okengine 0.2.5 → 0.2.8

package/src/mcp/server.ts

@@ -8,10 +8,7 @@
  * adapters receive structured operator ids.
  */
 
-import {
-  logDevRequest,
-  shouldLogDevRequests,
-} from "../runtime/dev-request-log.ts";
+import { logDevRequest, shouldLogDevRequests } from "../runtime/dev-request-log.ts";
 import {
   checkRequestSecurity,
   forbiddenResponse,
@@ -30,11 +27,7 @@ import {
   type JsonRpcId,
   type McpInitializeResult,
 } from "./protocol.ts";
-import {
-  authenticateMcpRequest,
-  extractBearer,
-  newMcpTransportSessionId,
-} from "./session.ts";
+import { authenticateMcpRequest, extractBearer, newMcpTransportSessionId } from "./session.ts";
 import { createToolRuntime, type McpContext } from "./tools.ts";
 
 /** Options for {@link createMcpServer} / {@link serveMcp}. */
@@ -118,15 +111,9 @@ export function createMcpServer(options: CreateMcpServerOptions): McpServer {
 
     let requester;
     try {
-      requester = await authenticateMcpRequest(
-        options.sessions,
-        options.secret,
-        bearer,
-        now,
-      );
+      requester = await authenticateMcpRequest(options.sessions, options.secret, bearer, now);
     } catch (err) {
-      const message =
-        err instanceof SessionError ? err.message : "authentication failed";
+      const message = err instanceof SessionError ? err.message : "authentication failed";
       return respond(
         jsonRpcHttp(
           rpcError(
@@ -148,22 +135,12 @@ export function createMcpServer(options: CreateMcpServerOptions): McpServer {
     try {
       body = await request.json();
     } catch {
-      return respond(
-        jsonRpcHttp(
-          rpcError(null, RpcErrorCode.parse, "invalid JSON body"),
-          400,
-        ),
-      );
+      return respond(jsonRpcHttp(rpcError(null, RpcErrorCode.parse, "invalid JSON body"), 400));
     }
 
     const parsed = parseJsonRpcRequest(body);
     if (!parsed.ok) {
-      return respond(
-        jsonRpcHttp(
-          rpcError(null, RpcErrorCode.invalidRequest, parsed.message),
-          400,
-        ),
-      );
+      return respond(jsonRpcHttp(rpcError(null, RpcErrorCode.invalidRequest, parsed.message), 400));
     }
 
     const { request: rpc } = parsed;
@@ -207,19 +184,10 @@ export function createMcpServer(options: CreateMcpServerOptions): McpServer {
       case "tools/call": {
         const call = parseToolsCallParams(rpc.params);
         if (!call.ok) {
-          return respond(
-            jsonRpcHttp(
-              rpcError(id, RpcErrorCode.invalidParams, call.message),
-              400,
-            ),
-          );
+          return respond(jsonRpcHttp(rpcError(id, RpcErrorCode.invalidParams, call.message), 400));
         }
         flowLabel = call.name;
-        const result = await tools.callTool(
-          requester,
-          call.name,
-          call.arguments,
-        );
+        const result = await tools.callTool(requester, call.name, call.arguments);
         if (!result.ok) {
           const code =
             result.code === "unauthorized"
@@ -256,11 +224,7 @@ export function createMcpServer(options: CreateMcpServerOptions): McpServer {
       default:
         return respond(
           jsonRpcHttp(
-            rpcError(
-              id,
-              RpcErrorCode.methodNotFound,
-              `method not found: ${rpc.method}`,
-            ),
+            rpcError(id, RpcErrorCode.methodNotFound, `method not found: ${rpc.method}`),
             404,
           ),
         );
@@ -285,9 +249,7 @@ export interface McpServerHandle extends ServerHandle {
  *
  * @param options - Server options
  */
-export async function serveMcp(
-  options: ServeMcpOptions,
-): Promise<McpServerHandle> {
+export async function serveMcp(options: ServeMcpOptions): Promise<McpServerHandle> {
   const hostname = options.hostname ?? "127.0.0.1";
   const port = options.port ?? MCP_PORT;
   const mcp = createMcpServer({ ...options, hostname });
@@ -311,10 +273,7 @@ export async function serveMcp(
   };
 }
 
-function jsonRpcHttp(
-  body: unknown,
-  status = 200,
-): Response {
+function jsonRpcHttp(body: unknown, status = 200): Response {
   return new Response(JSON.stringify(body), {
     status,
     headers: {

package/src/mcp/session.ts

@@ -21,10 +21,7 @@ import type { AuthPlane } from "../auth/planes.ts";
 export const MCP_AUDIENCE = "oke-mcp" as const;
 
