0
  90. package/src/compiler/fixtures/skyport/src/schema.ts +3 -0
  91. package/src/compiler/fixtures/skyport/src/vault.ts +6 -0
  92. package/src/compiler/fixtures/skyport.expected.json +241 -0
  93. package/src/compiler/fixtures/triggers/five-triggers.ts +69 -0
  94. package/src/compiler/http-parse.ts +214 -0
  95. package/src/compiler/index.ts +67 -0
  96. package/src/compiler/response.ts +89 -0
  97. package/src/compiler/sucrose.ts +238 -0
  98. package/src/config/index.ts +167 -0
  99. package/src/console/budget.test.ts +73 -0
  100. package/src/console/index.ts +30 -0
  101. package/src/console/server/access.test.ts +370 -0
  102. package/src/console/server/access.ts +777 -0
  103. package/src/console/server/ai.test.ts +172 -0
  104. package/src/console/server/ai.ts +632 -0
  105. package/src/console/server/app.ts +294 -0
  106. package/src/console/server/auth-rate.test.ts +81 -0
  107. package/src/console/server/auth-rate.ts +72 -0
  108. package/src/console/server/bind.ts +25 -0
  109. package/src/console/server/channels.test.ts +179 -0
  110. package/src/console/server/channels.ts +469 -0
  111. package/src/console/server/claim.test.ts +66 -0
  112. package/src/console/server/claim.ts +134 -0
  113. package/src/console/server/clock.test.ts +239 -0
  114. package/src/console/server/clock.ts +390 -0
  115. package/src/console/server/console.test.ts +338 -0
  116. package/src/console/server/diff.test.ts +299 -0
  117. package/src/console/server/diff.ts +352 -0
  118. package/src/console/server/dry-run.audit.test.ts +118 -0
  119. package/src/console/server/flows-invoke.test.ts +148 -0
  120. package/src/console/server/flows.ts +3633 -0
  121. package/src/console/server/gates.test.ts +360 -0
  122. package/src/console/server/gates.ts +869 -0
  123. package/src/console/server/index.ts +141 -0
  124. package/src/console/server/live.test.ts +30 -0
  125. package/src/console/server/live.ts +109 -0
  126. package/src/console/server/plugin.ts +50 -0
  127. package/src/console/server/plugins.test.ts +131 -0
  128. package/src/console/server/plugins.ts +429 -0
  129. package/src/console/server/runs-pii.ts +98 -0
  130. package/src/console/server/security-headers.ts +97 -0
  131. package/src/console/server/security.gate.test.ts +286 -0
  132. package/src/console/server/serve.ts +319 -0
  133. package/src/console/server/signals.test.ts +88 -0
  134. package/src/console/server/signals.ts +282 -0
  135. package/src/console/server/state.ts +982 -0
  136. package/src/console/server/store.test.ts +233 -0
  137. package/src/console/server/store.ts +861 -0
  138. package/src/console/server/structural.ts +95 -0
  139. package/src/console/server/vault.test.ts +251 -0
  140. package/src/console/server/vault.ts +430 -0
  141. package/src/console/ui/access/AccessA11yView.tsx +237 -0
  142. package/src/console/ui/access/a11y.test.tsx +122 -0
  143. package/src/console/ui/access/acknowledgement.test.ts +13 -0
  144. package/src/console/ui/access/acknowledgement.ts +35 -0
  145. package/src/console/ui/access/blast-radius.test.ts +26 -0
  146. package/src/console/ui/access/blast-radius.ts +40 -0
  147. package/src/console/ui/access/confirmation.test.ts +38 -0
  148. package/src/console/ui/access/confirmation.ts +36 -0
  149. package/src/console/ui/access/fixture.ts +203 -0
  150. package/src/console/ui/access/grantable.test.ts +17 -0
  151. package/src/console/ui/access/grantable.ts +36 -0
  152. package/src/console/ui/access/hygiene.test.ts +12 -0
  153. package/src/console/ui/access/hygiene.ts +39 -0
  154. package/src/console/ui/access/index.ts +54 -0
  155. package/src/console/ui/access/provenance.test.ts +12 -0
  156. package/src/console/ui/access/provenance.ts +29 -0
  157. package/src/console/ui/access/search.test.ts +17 -0
  158. package/src/console/ui/access/search.ts +72 -0
  159. package/src/console/ui/access/types.ts +111 -0
  160. package/src/console/ui/ai/AiA11yView.tsx +265 -0
  161. package/src/console/ui/ai/a11y.test.tsx +99 -0
  162. package/src/console/ui/ai/findings.ts +41 -0
  163. package/src/console/ui/ai/fixture.ts +182 -0
  164. package/src/console/ui/ai/format.ts +90 -0
  165. package/src/console/ui/ai/group.test.ts +37 -0
  166. package/src/console/ui/ai/group.ts +88 -0
  167. package/src/console/ui/ai/index.ts +66 -0
  168. package/src/console/ui/ai/promotion.test.ts +77 -0
  169. package/src/console/ui/ai/promotion.ts +150 -0
  170. package/src/console/ui/ai/search.test.ts +40 -0
  171. package/src/console/ui/ai/search.ts +89 -0
  172. package/src/console/ui/ai/types.ts +139 -0
  173. package/src/console/ui/architecture/ArchitectureA11yView.tsx +163 -0
  174. package/src/console/ui/architecture/a11y.test.tsx +97 -0
  175. package/src/console/ui/architecture/boundary.ts +42 -0
  176. package/src/console/ui/architecture/declared.ts +165 -0
  177. package/src/console/ui/architecture/fixture.ts +74 -0
  178. package/src/console/ui/architecture/index.ts +84 -0
  179. package/src/console/ui/architecture/layers.ts +64 -0
  180. package/src/console/ui/architecture/layout.ts +68 -0
  181. package/src/console/ui/architecture/pathologies.ts +260 -0
  182. package/src/console/ui/architecture/search.ts +145 -0
  183. package/src/console/ui/architecture/traffic.ts +102 -0
  184. package/src/console/ui/architecture/types.ts +144 -0
  185. package/src/console/ui/architecture/view.test.ts +165 -0
  186. package/src/console/ui/architecture/view.ts +516 -0
  187. package/src/console/ui/channels/ChannelsA11yView.tsx +180 -0
  188. package/src/console/ui/channels/a11y.test.tsx +96 -0
  189. package/src/console/ui/channels/confirmation.test.ts +37 -0
  190. package/src/console/ui/channels/confirmation.ts +27 -0
  191. package/src/console/ui/channels/fallback.test.ts +15 -0
  192. package/src/console/ui/channels/fallback.ts +20 -0
  193. package/src/console/ui/channels/findings.ts +38 -0
  194. package/src/console/ui/channels/fixture.ts +134 -0
  195. package/src/console/ui/channels/group.ts +25 -0
  196. package/src/console/ui/channels/index.ts +57 -0
  197. package/src/console/ui/channels/locale.test.ts +17 -0
  198. package/src/console/ui/channels/locale.ts +31 -0
  199. package/src/console/ui/channels/mask.test.ts +14 -0
  200. package/src/console/ui/channels/mask.ts +12 -0
  201. package/src/console/ui/channels/search.ts +58 -0
  202. package/src/console/ui/channels/taxonomy.test.ts +17 -0
  203. package/src/console/ui/channels/taxonomy.ts +49 -0
  204. package/src/console/ui/channels/types.ts +117 -0
  205. package/src/console/ui/clock/ClockA11yView.tsx +182 -0
  206. package/src/console/ui/clock/a11y.test.tsx +99 -0
  207. package/src/console/ui/clock/confirmation.test.ts +32 -0
  208. package/src/console/ui/clock/confirmation.ts +34 -0
  209. package/src/console/ui/clock/findings.ts +40 -0
  210. package/src/console/ui/clock/fixture.ts +111 -0
  211. package/src/console/ui/clock/health.test.ts +25 -0
