okengine 0.11.2 → 0.12.0

package/src/console/ui/traces/sampling.ts

@@ -1,63 +0,0 @@
-/**
- * Honest sampling labels + full-trace escape hatch (console §9.3).
- *
- * Sampling is stated in the list (10% + all errors) with a
- * "trace this flow fully for 10 minutes" override.
- */
-
-/** Default sampling policy shown in the list header. */
-export const DEFAULT_SAMPLING_LABEL = "10% + all errors";
-
-/** Full-trace boost window (10 minutes). */
-export const FULL_TRACE_BOOST_MS = 10 * 60 * 1000;
-
-/** Active boost for one flow. */
-export interface FullTraceBoost {
-  /** Flow name. */
-  readonly flow: string;
-  /** Epoch-ms when the boost expires. */
-  readonly until: number;
-}
-
-/**
- * Sampling line for the list header, including active boosts.
- *
- * @param boosts - Active boosts
- * @param now - Clock
- */
-export function samplingLabel(boosts: readonly FullTraceBoost[], now: number = Date.now()): string {
-  const live = boosts.filter((b) => b.until > now);
-  if (live.length === 0) return DEFAULT_SAMPLING_LABEL;
-  const flows = live.map((b) => b.flow).join(", ");
-  return `${DEFAULT_SAMPLING_LABEL} · full: ${flows}`;
-}
-
-/**
- * Create / refresh a 10-minute full-trace boost for a flow.
- *
- * @param boosts - Existing boosts
- * @param flow - Flow to boost
- * @param now - Clock
- */
-export function boostFlowFully(
-  boosts: readonly FullTraceBoost[],
-  flow: string,
-  now: number = Date.now(),
-): FullTraceBoost[] {
-  const until = now + FULL_TRACE_BOOST_MS;
-  const rest = boosts.filter((b) => b.flow !== flow && b.until > now);
-  return [...rest, { flow, until }];
-}
-
-/**
- * Prune expired boosts.
- *
- * @param boosts - Boosts
- * @param now - Clock
- */
-export function pruneBoosts(
-  boosts: readonly FullTraceBoost[],
-  now: number = Date.now(),
-): FullTraceBoost[] {
-  return boosts.filter((b) => b.until > now);
-}