 /** Other known audiences — rejected by MCP. */
-export const FOREIGN_AUDIENCES = [
-  "oke-console",
-  "oke-app",
-] as const;
+export const FOREIGN_AUDIENCES = ["oke-console", "oke-app"] as const;
 
 /** Verified MCP requester context for one request. */
 export interface McpRequester {
@@ -49,9 +46,7 @@ export interface MintMcpSessionOptions {
  *
  * @param options - Store, secret, principal
  */
-export async function mintMcpSession(
-  options: MintMcpSessionOptions,
-): Promise<IssuedSession> {
+export async function mintMcpSession(options: MintMcpSessionOptions): Promise<IssuedSession> {
   return issueSessionWithScopes(
     options.store,
     {
@@ -99,13 +94,8 @@ export async function authenticateMcpRequest(
 
   // Defence in depth: reject known foreign audiences even if verifyAccess
   // somehow ran without the audience option (should be unreachable).
-  if (
-    claims.aud !== undefined &&
-    (FOREIGN_AUDIENCES as readonly string[]).includes(claims.aud)
-  ) {
-    throw new SessionError(
-      `access token audience mismatch: expected ${MCP_AUDIENCE}`,
-    );
+  if (claims.aud !== undefined && (FOREIGN_AUDIENCES as readonly string[]).includes(claims.aud)) {
+    throw new SessionError(`access token audience mismatch: expected ${MCP_AUDIENCE}`);
   }
 
   return {

package/src/mcp/tools.ts

@@ -7,11 +7,7 @@
 
 import type { Manifest } from "../manifest/types.ts";
 import type { WideEvent } from "../runs/types.ts";
-import {
-  authorizeToolCall,
-  MCP_TOOL_POLICIES,
-  type McpToolPolicy,
-} from "./authorization.ts";
+import { authorizeToolCall, MCP_TOOL_POLICIES, type McpToolPolicy } from "./authorization.ts";
 import {
   createConfirmationGate,
   MCP_CONFIRM_PHRASE,
@@ -89,14 +85,10 @@ export function createToolRuntime(
       const preflight = authorizeToolCall(name, args, requester.scopes, {
         confirmed: policy?.mutability !== "write",
       });
-      if (
-        !preflight.ok &&
-        preflight.reason !== "confirmation-required"
-      ) {
+      if (!preflight.ok && preflight.reason !== "confirmation-required") {
         return {
           ok: false,
-          code:
-            preflight.reason === "unknown-tool" ? "not-found" : "forbidden",
+          code: preflight.reason === "unknown-tool" ? "not-found" : "forbidden",
           message: preflight.detail ?? preflight.reason,
           data: asData(
             {
@@ -111,10 +103,8 @@ export function createToolRuntime(
 
       // Write path: consume a fresh per-call confirmation (no session cache).
       if (policy?.mutability === "write") {
-        const token =
-          typeof args.confirmToken === "string" ? args.confirmToken : "";
-        const phrase =
-          typeof args.confirmation === "string" ? args.confirmation : "";
+        const token = typeof args.confirmToken === "string" ? args.confirmToken : "";
+        const phrase = typeof args.confirmation === "string" ? args.confirmation : "";
         const reason = typeof args.reason === "string" ? args.reason : "";
         const boundArgs = stripConfirmFields(args);
         const consumed = confirm.consume({
@@ -145,10 +135,7 @@ export function createToolRuntime(
 
       switch (name) {
         case "oke.manifest.get":
-          return okData(
-            freezeData({ manifest: ctx.getManifest() }),
-            "manifest",
-          );
+          return okData(freezeData({ manifest: ctx.getManifest() }), "manifest");
         case "oke.schema.get":
           return schemaGet(ctx, args);
         case "oke.effects.get":
@@ -175,16 +162,11 @@ export function createToolRuntime(
   };
 }
 
-function okData<T>(
-  content: T,
-  provenance: Parameters<typeof asData>[1],
-): ToolCallResult {
+function okData<T>(content: T, provenance: Parameters<typeof asData>[1]): ToolCallResult {
   return { ok: true, data: asData(content, provenance) };
 }
 
-function stripConfirmFields(
-  args: Record<string, unknown>,
-): Record<string, unknown> {
+function stripConfirmFields(args: Record<string, unknown>): Record<string, unknown> {
   const out: Record<string, unknown> = {};
   for (const [k, v] of Object.entries(args)) {
     if (k === "confirmation" || k === "confirmToken" || k === "reason") {
@@ -195,10 +177,7 @@ function stripConfirmFields(
   return out;
 }
 
-function schemaGet(
-  ctx: McpContext,
-  args: Record<string, unknown>,
-): ToolCallResult {
+function schemaGet(ctx: McpContext, args: Record<string, unknown>): ToolCallResult {
   const flowId = String(args.flowId ?? "");
   const manifest = ctx.getManifest();
   const flow = manifest?.flows?.[flowId];
@@ -221,10 +200,7 @@ function schemaGet(
   );
 }
 