  212. package/src/console/ui/clock/health.ts +61 -0
  213. package/src/console/ui/clock/index.ts +49 -0
  214. package/src/console/ui/clock/search.test.ts +39 -0
  215. package/src/console/ui/clock/search.ts +76 -0
  216. package/src/console/ui/clock/timeline.test.ts +44 -0
  217. package/src/console/ui/clock/timeline.ts +41 -0
  218. package/src/console/ui/clock/types.ts +78 -0
  219. package/src/console/ui/clock/waiting-on.test.ts +34 -0
  220. package/src/console/ui/clock/waiting-on.ts +83 -0
  221. package/src/console/ui/confirmation.unify.test.ts +92 -0
  222. package/src/console/ui/diff/DiffA11yView.tsx +85 -0
  223. package/src/console/ui/diff/a11y.test.tsx +99 -0
  224. package/src/console/ui/diff/fixture.ts +85 -0
  225. package/src/console/ui/diff/group.test.ts +58 -0
  226. package/src/console/ui/diff/group.ts +97 -0
  227. package/src/console/ui/diff/index.ts +38 -0
  228. package/src/console/ui/diff/search.test.ts +32 -0
  229. package/src/console/ui/diff/search.ts +75 -0
  230. package/src/console/ui/diff/summary.ts +74 -0
  231. package/src/console/ui/diff/types.ts +48 -0
  232. package/src/console/ui/dist/assets/index-B71Yl_SS.js +10 -0
  233. package/src/console/ui/dist/assets/panel-access-Dd37LU2c.js +64 -0
  234. package/src/console/ui/dist/assets/panel-ai-CC7LR6-J.js +1 -0
  235. package/src/console/ui/dist/assets/panel-architecture-B5b3iKCz.js +1 -0
  236. package/src/console/ui/dist/assets/panel-channels-CeNjTKXp.js +1 -0
  237. package/src/console/ui/dist/assets/panel-clock-DgFTLoHV.js +1 -0
  238. package/src/console/ui/dist/assets/panel-diff-DxehccqB.js +1 -0
  239. package/src/console/ui/dist/assets/panel-flows-BtrVn-Eg.js +45 -0
  240. package/src/console/ui/dist/assets/panel-gates-Z9MKRGdH.js +1 -0
  241. package/src/console/ui/dist/assets/panel-overview-Bd48d9km.js +1 -0
  242. package/src/console/ui/dist/assets/panel-plugins-DWd0TowH.js +1 -0
  243. package/src/console/ui/dist/assets/panel-runs-BwsWqKeB.js +1 -0
  244. package/src/console/ui/dist/assets/panel-signals-9najbZY2.js +1 -0
  245. package/src/console/ui/dist/assets/panel-store-OHkP2pDp.js +1 -0
  246. package/src/console/ui/dist/assets/panel-traces-tn2JoY8U.js +1 -0
  247. package/src/console/ui/dist/assets/panel-vault-BbfWdox0.js +1 -0
  248. package/src/console/ui/dist/assets/rolldown-runtime-CNC7AqOf.js +1 -0
  249. package/src/console/ui/dist/assets/style-Cnl7WLya.css +3 -0
  250. package/src/console/ui/dist/index.html +14 -0
  251. package/src/console/ui/flows/FlowsA11yView.tsx +155 -0
  252. package/src/console/ui/flows/a11y.test.tsx +105 -0
  253. package/src/console/ui/flows/buffer.test.ts +91 -0
  254. package/src/console/ui/flows/buffer.ts +118 -0
  255. package/src/console/ui/flows/confirmation.ts +131 -0
  256. package/src/console/ui/flows/contract.test.ts +89 -0
  257. package/src/console/ui/flows/contract.ts +353 -0
  258. package/src/console/ui/flows/fixture.ts +81 -0
  259. package/src/console/ui/flows/graph.test.ts +101 -0
  260. package/src/console/ui/flows/graph.ts +549 -0
  261. package/src/console/ui/flows/index.ts +87 -0
  262. package/src/console/ui/flows/save-as-test.test.ts +47 -0
  263. package/src/console/ui/flows/save-as-test.ts +99 -0
  264. package/src/console/ui/flows/search.ts +255 -0
  265. package/src/console/ui/flows/tiers.ts +140 -0
  266. package/src/console/ui/gates/GatesA11yView.tsx +192 -0
  267. package/src/console/ui/gates/a11y.test.tsx +116 -0
  268. package/src/console/ui/gates/audit.test.ts +40 -0
  269. package/src/console/ui/gates/audit.ts +63 -0
  270. package/src/console/ui/gates/denial.test.ts +36 -0
  271. package/src/console/ui/gates/denial.ts +51 -0
  272. package/src/console/ui/gates/findings.ts +19 -0
  273. package/src/console/ui/gates/fixture.ts +189 -0
  274. package/src/console/ui/gates/group.test.ts +30 -0
  275. package/src/console/ui/gates/group.ts +102 -0
  276. package/src/console/ui/gates/index.ts +47 -0
  277. package/src/console/ui/gates/search.test.ts +49 -0
  278. package/src/console/ui/gates/search.ts +115 -0
  279. package/src/console/ui/gates/types.ts +121 -0
  280. package/src/console/ui/overview/OverviewA11yView.tsx +152 -0
  281. package/src/console/ui/overview/a11y.test.tsx +113 -0
  282. package/src/console/ui/overview/busiest.ts +26 -0
  283. package/src/console/ui/overview/compose.ts +133 -0
  284. package/src/console/ui/overview/cost.test.ts +39 -0
  285. package/src/console/ui/overview/cost.ts +138 -0
  286. package/src/console/ui/overview/fixture.ts +161 -0
  287. package/src/console/ui/overview/golden.ts +57 -0
  288. package/src/console/ui/overview/index.ts +59 -0
  289. package/src/console/ui/overview/rank.test.ts +136 -0
  290. package/src/console/ui/overview/rank.ts +210 -0
  291. package/src/console/ui/overview/slo.test.ts +73 -0
  292. package/src/console/ui/overview/slo.ts +229 -0
  293. package/src/console/ui/overview/types.ts +121 -0
  294. package/src/console/ui/overview/verdict.ts +131 -0
  295. package/src/console/ui/plugins/PluginsA11yView.tsx +227 -0
  296. package/src/console/ui/plugins/a11y.test.tsx +97 -0
  297. package/src/console/ui/plugins/command.test.ts +22 -0
  298. package/src/console/ui/plugins/command.ts +27 -0
  299. package/src/console/ui/plugins/findings.ts +39 -0
  300. package/src/console/ui/plugins/fixture.ts +233 -0
  301. package/src/console/ui/plugins/group.test.ts +38 -0
  302. package/src/console/ui/plugins/group.ts +67 -0
  303. package/src/console/ui/plugins/index.ts +40 -0
  304. package/src/console/ui/plugins/search.ts +67 -0
  305. package/src/console/ui/plugins/types.ts +115 -0
  306. package/src/console/ui/runs/RunsA11yView.tsx +267 -0
  307. package/src/console/ui/runs/a11y.test.tsx +99 -0
  308. package/src/console/ui/runs/explain.test.ts +23 -0
  309. package/src/console/ui/runs/explain.ts +32 -0
  310. package/src/console/ui/runs/fixture.ts +189 -0
  311. package/src/console/ui/runs/group.test.ts +24 -0
  312. package/src/console/ui/runs/group.ts +85 -0
  313. package/src/console/ui/runs/histogram.test.ts +31 -0
  314. package/src/console/ui/runs/histogram.ts +85 -0
  315. package/src/console/ui/runs/index.ts +75 -0
  316. package/src/console/ui/runs/project.ts +122 -0
  317. package/src/console/ui/runs/query.test.ts +50 -0
  318. package/src/console/ui/runs/query.ts +283 -0
  319. package/src/console/ui/runs/search.test.ts +45 -0
  320. package/src/console/ui/runs/search.ts +141 -0
  321. package/src/console/ui/runs/trace-link.test.ts +30 -0
  322. package/src/console/ui/runs/trace-link.ts +99 -0
  323. package/src/console/ui/runs/types.ts +137 -0
  324. package/src/console/ui/shell/App.tsx +56 -0
  325. package/src/console/ui/shell/client.ts +1715 -0
  326. package/src/console/ui/shell/components/ui.tsx +110 -0
  327. package/src/console/ui/shell/index.html +12 -0
  328. package/src/console/ui/shell/layout/Shell.tsx +95 -0