package/src/console/ui/traces/search.ts

@@ -1,135 +0,0 @@
-/**
- * Typed search params for the Traces panel (console §7 · §9.3).
- *
- * Pasted links reproduce the exact view — open trace, focus span, effect
- * filter, expanded folds.
- */
-
-import { z } from "zod";
-import { parseEffectFilter, serializeEffectFilter, type EffectFilter } from "./filter.ts";
-
-/** Zod schema for Traces URL search params. */
-export const TracesSearchSchema = z.object({
-  /** Open root / connected-component id (usually the root span id). */
-  trace: z.string().optional(),
-  /** Focused span within the open trace. */
-  span: z.string().optional(),
-  /** Effect filter compact form (`wrote:sql:bookings`, `cost:0.05`, …). */
-  effect: z.string().optional(),
-  /** Free-text filter (dims, never hides). */
-  q: z.string().optional(),
-  /** Comma-separated expanded fold ids. */
-  folds: z.string().optional(),
-  /** Flow selected for the full-trace boost control (UI only). */
-  boost: z.string().optional(),
-});
-
-/** Parsed, typed Traces search state. */
-export type TracesSearch = z.infer<typeof TracesSearchSchema>;
-
-/**
- * Parse unknown search params into a typed {@link TracesSearch}.
- *
- * @param raw - Router search object
- */
-export function parseTracesSearch(raw: unknown): TracesSearch {
-  const result = TracesSearchSchema.safeParse(raw ?? {});
-  if (result.success) return result.data;
-  return TracesSearchSchema.parse({});
-}
-
-/**
- * Serialise typed search into a plain object suitable for TanStack Router.
- *
- * @param search - Typed search
- */
-export function serializeTracesSearch(search: TracesSearch): Record<string, string> {
-  const out: Record<string, string> = {};
-  if (search.trace) out.trace = search.trace;
-  if (search.span) out.span = search.span;
-  if (search.effect) out.effect = search.effect;
-  if (search.q) out.q = search.q;
-  if (search.folds) out.folds = search.folds;
-  if (search.boost) out.boost = search.boost;
-  return out;
-}
-
-/**
- * Effect filter derived from search.
- *
- * @param search - Typed search
- */
-export function effectFilterOf(search: TracesSearch): EffectFilter | null {
-  return parseEffectFilter(search.effect);
-}
-
-/**
- * Expanded fold ids from search.
- *
- * @param search - Typed search
- */
-export function expandedFoldsOf(search: TracesSearch): Set<string> {
-  if (!search.folds) return new Set();
-  return new Set(
-    search.folds
-      .split(",")
-      .map((s) => s.trim())
-      .filter(Boolean),
-  );
-}
-
-/**
- * Open a trace (root id) and optional focus span.
- *
- * @param prev - Current search
- * @param rootId - Root span id
- * @param spanId - Optional focus span
- */
-export function openTrace(prev: TracesSearch, rootId: string, spanId?: string): TracesSearch {
-  return {
-    ...prev,
-    trace: rootId,
-    span: spanId,
-  };
-}
-
-/**
- * Close the detail view; stay on the Traces panel.
- *
- * @param prev - Current search
- */
-export function closeTrace(prev: TracesSearch): TracesSearch {
-  return {
-    ...prev,
-    trace: undefined,
-    span: undefined,
-    folds: undefined,
-  };
-}
-
-/**
- * Toggle a fold's expanded state in the URL.
- *
- * @param prev - Current search
- * @param foldId - Fold segment id
- */
-export function toggleFold(prev: TracesSearch, foldId: string): TracesSearch {
-  const set = expandedFoldsOf(prev);
-  if (set.has(foldId)) set.delete(foldId);
-  else set.add(foldId);
-  const folds = [...set].join(",");
-  return { ...prev, folds: folds || undefined };
-}
-
-/**
- * Set the effect filter (or clear with null).
- *
- * @param prev - Current search
- * @param filter - Effect filter
- */
-export function setEffectFilter(prev: TracesSearch, filter: EffectFilter | null): TracesSearch {
-  return {
-    ...prev,
-    effect: serializeEffectFilter(filter),
-  };
-}

package/src/console/ui/traces/tier.ts

@@ -1,70 +0,0 @@
-/**
- * Map span effects onto the Flows effect-tier vocabulary (console §9.3).
- */
-
-import type { EffectKind } from "../../../kernel/effects.ts";
-import type { UiEffectTier } from "../flows/tiers.ts";
-import type { SpanTier, TraceEffect, TraceSpan } from "./types.ts";
-
-/**
- * UI tier for a single effect kind.
- *
- * @param kind - Kernel effect kind
- */
-export function tierOfKind(kind: EffectKind): UiEffectTier {
-  switch (kind) {
-    case "read":
-      return "reads";
-    case "write":
-      return "writes";
-    case "emit":
-      return "emits";
-    case "send":
-    case "ask":
-      return "external";
-    case "secret":
-      return "capabilities";
-    case "call":
-      return "reads";
-  }
-}
-
-/**
- * Highest (most severe) effect tier on a span.
- *
- * @param effects - Span effects
- */
-export function peakSpanTier(effects: readonly TraceEffect[]): SpanTier {
-  let peak: SpanTier = "none";
-  for (const e of effects) {
-    const t = tierOfKind(e.kind);
-    if (rank(t) > rank(peak)) peak = t;
-  }
-  return peak;
-}
-
-/**
- * Whether any span in the set has an irreversible (external) effect.
- *
- * @param spans - Spans in the trace
- */
-export function traceHasExternal(spans: readonly TraceSpan[]): boolean {
-  return spans.some((s) => peakSpanTier(s.effects) === "external");
-}
-
-function rank(tier: SpanTier): number {
-  switch (tier) {
-    case "external":
-      return 5;
-    case "capabilities":
-      return 4;
-    case "emits":
-      return 3;
-    case "writes":
-      return 2;
-    case "reads":
-      return 1;
-    case "none":
-      return 0;
-  }
-}