-function effectsGet(
-  ctx: McpContext,
-  args: Record<string, unknown>,
-): ToolCallResult {
+function effectsGet(ctx: McpContext, args: Record<string, unknown>): ToolCallResult {
   const flowId = String(args.flowId ?? "");
   const manifest = ctx.getManifest();
   const flow = manifest?.flows?.[flowId];
@@ -236,34 +212,22 @@ function effectsGet(
       data: asData({ flowId }, "error"),
     };
   }
-  return okData(
-    freezeData({ flowId, effects: flow.effects ?? {} }),
-    "effects",
-  );
+  return okData(freezeData({ flowId, effects: flow.effects ?? {} }), "effects");
 }
 
-async function tracesList(
-  ctx: McpContext,
-  args: Record<string, unknown>,
-): Promise<ToolCallResult> {
+async function tracesList(ctx: McpContext, args: Record<string, unknown>): Promise<ToolCallResult> {
   const limit =
     typeof args.limit === "number" && Number.isFinite(args.limit)
       ? Math.min(200, Math.max(1, Math.floor(args.limit)))
       : 50;
-  const flowId =
-    typeof args.flowId === "string" && args.flowId.length > 0
-      ? args.flowId
-      : null;
+  const flowId = typeof args.flowId === "string" && args.flowId.length > 0 ? args.flowId : null;
   const all = await ctx.listRuns();
   const filtered = flowId ? all.filter((r) => r.flow === flowId) : all;
   const runs = filtered.slice(0, limit).map(projectRun);
   return okData(freezeData({ runs }), "trace");
 }
 
-async function tracesGet(
-  ctx: McpContext,
-  args: Record<string, unknown>,
-): Promise<ToolCallResult> {
+async function tracesGet(ctx: McpContext, args: Record<string, unknown>): Promise<ToolCallResult> {
   const runId = String(args.runId ?? "");
   const all = await ctx.listRuns();
   const run = all.find((r) => r.id === runId);

package/src/plugins/catalogue.test.ts

@@ -29,20 +29,16 @@ describe("CORE catalogue", () => {
   });
 
   test("tenancy from config or Manifest", () => {
-    expect(isTenancyConfigured(null, { tenancy: { isolation: "row" } })).toBe(
+    expect(isTenancyConfigured(null, { tenancy: { isolation: "row" } })).toBe(true);
+    expect(isTenancyConfigured({ oke: "1.0", app: "x", tenancy: { isolation: "row" } }, null)).toBe(
       true,
     );
-    expect(
-      isTenancyConfigured({ oke: "1.0", app: "x", tenancy: { isolation: "row" } }, null),
-    ).toBe(true);
     expect(isTenancyConfigured(null, null)).toBe(false);
   });
 
   test("privacy from privacy block or runs.redact", () => {
     expect(isPrivacyConfigured({ privacy: {} })).toBe(true);
-    expect(isPrivacyConfigured({ runs: { redact: { email: "7y" } } })).toBe(
-      true,
-    );
+    expect(isPrivacyConfigured({ runs: { redact: { email: "7y" } } })).toBe(true);
     expect(isPrivacyConfigured({})).toBe(false);
   });
 });

package/src/plugins/catalogue.ts

@@ -104,9 +104,7 @@ export function isTenancyConfigured(
  *
  * @param config - Config probe
  */
-export function isPrivacyConfigured(
-  config: PluginConfigProbe | null | undefined,
-): boolean {
+export function isPrivacyConfigured(config: PluginConfigProbe | null | undefined): boolean {
   if (config?.privacy != null) return true;
   if (config?.runs?.redact != null) return true;
   return false;

package/src/plugins/node-import-scan.ts

@@ -49,9 +49,7 @@ export function scanNodeImportsBypassingFx(
       out.push({
         source: file.path,
         specifier,
-        line: typeof node.start === "number"
-          ? lineAt(file.source, node.start)
-          : null,
+        line: typeof node.start === "number" ? lineAt(file.source, node.start) : null,
       });
     });
   }
@@ -77,8 +75,7 @@ function importSpecifier(node: AstNode): string | null {
     };
     const callee = call.callee;
     const isRequire =
-      callee?.type === "Identifier" &&
-      (callee as { name?: string }).name === "require";
+      callee?.type === "Identifier" && (callee as { name?: string }).name === "require";
     if (!isRequire) return null;
     const arg0 = call.arguments?.[0];
     if (arg0 && (arg0.type === "Literal" || arg0.type === "StringLiteral")) {

package/src/plugins/supply-chain.ts

@@ -248,9 +248,7 @@ export function projectSupplyChainSync(
   };
 }
 
-function projectLifecycle(
-  pkg: PackageJsonProbe | null,
-): LifecycleScriptsSignal {
+function projectLifecycle(pkg: PackageJsonProbe | null): LifecycleScriptsSignal {
   if (!pkg) {
     return {
       state: "unknown",
@@ -335,9 +333,7 @@ function projectNodeScan(
   };
 }
 