  329. package/src/console/ui/shell/main.tsx +281 -0
  330. package/src/console/ui/shell/panels/Access.tsx +5 -0
  331. package/src/console/ui/shell/panels/Ai.tsx +5 -0
  332. package/src/console/ui/shell/panels/Architecture.tsx +5 -0
  333. package/src/console/ui/shell/panels/Channels.tsx +5 -0
  334. package/src/console/ui/shell/panels/Clock.tsx +5 -0
  335. package/src/console/ui/shell/panels/Diff.tsx +5 -0
  336. package/src/console/ui/shell/panels/Flows.tsx +5 -0
  337. package/src/console/ui/shell/panels/Gates.tsx +5 -0
  338. package/src/console/ui/shell/panels/Overview.tsx +6 -0
  339. package/src/console/ui/shell/panels/Plugins.tsx +5 -0
  340. package/src/console/ui/shell/panels/Runs.tsx +5 -0
  341. package/src/console/ui/shell/panels/Signals.tsx +5 -0
  342. package/src/console/ui/shell/panels/Store.tsx +5 -0
  343. package/src/console/ui/shell/panels/Traces.tsx +5 -0
  344. package/src/console/ui/shell/panels/Vault.tsx +5 -0
  345. package/src/console/ui/shell/panels/access/AccessPanel.tsx +813 -0
  346. package/src/console/ui/shell/panels/ai/AiPanel.tsx +563 -0
  347. package/src/console/ui/shell/panels/architecture/ArchitecturePanel.tsx +377 -0
  348. package/src/console/ui/shell/panels/channels/ChannelsPanel.tsx +454 -0
  349. package/src/console/ui/shell/panels/clock/ClockPanel.tsx +479 -0
  350. package/src/console/ui/shell/panels/diff/DiffPanel.tsx +275 -0
  351. package/src/console/ui/shell/panels/flows/ContractEditor.tsx +301 -0
  352. package/src/console/ui/shell/panels/flows/FlowDrawer.tsx +350 -0
  353. package/src/console/ui/shell/panels/flows/FlowsPanel.tsx +502 -0
  354. package/src/console/ui/shell/panels/gates/GatesPanel.tsx +482 -0
  355. package/src/console/ui/shell/panels/overview/OverviewPanel.tsx +428 -0
  356. package/src/console/ui/shell/panels/plugins/PluginsPanel.tsx +413 -0
  357. package/src/console/ui/shell/panels/runs/RunsPanel.tsx +649 -0
  358. package/src/console/ui/shell/panels/signals/SignalsPanel.tsx +840 -0
  359. package/src/console/ui/shell/panels/store/StorePanel.tsx +787 -0
  360. package/src/console/ui/shell/panels/traces/TracesPanel.tsx +539 -0
  361. package/src/console/ui/shell/panels/vault/VaultPanel.tsx +449 -0
  362. package/src/console/ui/shell/plugin/Sandbox.tsx +29 -0
  363. package/src/console/ui/shell/setup/Wizard.tsx +189 -0
  364. package/src/console/ui/shell/styles.css +75 -0
  365. package/src/console/ui/signals/SignalsA11yView.tsx +276 -0
  366. package/src/console/ui/signals/a11y.test.tsx +99 -0
  367. package/src/console/ui/signals/confirmation.test.ts +39 -0
  368. package/src/console/ui/signals/confirmation.ts +63 -0
  369. package/src/console/ui/signals/dry-run.test.ts +18 -0
  370. package/src/console/ui/signals/dry-run.ts +36 -0
  371. package/src/console/ui/signals/durable.test.ts +22 -0
  372. package/src/console/ui/signals/durable.ts +41 -0
  373. package/src/console/ui/signals/findings.ts +33 -0
  374. package/src/console/ui/signals/fixture.ts +242 -0
  375. package/src/console/ui/signals/group.test.ts +32 -0
  376. package/src/console/ui/signals/group.ts +49 -0
  377. package/src/console/ui/signals/index.ts +52 -0
  378. package/src/console/ui/signals/monitor.test.ts +30 -0
  379. package/src/console/ui/signals/monitor.ts +79 -0
  380. package/src/console/ui/signals/schema-form.test.ts +34 -0
  381. package/src/console/ui/signals/schema-form.ts +112 -0
  382. package/src/console/ui/signals/search.ts +102 -0
  383. package/src/console/ui/signals/types.ts +71 -0
  384. package/src/console/ui/store/StoreA11yView.tsx +199 -0
  385. package/src/console/ui/store/a11y.test.tsx +99 -0
  386. package/src/console/ui/store/cache-view.test.ts +13 -0
  387. package/src/console/ui/store/cache-view.ts +36 -0
  388. package/src/console/ui/store/confirmation.test.ts +38 -0
  389. package/src/console/ui/store/confirmation.ts +55 -0
  390. package/src/console/ui/store/dry-run.test.ts +15 -0
  391. package/src/console/ui/store/dry-run.ts +29 -0
  392. package/src/console/ui/store/fixture.ts +163 -0
  393. package/src/console/ui/store/group.test.ts +21 -0
  394. package/src/console/ui/store/group.ts +41 -0
  395. package/src/console/ui/store/index.ts +40 -0
  396. package/src/console/ui/store/search.ts +78 -0
  397. package/src/console/ui/store/types.ts +65 -0
  398. package/src/console/ui/store/will-not-fire.test.ts +19 -0
  399. package/src/console/ui/store/will-not-fire.ts +40 -0
  400. package/src/console/ui/traces/TracesA11yView.tsx +200 -0
  401. package/src/console/ui/traces/a11y.test.tsx +97 -0
  402. package/src/console/ui/traces/chain.test.ts +61 -0
  403. package/src/console/ui/traces/chain.ts +144 -0
  404. package/src/console/ui/traces/critical-path.test.ts +24 -0
  405. package/src/console/ui/traces/critical-path.ts +59 -0
  406. package/src/console/ui/traces/filter.test.ts +78 -0
  407. package/src/console/ui/traces/filter.ts +112 -0
  408. package/src/console/ui/traces/fixture.ts +126 -0
  409. package/src/console/ui/traces/fold.test.ts +67 -0
  410. package/src/console/ui/traces/fold.ts +170 -0
  411. package/src/console/ui/traces/index.ts +64 -0
  412. package/src/console/ui/traces/mini.ts +65 -0
  413. package/src/console/ui/traces/replay.test.ts +24 -0
  414. package/src/console/ui/traces/replay.ts +35 -0
  415. package/src/console/ui/traces/sampling.test.ts +26 -0
  416. package/src/console/ui/traces/sampling.ts +66 -0
  417. package/src/console/ui/traces/search.ts +148 -0
  418. package/src/console/ui/traces/tier.ts +72 -0
  419. package/src/console/ui/traces/types.ts +125 -0
  420. package/src/console/ui/tsconfig.json +20 -0
  421. package/src/console/ui/vault/VaultA11yView.tsx +177 -0
  422. package/src/console/ui/vault/a11y.test.tsx +97 -0
  423. package/src/console/ui/vault/blast-radius.test.ts +35 -0
  424. package/src/console/ui/vault/blast-radius.ts +55 -0
  425. package/src/console/ui/vault/confirmation.test.ts +41 -0
  426. package/src/console/ui/vault/confirmation.ts +39 -0
  427. package/src/console/ui/vault/dormant.test.ts +37 -0
  428. package/src/console/ui/vault/dormant.ts +28 -0
  429. package/src/console/ui/vault/export-safe.test.ts +30 -0
  430. package/src/console/ui/vault/export-safe.ts +65 -0
  431. package/src/console/ui/vault/fixture.ts +75 -0
  432. package/src/console/ui/vault/group.test.ts +25 -0
  433. package/src/console/ui/vault/group.ts +50 -0
  434. package/src/console/ui/vault/index.ts +45 -0
  435. package/src/console/ui/vault/search.ts +62 -0
  436. package/src/console/ui/vault/types.ts +57 -0
  437. package/src/console/ui/vite.config.ts +84 -0
  438. package/src/console/xss.gate.test.ts +118 -0
  439. package/src/docker/compose.ts +226 -0
  440. package/src/docker/credentials.ts +25 -0
  441. package/src/docker/derive.ts +83 -0
  442. package/src/docker/docker.test.ts +185 -0
  443. package/src/docker/dockerfile.integration.test.ts +170 -0
  444. package/src/docker/dockerfile.ts +39 -0