package/src/console/ui/traces/types.ts

@@ -1,125 +0,0 @@
-/**
- * Trace panel domain types (console §9.3 · §9.11).
- *
- * One flow execution = one wide event = one span. A trace is a causal chain
- * of runs joined across async boundaries via {@link TraceSpan.parentId}.
- */
-
-import type { EffectKind, ReversibilityTier } from "../../../kernel/effects.ts";
-import type { UiEffectTier } from "../flows/tiers.ts";
-
-/** One recorded effect on a span (subset of the ledger entry). */
-export interface TraceEffect {
-  /** Effect kind. */
-  readonly kind: EffectKind;
-  /** Resource / signal / template / prompt / secret / flow ref. */
-  readonly resource: string;
-  /** Epoch-ms when the call started. */
-  readonly timestamp: number;
-  /** Wall duration in milliseconds. */
-  readonly duration: number;
-  /** Reversibility tier. */
-  readonly reversibility: ReversibilityTier;
-}
-
-/** Why a run appears in the sampled list (console §9.3). */
-export type SampleReason = "full" | "error" | "sample" | "boost";
-
-/**
- * One span in a trace — the UI projection of a wide event.
- */
-export interface TraceSpan {
-  /** Run id (= span id). */
-  readonly id: string;
-  /** Parent run id when caused by another execution. */
-  readonly parentId?: string;
-  /** Flow name. */
-  readonly flow: string;
-  /** Optional unit scope. */
-  readonly unit?: string;
-  /** Trigger kind. */
-  readonly trigger: string;
-  /** Epoch-ms start. */
-  readonly startedAt: number;
-  /** Epoch-ms end. */
-  readonly endedAt: number;
-  /** Wall duration in milliseconds. */
-  readonly durationMs: number;
-  /** Typed error code when the flow failed. */
-  readonly errorCode?: string | null;
-  /** Effect ledger snapshot. */
-  readonly effects: readonly TraceEffect[];
-  /** AI cost accrued during the run. */
-  readonly cost?: number;
-  /** Sampling classification for honest list labelling. */
-  readonly sampled: SampleReason;
-}
-
-/** Peak UI effect tier for a span (drives waterfall colour). */
-export type SpanTier = UiEffectTier | "none";
-
-/** One bar in a list-row mini-waterfall. */
-export interface MiniBar {
-  /** Relative start 0..1. */
-  readonly start: number;
-  /** Relative width 0..1. */
-  readonly width: number;
-  /** Effect tier colour key. */
-  readonly tier: SpanTier;
-  /** True when this bar is the failing effect. */
-  readonly failed?: boolean;
-}
-
-/** Filter by declared effect (console §9.3 — the filter no one else can offer). */
-export type EffectFilter =
-  | { readonly kind: "wrote"; readonly resource: string }
-  | { readonly kind: "asked" }
-  | { readonly kind: "sent"; readonly resource?: string }
-  | { readonly kind: "secret"; readonly resource?: string }
-  | { readonly kind: "cost"; readonly min: number };
-
-/** Work interval on a absolute timeline (before folding). */
-export interface WorkInterval {
-  /** Stable id for the segment. */
-  readonly id: string;
-  /** Display label. */
-  readonly label: string;
-  /** Absolute start (ms, same epoch as spans). */
-  readonly startMs: number;
-  /** Absolute end. */
-  readonly endMs: number;
-  /** Peak effect tier. */
-  readonly tier: SpanTier;
-  /** Span this interval belongs to. */
-  readonly spanId: string;
-  /** True when this interval carries the typed failure. */
-  readonly failed?: boolean;
-}
-
-/** Folded-time timeline segment after collapse. */
-export type TimelineSegment =
-  | {
-      readonly kind: "work";
-      readonly id: string;
-      readonly label: string;
-      readonly startMs: number;
-      readonly endMs: number;
-      readonly durationMs: number;
-      readonly tier: SpanTier;
-      readonly spanId: string;
-      readonly critical: boolean;
-      readonly failed: boolean;
-      /** Display width weight (proportional to real work). */
-      readonly displayMs: number;
-    }
-  | {
-      readonly kind: "fold";
-      readonly id: string;
-      readonly startMs: number;
-      readonly endMs: number;
-      readonly durationMs: number;
-      readonly label: string;
-      readonly expanded: boolean;
-      /** Collapsed folds use a fixed weight; expanded use full duration. */
-      readonly displayMs: number;
-    };