  445. package/src/docker/helpers.ts +103 -0
  446. package/src/docker/index.ts +52 -0
  447. package/src/docker/pin.ts +90 -0
  448. package/src/docker/recipes/index.ts +33 -0
  449. package/src/docker/recipes/postgres.ts +18 -0
  450. package/src/docker/recipes/redis.ts +18 -0
  451. package/src/docker/stack.integration.test.ts +140 -0
  452. package/src/docker/stack.ts +62 -0
  453. package/src/docker/types.ts +134 -0
  454. package/src/drivers/ai-anthropic.ts +128 -0
  455. package/src/drivers/ai-mock.ts +82 -0
  456. package/src/drivers/ai-openai-compatible.ts +139 -0
  457. package/src/drivers/ai-providers.test.ts +163 -0
  458. package/src/drivers/ai-types.ts +83 -0
  459. package/src/drivers/bun-native-completeness.test.ts +155 -0
  460. package/src/drivers/channel-console.ts +118 -0
  461. package/src/drivers/channel-fcm.ts +96 -0
  462. package/src/drivers/channel-resend.ts +27 -0
  463. package/src/drivers/channel-smtp.ts +33 -0
  464. package/src/drivers/channel-types.ts +160 -0
  465. package/src/drivers/channel-unifonic.ts +79 -0
  466. package/src/drivers/channel-wa-cloud.ts +84 -0
  467. package/src/drivers/channel-webpush.ts +317 -0
  468. package/src/drivers/conformance.test.ts +89 -0
  469. package/src/drivers/conformance.ts +162 -0
  470. package/src/drivers/fs.ts +73 -0
  471. package/src/drivers/index.ts +194 -0
  472. package/src/drivers/kv-lua.ts +222 -0
  473. package/src/drivers/memory.ts +472 -0
  474. package/src/drivers/pgvector.ts +130 -0
  475. package/src/drivers/postgres.ts +221 -0
  476. package/src/drivers/redis.ts +254 -0
  477. package/src/drivers/s3.ts +129 -0
  478. package/src/drivers/signal-engine.ts +690 -0
  479. package/src/drivers/signal-memory.ts +27 -0
  480. package/src/drivers/signal-nats.ts +131 -0
  481. package/src/drivers/signal-postgres.ts +1089 -0
  482. package/src/drivers/signal-redis.ts +275 -0
  483. package/src/drivers/signal-types.ts +328 -0
  484. package/src/drivers/sqlite.ts +53 -0
  485. package/src/drivers/types.ts +334 -0
  486. package/src/drivers/vault-dotenv-parse.ts +56 -0
  487. package/src/drivers/vault-env.ts +101 -0
  488. package/src/drivers/vault-infisical.ts +61 -0
  489. package/src/drivers/vault-managed.ts +42 -0
  490. package/src/drivers/vault-memory.ts +38 -0
  491. package/src/drivers/vault-openbao.ts +80 -0
  492. package/src/drivers/vault-sops.ts +252 -0
  493. package/src/drivers/vault-types.ts +84 -0
  494. package/src/elements/ai/declare.ts +206 -0
  495. package/src/elements/ai/eval.ts +113 -0
  496. package/src/elements/ai/pii.ts +108 -0
  497. package/src/elements/ai/runtime.ts +540 -0
  498. package/src/elements/ai/schema.ts +194 -0
  499. package/src/elements/ai.test.ts +393 -0
  500. package/src/elements/ai.ts +56 -0
  501. package/src/elements/channel/consent.ts +81 -0
  502. package/src/elements/channel/costs.test.ts +62 -0
  503. package/src/elements/channel/costs.ts +130 -0
  504. package/src/elements/channel/declare.ts +141 -0
  505. package/src/elements/channel/email-auth.test.ts +47 -0
  506. package/src/elements/channel/email-auth.ts +109 -0
  507. package/src/elements/channel/locale.ts +97 -0
  508. package/src/elements/channel/mask.test.ts +19 -0
  509. package/src/elements/channel/mask.ts +60 -0
  510. package/src/elements/channel/mime.ts +23 -0
  511. package/src/elements/channel/outcomes.test.ts +40 -0
  512. package/src/elements/channel/outcomes.ts +126 -0
  513. package/src/elements/channel/receipts.ts +121 -0
  514. package/src/elements/channel/runtime.ts +500 -0
  515. package/src/elements/channel/suppression.ts +136 -0
  516. package/src/elements/channel.test.ts +232 -0
  517. package/src/elements/channel.ts +109 -0
  518. package/src/elements/clock/actions.ts +170 -0
  519. package/src/elements/clock/declare.ts +58 -0
  520. package/src/elements/clock/dst.ts +197 -0
  521. package/src/elements/clock/durable.ts +140 -0
  522. package/src/elements/clock/duration.ts +29 -0
  523. package/src/elements/clock/health.test.ts +103 -0
  524. package/src/elements/clock/health.ts +112 -0
  525. package/src/elements/clock/leader.ts +127 -0
  526. package/src/elements/clock/reconcile.ts +241 -0
  527. package/src/elements/clock/runtime.ts +243 -0
  528. package/src/elements/clock/schedule.ts +262 -0
  529. package/src/elements/clock/time-travel.ts +53 -0
  530. package/src/elements/clock.test.ts +365 -0
  531. package/src/elements/clock.ts +80 -0
  532. package/src/elements/gate/declare.ts +134 -0
  533. package/src/elements/gate/permissions.ts +104 -0
  534. package/src/elements/gate/runtime.ts +177 -0
  535. package/src/elements/gate/strategies.ts +388 -0
  536. package/src/elements/gate.test.ts +145 -0
  537. package/src/elements/gate.ts +41 -0
  538. package/src/elements/index.ts +169 -0
  539. package/src/elements/signal/chaos-child.ts +47 -0
  540. package/src/elements/signal/declare.ts +77 -0
  541. package/src/elements/signal/dry-run-replay.test.ts +95 -0
  542. package/src/elements/signal/dry-run-write-isolation.test.ts +94 -0
  543. package/src/elements/signal/reconcile.test.ts +23 -0
  544. package/src/elements/signal/reconcile.ts +122 -0
  545. package/src/elements/signal/runtime.ts +94 -0
  546. package/src/elements/signal.test.ts +457 -0
  547. package/src/elements/signal.ts +26 -0
  548. package/src/elements/store/cache.ts +197 -0
  549. package/src/elements/store/classify.ts +125 -0
  550. package/src/elements/store/declare.ts +200 -0
  551. package/src/elements/store/files-policy.test.ts +31 -0
  552. package/src/elements/store/files-policy.ts +70 -0
  553. package/src/elements/store/replica.ts +68 -0
  554. package/src/elements/store/runtime.ts +393 -0
  555. package/src/elements/store/sql-condition.ts +205 -0
  556. package/src/elements/store/sql-session.ts +579 -0
  557. package/src/elements/store/table.ts +282 -0
  558. package/src/elements/store.test.ts +370 -0
  559. package/src/elements/store.ts +99 -0
  560. package/src/elements/vault/declare.ts +143 -0
  561. package/src/elements/vault/fingerprint.ts +30 -0
  562. package/src/elements/vault/redact.ts +52 -0
  563. package/src/elements/vault/runtime.ts +461 -0
  564. package/src/elements/vault.test.ts +296 -0
  565. package/src/elements/vault.ts +44 -0
  566. package/src/index.ts +183 -0
  567. package/src/kernel/adopt-routes.ts +194 -0
  568. package/src/kernel/app.ts +1068 -0
  569. package/src/kernel/auth-resolve.ts +93 -0
  570. package/src/kernel/boot.test.ts +173 -0
  571. package/src/kernel/boot.ts +439 -0
  572. package/src/kernel/budget-entry.ts +55 -0
  573. package/src/kernel/budget.test.ts +19 -0
  574. package/src/kernel/call.test.ts +83 -0
  575. package/src/kernel/capability.ts +113 -0
  576. package/src/kernel/dry-run.test.ts +64 -0
  577. package/src/kernel/dry-run.ts +171 -0
  578. package/src/kernel/effects.test.ts +89 -0
  579. package/src/kernel/effects.ts +140 -0
  580. package/src/kernel/errors.registry.test.ts +39 -0
  581. package/src/kernel/errors.ts +225 -0
  582. package/src/kernel/flow.test.ts +154 -0
  583. package/src/kernel/flow.ts +290 -0
  584. package/src/kernel/fx.test.ts +245 -0
  585. package/src/kernel/fx.ts +996 -0
  586. package/src/kernel/hook-timing.test.ts +72 -0
  587. package/src/kernel/hook-timing.ts +190 -0
  588. package/src/kernel/hooks.test.ts +181 -0
  589. package/src/kernel/hooks.ts +275 -0
  590. package/src/kernel/index.ts +278 -0
  591. package/src/kernel/journal.ts +405 -0
  592. package/src/kernel/journey.ts +75 -0
  593. package/src/kernel/on.ts +74 -0
  594. package/src/kernel/pipeline.test.ts +349 -0
  595. package/src/kernel/pipeline.ts +245 -0
  596. package/src/kernel/plug.ts +82 -0
  597. package/src/kernel/plugin/capabilities.test.ts +84 -0
  598. package/src/kernel/plugin/conflicts.test.ts +106 -0
  599. package/src/kernel/plugin/decorate.test.ts +111 -0
  600. package/src/kernel/plugin/scoping.test.ts +138 -0
  601. package/src/kernel/plugin.ts +485 -0
  602. package/src/kernel/rate-limit.ts +25 -0
  603. package/src/kernel/registry.ts +398 -0
  604. package/src/kernel/router.test.ts +114 -0
  605. package/src/kernel/router.ts +556 -0
  606. package/src/kernel/routing-budget.test.ts +19 -0
  607. package/src/kernel/run-telemetry.ts +70 -0
  608. package/src/kernel/triggers.ts +324 -0
  609. package/src/kernel/unit.ts +88 -0
  610. package/src/manifest/diff.test.ts +866 -0
  611. package/src/manifest/diff.ts +1670 -0
  612. package/src/manifest/fixtures/base.manifest.json +112 -0
  613. package/src/manifest/fixtures/skyport.excerpt.json +51 -0
  614. package/src/manifest/fixtures/skyport.manifest.json +153 -0
  615. package/src/manifest/index.ts +27 -0
  616. package/src/manifest/types.ts +358 -0
  617. package/src/manifest/undeclared.test.ts +82 -0
  618. package/src/manifest/undeclared.ts +65 -0
  619. package/src/manifest/validate.test.ts +105 -0
  620. package/src/manifest/validate.ts +174 -0
  621. package/src/mcp/authorization.ts +340 -0
  622. package/src/mcp/confirmation.ts +174 -0
  623. package/src/mcp/data.ts +90 -0
  624. package/src/mcp/index.ts +80 -0
  625. package/src/mcp/injection.gate.test.ts +176 -0
  626. package/src/mcp/mcp.test.ts +348 -0
  627. package/src/mcp/protocol.ts +172 -0
  628. package/src/mcp/server.ts +283 -0
  629. package/src/mcp/session.ts +139 -0
  630. package/src/mcp/tools.ts +391 -0
  631. package/src/plugins/catalogue.test.ts +48 -0
  632. package/src/plugins/catalogue.ts +113 -0
  633. package/src/plugins/node-import-scan.test.ts +28 -0
  634. package/src/plugins/node-import-scan.ts +98 -0
  635. package/src/plugins/supply-chain.test.ts +48 -0
  636. package/src/plugins/supply-chain.ts +460 -0
  637. package/src/release/index.ts +30 -0
  638. package/src/release/limits.ts +20 -0
  639. package/src/release/measure.ts +443 -0
  640. package/src/release/publish.ts +56 -0
  641. package/src/runs/bench.test.ts +93 -0
  642. package/src/runs/collect.ts +144 -0
  643. package/src/runs/drivers/clickhouse.ts +108 -0
  644. package/src/runs/drivers/files.ts +201 -0
  645. package/src/runs/drivers/memory.ts +94 -0
  646. package/src/runs/drivers/postgres.ts +110 -0
  647. package/src/runs/duckdb.ts +99 -0
  648. package/src/runs/index.ts +82 -0
  649. package/src/runs/outlier.ts +180 -0
  650. package/src/runs/parquet.ts +210 -0
  651. package/src/runs/privacy.ts +49 -0
  652. package/src/runs/runs.test.ts +324 -0
  653. package/src/runs/runtime.ts +229 -0
  654. package/src/runs/shred.ts +243 -0
  655. package/src/runs/telemetry.ts +10 -0
  656. package/src/runs/types.ts +179 -0
  657. package/src/runtime/bun.ts +140 -0
  658. package/src/runtime/cold-start.bench.ts +20 -0
  659. package/src/runtime/index.ts +46 -0
  660. package/src/runtime/primitives.ts +242 -0
  661. package/src/runtime/security.test.ts +170 -0
  662. package/src/runtime/security.ts +168 -0
  663. package/src/runtime/serve.test.ts +223 -0
  664. package/src/runtime/types.ts +217 -0
  665. package/src/runtime/web-standard.ts +77 -0
  666. package/src/test/create-test-app.test.ts +161 -0
  667. package/src/test/create-test-app.ts +533 -0
  668. package/src/test/index.ts +21 -0
  669. package/src/test/provisions.integration.test.ts +174 -0
  670. package/src/upgrade/codemods.test.ts +58 -0
  671. package/src/upgrade/codemods.ts +83 -0
  672. package/src/validation/index.ts +23 -0
  673. package/src/validation/standard-schema.test.ts +96 -0
  674. package/src/validation/standard-schema.ts +316 -0
@@ -0,0 +1,787 @@
1
+ /**
2
+ * Store panel — one list grouped by facet (console §9.5).
3
+ */
4
+
5
+ import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
6
+ import { Link, useNavigate, useSearch } from "@tanstack/react-router";
7
+ import { clsx } from "clsx";
8
+ import { useEffect, useMemo, useState } from "react";
9
+ import {
10
+ deleteConfirmation,
11
+ editConfirmation,
12
+ explainCache,
13
+ formatWillNotFire,
14
+ groupByFacet,
15
+ openChild,
16
+ openStore,
17
+ previewOffer,
18
+ purgeConfirmation,
19
+ serializeStoreSearch,
20
+ validateTypedConfirm,
21
+ type StoreListResponse,
22
+ type StoreRecord,
23
+ type StoreSearch,
24
+ } from "../../../store/index.ts";
25
+ import { consoleCalls } from "../../client.ts";
26
+ import { Button } from "../../components/ui.tsx";
27
+
28
+ /**
29
+ * Store panel. Tenant lives in the header when tenancy is declared.
30
+ */
31
+ export function StorePanel() {
32
+ const search = useSearch({ from: "/store" }) as StoreSearch;
33
+ const navigate = useNavigate({ from: "/store" });
34
+ const qc = useQueryClient();
35
+ const [typed, setTyped] = useState("");
36
+ const [reason, setReason] = useState("");
37
+ const [patchJson, setPatchJson] = useState("{}");
38
+ const [sqlText, setSqlText] = useState('SELECT * FROM "bookings" LIMIT 50');
39
+ const [probeVector, setProbeVector] = useState("0.1,0.2,0.3");
40
+ const [willNotPreview, setWillNotPreview] = useState<string[] | null>(null);
41
+
42
+ const setSearch = (next: StoreSearch) => {
43
+ void navigate({
44
+ search: serializeStoreSearch(next) as never,
45
+ replace: true,
46
+ });
47
+ };
48
+
49
+ const listQuery = useQuery({
50
+ queryKey: ["console.store.list"],
51
+ queryFn: async () => {
52
+ const res = await consoleCalls.storeList();
53
+ if (res.error) throw new Error(res.error.code);
54
+ return res.data as StoreListResponse;
55
+ },
56
+ refetchInterval: 10_000,
57
+ });
58
+
59
+ const tenancyDeclared = listQuery.data?.tenancyDeclared ?? false;
60
+ const tenants = listQuery.data?.tenants ?? [];
61
+ const stores = listQuery.data?.stores ?? [];
62
+ const groups = useMemo(
63
+ () => groupByFacet(stores, search.q ?? ""),
64
+ [stores, search.q],
65
+ );
66
+ const open = stores.find((s) => s.ref === search.ref);
67
+ const child =
68
+ open?.children.find((c) => c.name === search.child) ??