package/src/console/ui/tsconfig.json

@@ -1,20 +0,0 @@
-{
-  "compilerOptions": {
-    "lib": ["ESNext", "DOM", "DOM.Iterable"],
-    "target": "ESNext",
-    "module": "ESNext",
-    "moduleDetection": "force",
-    "jsx": "react-jsx",
-    "types": ["vite/client", "bun"],
-    "moduleResolution": "bundler",
-    "allowImportingTsExtensions": true,
-    "verbatimModuleSyntax": true,
-    "noEmit": true,
-    "strict": true,
-    "skipLibCheck": true,
-    "noUncheckedIndexedAccess": true,
-    "noUnusedLocals": true,
-    "noUnusedParameters": true
-  },
-  "include": ["./**/*.ts", "./**/*.tsx"]
-}

package/src/console/ui/vault/VaultA11yView.tsx

@@ -1,197 +0,0 @@
-/**
- * Static Vault markup for the axe gate — same landmarks as the live panel.
- */
-
-import { formatVaultBackend } from "./backend.ts";
-import { formatBlastRadius } from "./blast-radius.ts";
-import { VAULT_LIST_FIXTURE } from "./fixture.ts";
-import { groupByKind } from "./group.ts";
-
-/** Props for {@link VaultA11yView}. */
-export interface VaultA11yViewProps {
-  /** Optional contract name to open. */
-  readonly openName?: string;
-}
-
-/**
- * Accessible Vault list + detail for CI.
- *
- * @param props - Open contract
- */
-export function VaultA11yView(props: VaultA11yViewProps) {
-  const groups = groupByKind(VAULT_LIST_FIXTURE.secrets);
-  const openName = props.openName ?? "STRIPE_KEY";
-  const open = VAULT_LIST_FIXTURE.secrets.find((s) => s.name === openName);
-  const blast = open ? formatBlastRadius(open.blastRadius) : null;
-  const env = VAULT_LIST_FIXTURE.env;
-  const backend = VAULT_LIST_FIXTURE.backend;
-  const backendCard = formatVaultBackend(backend);
-
-  return (
-    <div className="vault-a11y">
-      <a href="#vault-main">Skip to main content</a>
-      <header>
-        <h1>Vault</h1>
-        <p>Contracts, fingerprints, resolution — never secret values</p>
-        <p role="status">Environment {env}</p>
-        <label>
-          Filter vault
-          <input aria-label="Filter vault" defaultValue="" />
-        </label>
-      </header>
-      <main id="vault-main">
-        {backendCard ? (
-          <section aria-label="Vault backend">
-            <h2>{backendCard.title}</h2>
-            <p>{backendCard.description}</p>
-            <p>
-              {backendCard.badges.map((badge) => (
-                <span key={badge.id} role={badge.tone === "warn" ? "alert" : "status"}>
-                  {badge.label}{" "}
-                </span>
-              ))}
-            </p>
-            <dl>
-              {backendCard.facts.map((fact) => (
-                <div key={fact.label}>
-                  <dt>{fact.label}</dt>
-                  <dd>{fact.value}</dd>
-                </div>
-              ))}
-            </dl>
-            {backendCard.hint ? <p role="status">{backendCard.hint}</p> : null}
-            {backend?.builtin ? (
-              <p>
-                Audit trail is hash-chained in the backend — read it with `oke vault audit`, verify
-                it with `oke vault audit verify`.
-              </p>
-            ) : null}
-          </section>
-        ) : null}
-
-        <section aria-label="Vault list">
-          <h2>Contracts</h2>
-          {groups.map((group) => (
-            <section key={group.kind} aria-label={group.label}>
-              <h3>{group.label}</h3>
-              <ul>
-                {group.secrets.map((s) => (
-                  <li key={s.name}>
-                    <button
-                      type="button"
-                      aria-pressed={s.name === openName}
-                      style={{ minHeight: 32, width: "100%" }}
-                    >
-                      <span>{s.name}</span>
-                      {s.sensitive && s.fingerprint ? <span> {s.fingerprint}</span> : null}
-                      {!s.sensitive && s.cleartext ? <span> {s.cleartext}</span> : null}