69
+ open?.children[0];
70
+ const view = search.view ?? "browse";
71
+ const editConfirm = editConfirmation({ production: true });
72
+ const delConfirm = deleteConfirmation({ production: true });
73
+ const purgeConfirm = purgeConfirmation({ production: true });
74
+ const dryOffer = open ? previewOffer(open) : null;
75
+ const willNot = child ? formatWillNotFire(child.willNotFire) : null;
76
+ const cache = child ? explainCache(child) : null;
77
+
78
+ const browseQuery = useQuery({
79
+ queryKey: [
80
+ "console.store.query",
81
+ search.ref,
82
+ child?.name,
83
+ search.tenant,
84
+ search.prefix,
85
+ view,
86
+ probeVector,
87
+ ],
88
+ enabled:
89
+ !!open &&
90
+ !!child &&
91
+ view === "browse" &&
92
+ (!tenancyDeclared || !!search.tenant),
93
+ queryFn: async () => {
94
+ if (!open || !child) return null;
95
+ const vector =
96
+ open.facet === "index"
97
+ ? probeVector
98
+ .split(",")
99
+ .map((n) => Number(n.trim()))
100
+ .filter((n) => !Number.isNaN(n))
101
+ : undefined;
102
+ const res = await consoleCalls.storeQuery({
103
+ ref: open.ref,
104
+ child: child.name,
105
+ tenant: search.tenant,
106
+ prefix: search.prefix,
107
+ vector,
108
+ topK: 5,
109
+ });
110
+ if (res.error) throw new Error(res.error.code);
111
+ return res.data;
112
+ },
113
+ });
114
+
115
+ useEffect(() => {
116
+ setTyped("");
117
+ setReason("");
118
+ setWillNotPreview(null);
119
+ }, [open?.ref, child?.name]);
120
+
121
+ const invalidate = () => {
122
+ void qc.invalidateQueries({ queryKey: ["console.store.list"] });
123
+ void qc.invalidateQueries({ queryKey: ["console.store.query"] });
124
+ };
125
+
126
+ const previewEdit = useMutation({
127
+ mutationFn: async () => {
128
+ if (!open || !child) return;
129
+ if (dryOffer && !dryOffer.ok) throw new Error(dryOffer.reason);
130
+ let patch: Record<string, unknown> = {};
131
+ try {
132
+ patch = JSON.parse(patchJson) as Record<string, unknown>;
133
+ } catch {
134
+ throw new Error("Patch must be valid JSON");
135
+ }
136
+ const res = await consoleCalls.storePreview({
137
+ ref: open.ref,
138
+ child: child.name,
139
+ tenant: search.tenant,
140
+ id: String(patch.id ?? "preview"),
141
+ key: typeof patch.key === "string" ? patch.key : undefined,
142
+ patch,
143
+ });
144
+ if (res.error) throw new Error(res.error.code);
145
+ const data = res.data!;
146
+ setWillNotPreview(
147
+ formatWillNotFire(data.willNotFire).lines as string[],
148
+ );
149
+ return data;
150
+ },
151
+ });
152
+
153
+ const commitEdit = useMutation({
154
+ mutationFn: async () => {
155
+ if (!open || !child) return;
156
+ if (editConfirm.kind === "typed") {
157
+ const errors = validateTypedConfirm({
158
+ typed,
159
+ reason,
160
+ phrase: editConfirm.phrase,
161
+ });
162
+ if (errors) throw new Error(errors.typed ?? errors.reason);
163
+ }
164
+ let patch: Record<string, unknown> = {};
165
+ try {
166
+ patch = JSON.parse(patchJson) as Record<string, unknown>;
167
+ } catch {
168
+ throw new Error("Patch must be valid JSON");
169
+ }
170
+ const res = await consoleCalls.storeEdit({
171
+ ref: open.ref,
172
+ child: child.name,
173
+ tenant: search.tenant,
174
+ id: String(patch.id ?? ""),
175
+ key: typeof patch.key === "string" ? patch.key : undefined,
176
+ patch,
177
+ confirmation: typed,
178
+ reason,
179
+ commit: true,
180
+ });
181
+ if (res.error) throw new Error(res.error.code);
182
+ return res.data;
183
+ },
184
+ onSuccess: invalidate,
185
+ });
186
+
187
+ const deleteMut = useMutation({
188
+ mutationFn: async (ids: string[]) => {
189
+ if (!open || !child) return;
190
+ if (delConfirm.kind === "typed") {
191
+ const errors = validateTypedConfirm({
192
+ typed,
193
+ reason,
194
+ phrase: delConfirm.phrase,
195
+ });
196
+ if (errors) throw new Error(errors.typed ?? errors.reason);
197
+ }
198
+ const res = await consoleCalls.storeDelete({
199
+ ref: open.ref,
200
+ child: child.name,
201
+ tenant: search.tenant,
202
+ ids: open.facet === "sql" || open.facet === "index" ? ids : undefined,
203
+ keys: open.facet === "kv" || open.facet === "files" ? ids : undefined,
204
+ confirmation: typed,
205
+ reason,
206
+ });
207
+ if (res.error) throw new Error(res.error.code);
208
+ return res.data;
209
+ },
210
+ onSuccess: invalidate,
211
+ });
212
+
213
+ const purgeMut = useMutation({
214
+ mutationFn: async () => {
215
+ if (!child) return;
216
+ if (purgeConfirm.kind === "typed") {
217
+ const errors = validateTypedConfirm({
218
+ typed,
219
+ reason,
220
+ phrase: purgeConfirm.phrase,
221
+ });
222
+ if (errors) throw new Error(errors.typed ?? errors.reason);
223
+ }
224
+ const res = await consoleCalls.storePurgeCache({
225
+ resource: child.effectRef,
226
+ confirmation: typed,
227
+ reason,
228
+ });
229
+ if (res.error) throw new Error(res.error.code);
230
+ return res.data;
231
+ },
232
+ onSuccess: invalidate,
233
+ });
234
+
235
+ const sqlMut = useMutation({
236
+ mutationFn: async () => {
237
+ if (!open || open.facet !== "sql") return;
238
+ const res = await consoleCalls.storeSql({
239
+ ref: open.ref,
240
+ sql: sqlText,
241
+ tenant: search.tenant,
242
+ allowWrite: false,
243
+ });
244
+ if (res.error) throw new Error(res.error.code);
245
+ return res.data;
246
+ },
247
+ });
248
+
249
+ const revealMut = useMutation({
250
+ mutationFn: async (args: { id: string; column: string }) => {
251
+ if (!open || !child) return;
252
+ const res = await consoleCalls.storeReveal({
253
+ ref: open.ref,
254
+ child: child.name,
255
+ tenant: search.tenant,
256
+ id: args.id,
257
+ column: args.column,
258
+ });
259
+ if (res.error) throw new Error(res.error.code);
260
+ return res.data;
261
+ },
262
+ });
263
+
264
+ return (
265
+ <div className="flex h-full min-h-0 flex-col">
266
+ <header className="flex shrink-0 flex-wrap items-end gap-3 border-b border-[var(--oke-line)] px-4 py-3">
267
+ <div className="mr-auto">
268
+ <h1 className="text-lg font-medium">Store</h1>
269
+ <p className="text-sm text-[var(--oke-muted)]">
270
+ One list, grouped by facet — direct edits are not flow executions
271
+ </p>
272
+ </div>
273
+ {tenancyDeclared ? (
274
+ <label className="flex flex-col gap-1 text-sm">
275
+ <span className="text-[var(--oke-muted)]">Tenant</span>
276
+ <select
277
+ aria-label="Tenant"
278
+ className="min-h-8 border border-[var(--oke-line)] bg-transparent px-2"
279
+ value={search.tenant ?? ""}
280
+ onChange={(e) =>
281
+ setSearch({
282
+ ...search,
283
+ tenant: e.target.value || undefined,
284
+ })
285
+ }
286
+ >
287
+ <option value="">Select tenant…</option>
288
+ {tenants.map((t) => (
289
+ <option key={t} value={t}>
290
+ {t}
291
+ </option>
292
+ ))}
293
+ </select>
294
+ </label>
295
+ ) : null}
296
+ <label className="flex flex-col gap-1 text-sm">
297
+ <span className="text-[var(--oke-muted)]">Filter</span>
298
+ <input
299
+ aria-label="Filter stores"
300
+ className="min-h-8 border border-[var(--oke-line)] bg-transparent px-2"
301
+ value={search.q ?? ""}
302
+ onChange={(e) =>
303
+ setSearch({ ...search, q: e.target.value || undefined })
304
+ }
305
+ />
306
+ </label>
307
+ </header>
308
+
309
+ <div className="flex min-h-0 flex-1">
310
+ <section
311
+ aria-label="Store list"
312
+ className="w-72 shrink-0 overflow-y-auto border-r border-[var(--oke-line)]"
313
+ >
314
+ {listQuery.isLoading ? (
315
+ <p className="p-3 text-sm text-[var(--oke-muted)]">Loading…</p>
316
+ ) : null}
317
+ {groups.map((group) => (
318
+ <div key={group.facet} className="border-b border-[var(--oke-line)]">
319
+ <h2 className="px-3 py-2 text-xs tracking-wide text-[var(--oke-muted)]">
320
+ {group.label}
321
+ </h2>
322
+ <ul>
323
+ {group.stores.map((s) => (
324
+ <li key={s.ref}>
325
+ <button
326
+ type="button"
327
+ aria-pressed={s.ref === search.ref}
328
+ className={clsx(
329
+ "flex min-h-8 w-full flex-col items-start px-3 py-2 text-left text-sm",
330
+ s.ref === search.ref
331
+ ? "bg-[var(--oke-line)]/40"
332
+ : "hover:bg-[var(--oke-line)]/20",
333
+ )}
334
+ onClick={() => setSearch(openStore(search, s.ref))}
335
+ >
336
+ <span>{s.name}</span>
337
+ <span className="text-xs text-[var(--oke-muted)]">
338
+ {s.children.length} resource(s)
339
+ {s.replicaLagMs != null
340
+ ? ` · lag ${s.replicaLagMs}ms`
341
+ : ""}
342
+ {s.migrationDrift?.drifted ? " · drift" : ""}
343
+ {s.warnings.length > 0
344
+ ? ` · ${s.warnings.length} warn`
345
+ : ""}
346
+ </span>
347
+ </button>
348
+ </li>
349
+ ))}
350
+ </ul>
351
+ </div>
352
+ ))}
353
+ </section>
354
+
355
+ <section
356
+ aria-label="Store detail"
357
+ className="min-w-0 flex-1 overflow-y-auto p-4"
358
+ aria-live="polite"
359
+ >
360
+ {!open ? (
361
+ <p className="text-sm text-[var(--oke-muted)]">
362
+ Select a store. Tenant selector appears only when tenancy is
363
+ declared on the Manifest.
364
+ </p>
365
+ ) : tenancyDeclared && !search.tenant ? (
366
+ <p role="status" className="text-sm">
367
+ Select a tenant in the header before browsing — compliance
368
+ boundary, not a display filter.
369
+ </p>
370
+ ) : (
371
+ <StoreDetail
372
+ open={open}
373
+ childName={child?.name}
374
+ view={view}
375
+ search={search}
376
+ setSearch={setSearch}
377
+ browse={browseQuery.data}
378
+ browseLoading={browseQuery.isLoading}
379
+ cache={cache}
380
+ willNot={willNot}
381
+ willNotPreview={willNotPreview}
382
+ patchJson={patchJson}
383
+ setPatchJson={setPatchJson}
384
+ typed={typed}
385
+ setTyped={setTyped}
386
+ reason={reason}
387
+ setReason={setReason}
388
+ sqlText={sqlText}
389
+ setSqlText={setSqlText}
390
+ probeVector={probeVector}
391
+ setProbeVector={setProbeVector}
392
+ onPreview={() => previewEdit.mutate()}
393
+ onCommit={() => commitEdit.mutate()}
394
+ onDelete={(ids) => deleteMut.mutate(ids)}
395
+ onPurge={() => purgeMut.mutate()}
396
+ onSql={() => sqlMut.mutate()}
397
+ sqlResult={sqlMut.data}
398
+ onReveal={(id, column) => revealMut.mutate({ id, column })}
399
+ revealValue={revealMut.data?.value}
400
+ error={
401
+ previewEdit.error?.message ??
402
+ commitEdit.error?.message ??
403
+ deleteMut.error?.message ??
404
+ purgeMut.error?.message ??
405
+ sqlMut.error?.message ??
406
+ revealMut.error?.message
407
+ }
408
+ />
409
+ )}
410
+ </section>
411
+ </div>
412
+ </div>
413
+ );
414
+ }
415
+
416
+ function StoreDetail(props: {
417
+ readonly open: StoreRecord;
418
+ readonly childName: string | undefined;
419
+ readonly view: "browse" | "cache" | "sql" | "probe";
420
+ readonly search: StoreSearch;
421
+ readonly setSearch: (s: StoreSearch) => void;
422
+ readonly browse: Awaited<
423
+ ReturnType<typeof consoleCalls.storeQuery>
424
+ >["data"];
425
+ readonly browseLoading: boolean;
426
+ readonly cache: ReturnType<typeof explainCache> | null;
427
+ readonly willNot: ReturnType<typeof formatWillNotFire> | null;
428
+ readonly willNotPreview: string[] | null;
429
+ readonly patchJson: string;
430
+ readonly setPatchJson: (v: string) => void;
431
+ readonly typed: string;
432
+ readonly setTyped: (v: string) => void;
433
+ readonly reason: string;
434
+ readonly setReason: (v: string) => void;
435
+ readonly sqlText: string;
436
+ readonly setSqlText: (v: string) => void;
437
+ readonly probeVector: string;
438
+ readonly setProbeVector: (v: string) => void;
439
+ readonly onPreview: () => void;
440
+ readonly onCommit: () => void;
441
+ readonly onDelete: (ids: string[]) => void;
442
+ readonly onPurge: () => void;
443
+ readonly onSql: () => void;
444
+ readonly sqlResult:
445
+ | {
446
+ rows: Array<Record<string, unknown>>;
447
+ masked: boolean;
448
+ routedRole: "primary" | "replica";
449
+ }
450
+ | null
451
+ | undefined;
452
+ readonly onReveal: (id: string, column: string) => void;
453
+ readonly revealValue: unknown;
454
+ readonly error?: string;
455
+ }) {
456
+ const {
457
+ open,
458
+ childName,
459
+ view,
460
+ search,
461
+ setSearch,
462
+ browse,
463
+ browseLoading,
464
+ cache,
465
+ willNot,
466
+ willNotPreview,
467
+ patchJson,
468
+ setPatchJson,
469
+ typed,
470
+ setTyped,
471
+ reason,
472
+ setReason,
473
+ sqlText,
474
+ setSqlText,
475
+ probeVector,
476
+ setProbeVector,
477
+ onPreview,
478
+ onCommit,
479
+ onDelete,
480
+ onPurge,
481
+ onSql,
482
+ sqlResult,
483
+ onReveal,
484
+ revealValue,
485
+ error,
486
+ } = props;
487
+ const child = open.children.find((c) => c.name === childName);
488
+
489
+ return (
490
+ <div className="flex flex-col gap-4">
491
+ <div className="flex flex-wrap items-baseline gap-2">
492
+ <h2 className="text-base font-medium">{open.name}</h2>
493
+ <span className="text-sm text-[var(--oke-muted)]">{open.ref}</span>
494
+ {open.contentAddressed ? (
495
+ <span role="status" className="text-xs text-[var(--oke-muted)]">
496
+ content-addressed keys
497
+ </span>
498
+ ) : null}
499
+ </div>
500
+
501
+ <div className="flex flex-wrap gap-2" role="tablist" aria-label="Views">
502
+ {(
503
+ [
504
+ ["browse", "Browse"],
505
+ ["cache", "Cache"],
506
+ ...(open.facet === "sql" ? [["sql", "SQL"]] as const : []),
507
+ ...(open.facet === "index" ? [["probe", "Probe"]] as const : []),
508
+ ] as const
509
+ ).map(([id, label]) => (
510
+ <button
511
+ key={id}
512
+ type="button"
513
+ role="tab"
514
+ aria-selected={view === id}
515
+ className={clsx(
516
+ "min-h-8 px-2 text-sm",
517
+ view === id
518
+ ? "text-[var(--oke-fg)] underline"
519
+ : "text-[var(--oke-muted)]",
520
+ )}
521
+ onClick={() => setSearch({ ...search, view: id })}
522
+ >
523
+ {label}
524
+ </button>
525
+ ))}
526
+ </div>
527
+
528
+ <label className="flex flex-col gap-1 text-sm">
529
+ <span className="text-[var(--oke-muted)]">Resource</span>
530
+ <select
531
+ aria-label="Store resource"
532
+ className="min-h-8 max-w-xs border border-[var(--oke-line)] bg-transparent px-2"
533
+ value={childName ?? ""}
534
+ onChange={(e) =>
535
+ setSearch(openChild(search, e.target.value))
536
+ }
537
+ >
538
+ {open.children.map((c) => (
539
+ <option key={c.name} value={c.name}>
540
+ {c.name}
541
+ </option>
542
+ ))}
543
+ </select>
544
+ </label>
545
+
546
+ {child ? (
547
+ <p className="text-sm" role="status">
548
+ Writers:{" "}
549
+ {child.writers.map((f) => (
550
+ <Link
551
+ key={f}
552
+ to="/flows"
553
+ search={{ flow: f } as never}
554
+ className="mr-2 underline"
555
+ >
556
+ {f}
557
+ </Link>
558
+ ))}
559
+ {child.writers.length === 0 ? "none" : null}
560
+ {" · "}
561
+ Readers: {child.readers.join(", ") || "none"}
562
+ {child.piiColumns.length > 0
563
+ ? ` · PII columns: ${child.piiColumns.join(", ")}`
564
+ : ""}
565
+ </p>
566
+ ) : null}
567
+
568
+ {open.migrationDrift ? (
569
+ <p className="text-sm" role="status">
570
+ Migration: declared {open.migrationDrift.declared.slice(0, 12)}…
571
+ {open.migrationDrift.applied
572
+ ? ` / applied ${open.migrationDrift.applied.slice(0, 12)}…`
573
+ : " / applied (none)"}
574
+ {open.migrationDrift.drifted ? " — drifted" : " — in sync"}
575
+ </p>
576
+ ) : null}
577
+
578
+ {open.warnings.length > 0 ? (