-                      {s.blastRadius.count > 0 ? (
-                        <span role="status"> blast {s.blastRadius.count}</span>
-                      ) : null}
-                      {s.sharedFingerprintEnvs.length > 0 ? (
-                        <span role="status"> shared fingerprint</span>
-                      ) : null}
-                    </button>
-                  </li>
-                ))}
-              </ul>
-            </section>
-          ))}
-        </section>
-
-        {open ? (
-          <section aria-label="Vault detail" aria-live="polite">
-            <h2>{open.name}</h2>
-            {open.description ? <p>{open.description}</p> : null}
-            <p role="status">
-              {open.sensitive
-                ? `Fingerprint (${env}): ${open.fingerprint ?? "unset"}`
-                : `Value: ${open.cleartext ?? "unset"}`}
-            </p>
-
-            <section aria-label="Fingerprints by environment">
-              <h3>Fingerprints</h3>
-              {open.sensitive ? (
-                <ul>
-                  {Object.entries(open.fingerprints).map(([e, fp]) => (
-                    <li key={e}>
-                      {e}: {fp}
-                      {open.sharedFingerprintEnvs.includes(e) ? (
-                        <span role="status"> (matches {env})</span>
-                      ) : null}
-                    </li>
-                  ))}
-                </ul>
-              ) : (
-                <p>Config is shown in the clear — not fingerprinted.</p>
-              )}
-            </section>
-
-            <section aria-label="Resolution chain">
-              <h3>Resolution chain</h3>
-              <ol>
-                {open.resolution.map((step) => (
-                  <li key={step.source}>
-                    {step.source}
-                    {step.won ? " — won" : step.present ? " — present (lost)" : " — absent"}
-                  </li>
-                ))}
-              </ol>
-              <p role="status">Winner: {open.winner ?? "none"}</p>
-            </section>
-
-            <section aria-label="Readers">
-              <h3>Readers</h3>
-              <p>
-                Flows that declare fx.vault.get({open.name}): {open.readers.join(", ") || "none"}
-              </p>
-            </section>
-
-            <section aria-label="Rotation blast radius">
-              <h3>Rotation blast radius</h3>
-              {blast ? (
-                <>
-                  <p role={blast.warn ? "alert" : "status"}>{blast.summary}</p>
-                  {blast.detail ? <p>{blast.detail}</p> : null}
-                </>
-              ) : null}
-            </section>
-
-            <section aria-label="Last read">
-              <h3>Last read</h3>
-              <p role="status">
-                {open.lastReadAt != null
-                  ? new Date(open.lastReadAt).toISOString()
-                  : "Never read — possible dead secret"}
-              </p>
-            </section>
-
-            <section aria-label="Set or rotate">
-              <h3>Set / rotate</h3>
-              <p>Write-only — values are never revealed after submit.</p>
-              <label>
-                New value
-                <input
-                  aria-label="New vault value"
-                  type="password"
-                  autoComplete="off"
-                  defaultValue=""
-                />
-              </label>
-              <label>
-                Confirmation
-                <input aria-label="Confirmation phrase" defaultValue="" />
-              </label>
-              <label>
-                Reason
-                <input aria-label="Reason for vault write" defaultValue="" />
-              </label>
-              <button type="button">Set</button>
-              <button type="button">Rotate</button>
-            </section>
-          </section>
-        ) : null}
-      </main>
-    </div>
-  );
-}