579
+ <ul aria-label="Operational warnings" className="text-sm">
580
+ {open.warnings.map((w) => (
581
+ <li key={`${w.key}:${w.code}`} role="status">
582
+ {w.key}: {w.message}
583
+ </li>
584
+ ))}
585
+ </ul>
586
+ ) : null}
587
+
588
+ {view === "cache" && cache ? (
589
+ <section aria-label="Cache">
590
+ <h3 className="text-sm font-medium">Cache</h3>
591
+ <p className="text-sm" role="status">
592
+ {cache.summary}
593
+ </p>
594
+ <p className="text-xs text-[var(--oke-muted)]">
595
+ Invalidating flows:{" "}
596
+ {cache.invalidatingFlows.join(", ") || "none"}
597
+ </p>
598
+ <Button type="button" onClick={onPurge}>
599
+ Purge cache namespace
600
+ </Button>
601
+ </section>
602
+ ) : null}
603
+
604
+ {view === "sql" && open.facet === "sql" ? (
605
+ <section aria-label="SQL console" className="flex flex-col gap-2">
606
+ <h3 className="text-sm font-medium">SQL console (read-only)</h3>
607
+ <textarea
608
+ aria-label="SQL console"
609
+ className="min-h-24 border border-[var(--oke-line)] bg-transparent p-2 font-mono text-sm"
610
+ value={sqlText}
611
+ onChange={(e) => setSqlText(e.target.value)}
612
+ />
613
+ <Button type="button" onClick={onSql}>
614
+ Run
615
+ </Button>
616
+ {sqlResult ? (
617
+ <p className="text-xs text-[var(--oke-muted)]">
618
+ {sqlResult.rows.length} row(s) · routed {sqlResult.routedRole}
619
+ {sqlResult.masked ? " · PII masked" : ""}
620
+ </p>
621
+ ) : null}
622
+ </section>
623
+ ) : null}
624
+
625
+ {(view === "browse" || view === "probe") && (
626
+ <section aria-label="Browse">
627
+ {open.facet === "index" ? (
628
+ <label className="mb-2 flex flex-col gap-1 text-sm">
629
+ <span>Probe vector</span>
630
+ <input
631
+ aria-label="Probe vector"
632
+ className="min-h-8 border border-[var(--oke-line)] bg-transparent px-2 font-mono"
633
+ value={probeVector}
634
+ onChange={(e) => setProbeVector(e.target.value)}
635
+ />
636
+ </label>
637
+ ) : null}
638
+ {browseLoading ? (
639
+ <p className="text-sm text-[var(--oke-muted)]">Loading…</p>
640
+ ) : null}
641
+ {browse?.rows ? (
642
+ <table className="w-full text-left text-sm">
643
+ <thead>
644
+ <tr>
645
+ {Object.keys(browse.rows[0] ?? { id: 1 }).map((col) => (
646
+ <th key={col} scope="col" className="border-b px-2 py-1">
647
+ {col}
648
+ </th>
649
+ ))}
650
+ <th scope="col" className="border-b px-2 py-1">
651
+ Actions
652
+ </th>
653
+ </tr>
654
+ </thead>
655
+ <tbody>
656
+ {browse.rows.map((row, i) => (
657
+ <tr key={i}>
658
+ {Object.entries(row).map(([col, val]) => (
659
+ <td key={col} className="border-b px-2 py-1 font-mono">
660
+ {String(val)}
661
+ {child?.piiColumns.includes(col) ? (
662
+ <button
663
+ type="button"
664
+ className="ml-2 underline"
665
+ style={{ minHeight: 32 }}
666
+ onClick={() =>
667
+ onReveal(String(row.id ?? ""), col)
668
+ }
669
+ >
670
+ Reveal
671
+ </button>
672
+ ) : null}
673
+ </td>
674
+ ))}
675
+ <td className="border-b px-2 py-1">
676
+ <Button
677
+ type="button"
678
+ onClick={() => onDelete([String(row.id ?? "")])}
679
+ >
680
+ Delete
681
+ </Button>
682
+ </td>
683
+ </tr>
684
+ ))}
685
+ </tbody>
686
+ </table>
687
+ ) : null}
688
+ {browse?.keys ? (
689
+ <ul aria-label="Keys" className="text-sm">
690
+ {browse.keys.map((k) => (
691
+ <li key={k.key} className="flex min-h-8 items-center gap-2">
692
+ <span className="font-mono">{k.key}</span>
693
+ {k.value !== undefined ? (
694
+ <span className="text-[var(--oke-muted)]">
695
+ {JSON.stringify(k.value)}
696
+ </span>
697
+ ) : null}
698
+ {k.warnings?.map((w) => (
699
+ <span key={w.code} role="status" className="text-xs">
700
+ {w.message}
701
+ </span>
702
+ ))}
703
+ <Button type="button" onClick={() => onDelete([k.key])}>
704
+ Delete
705
+ </Button>
706
+ </li>
707
+ ))}
708
+ </ul>
709
+ ) : null}
710
+ {browse?.hits ? (
711
+ <ul aria-label="Similarity hits" className="text-sm">
712
+ {browse.hits.map((h) => (
713
+ <li key={h.id}>
714
+ {h.id} · score {h.score.toFixed(3)}
715
+ </li>
716
+ ))}
717
+ </ul>
718
+ ) : null}
719
+ {revealValue !== undefined ? (
720
+ <p role="status" className="text-sm">
721
+ Revealed: {String(revealValue)}
722
+ </p>
723
+ ) : null}
724
+ </section>
725
+ )}
726
+
727
+ <section aria-label="Direct edit" className="flex flex-col gap-2 border-t border-[var(--oke-line)] pt-4">
728
+ <h3 className="text-sm font-medium">Direct edit</h3>
729
+ <p className="text-sm text-[var(--oke-muted)]">
730
+ Not a flow execution. Before saving, preview names what will not
731
+ fire.
732
+ </p>
733
+ {willNot && !willNot.empty ? (
734
+ <ul className="text-sm">
735
+ {(willNotPreview ?? willNot.lines).map((line) => (
736
+ <li key={line}>{line}</li>
737
+ ))}
738
+ </ul>
739
+ ) : (
740
+ <p className="text-sm text-[var(--oke-muted)]">
741
+ No owning-flow emissions declared for this resource.
742
+ </p>
743
+ )}
744
+ <label className="flex flex-col gap-1 text-sm">
745
+ Patch (JSON)
746
+ <textarea
747
+ aria-label="Edit patch JSON"
748
+ className="min-h-20 border border-[var(--oke-line)] bg-transparent p-2 font-mono text-sm"
749
+ value={patchJson}
750
+ onChange={(e) => setPatchJson(e.target.value)}
751
+ />
752
+ </label>
753
+ <label className="flex flex-col gap-1 text-sm">
754
+ Type EDIT / DELETE / PURGE
755
+ <input
756
+ aria-label="Confirmation phrase"
757
+ className="min-h-8 border border-[var(--oke-line)] bg-transparent px-2"
758
+ value={typed}
759
+ onChange={(e) => setTyped(e.target.value)}
760
+ />
761
+ </label>
762
+ <label className="flex flex-col gap-1 text-sm">
763
+ Reason
764
+ <input
765
+ aria-label="Confirmation reason"
766
+ className="min-h-8 border border-[var(--oke-line)] bg-transparent px-2"
767
+ value={reason}
768
+ onChange={(e) => setReason(e.target.value)}
769
+ />
770
+ </label>
771
+ <div className="flex flex-wrap gap-2">
772
+ <Button type="button" onClick={onPreview}>
773
+ Preview
774
+ </Button>
775
+ <Button type="button" onClick={onCommit}>
776
+ Save edit
777
+ </Button>
778
+ </div>
779
+ {error ? (
780
+ <p role="alert" className="text-sm text-red-600">
781
+ {error}
782
+ </p>
783
+ ) : null}
784
+ </section>
785
+ </div>
786
+ );
787
+ }