-async function projectProvenance(
-  options: ProjectSupplyChainOptions,
-): Promise<NpmProvenanceSignal> {
+async function projectProvenance(options: ProjectSupplyChainOptions): Promise<NpmProvenanceSignal> {
   if (options.provenance === "attested") {
     return { state: "pass", detail: "npm provenance attestation present" };
   }
@@ -385,10 +381,7 @@ function projectBootConflicts(
   };
 }
 
-async function readPackageJson(
-  cwd: string,
-  packageName: string,
-): Promise<PackageJsonProbe | null> {
+async function readPackageJson(cwd: string, packageName: string): Promise<PackageJsonProbe | null> {
   const path = resolve(cwd, "node_modules", ...packageName.split("/"), "package.json");
   try {
     const file = Bun.file(path);
@@ -422,9 +415,7 @@ async function fetchPublishedAt(
   }
 }
 
-async function fetchNpmProvenance(
-  packageName: string,
-): Promise<NpmProvenanceSignal> {
+async function fetchNpmProvenance(packageName: string): Promise<NpmProvenanceSignal> {
   try {
     const res = await fetch(`https://registry.npmjs.org/${packageName}`, {
       headers: { Accept: "application/json" },
@@ -437,10 +428,7 @@ async function fetchNpmProvenance(
     }
     const body = (await res.json()) as {
       "dist-tags"?: { latest?: string };
-      versions?: Record<
-        string,
-        { dist?: { attestations?: unknown; signatures?: unknown } }
-      >;
+      versions?: Record<string, { dist?: { attestations?: unknown; signatures?: unknown } }>;
     };
     const latest = body["dist-tags"]?.latest;
     const dist = latest ? body.versions?.[latest]?.dist : undefined;

package/src/release/exports.ts

@@ -77,9 +77,7 @@ export function isMeasurableDriverFile(name: string): boolean {
  *
  * @param driversDir - Absolute drivers directory
  */
-export async function listDriverModules(
-  driversDir = DRIVERS_DIR,
-): Promise<readonly string[]> {
+export async function listDriverModules(driversDir = DRIVERS_DIR): Promise<readonly string[]> {
   const entries = await readdir(driversDir);
   return entries.filter(isMeasurableDriverFile).sort((a, b) => a.localeCompare(b));
 }
@@ -96,8 +94,7 @@ export async function resolveExportBudgetTargets(options?: {
 }): Promise<readonly ExportBudgetTarget[]> {
   const root = options?.root ?? ROOT;
   const pkg =
-    options?.pkg ??
-    ((await Bun.file(join(root, "package.json")).json()) as PackageExports);
+    options?.pkg ?? ((await Bun.file(join(root, "package.json")).json()) as PackageExports);
   const exportsMap = pkg.exports ?? {};
   const driversDir = options?.driversDir ?? join(root, "src/drivers");
 
@@ -106,9 +103,7 @@ export async function resolveExportBudgetTargets(options?: {
   for (const [subpath, entryRel] of Object.entries(exportsMap)) {
     if (subpath.endsWith("/*")) {
       if (subpath !== "./drivers/*") {
-        throw new Error(
-          `unsupported export glob ${subpath}: only ./drivers/* is expanded`,
-        );
+        throw new Error(`unsupported export glob ${subpath}: only ./drivers/* is expanded`);
       }
       const modules = await listDriverModules(driversDir);
       for (const file of modules) {

package/src/release/measure.exports.test.ts

@@ -24,9 +24,7 @@ describe("export gzip budgets", () => {
   });
 
   test("exportRegressionLimitBytes uses max(floor, 2% of previous)", () => {
-    expect(exportRegressionLimitBytes(1000)).toBe(
-      1000 + EXPORT_REGRESSION_TOLERANCE_FLOOR_BYTES,
-    );
+    expect(exportRegressionLimitBytes(1000)).toBe(1000 + EXPORT_REGRESSION_TOLERANCE_FLOOR_BYTES);
     const large = 100_000;
     expect(exportRegressionLimitBytes(large)).toBe(
       large + Math.ceil(large * EXPORT_REGRESSION_TOLERANCE_RATIO),

package/src/release/measure.ts

@@ -6,10 +6,7 @@ import { mkdtemp, readdir, rm } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join, resolve } from "node:path";
 import { createRouter } from "../kernel/router.ts";
-import {
-  type BudgetGroup,
-  resolveExportBudgetTargets,
-} from "./exports.ts";
+import { type BudgetGroup, resolveExportBudgetTargets } from "./exports.ts";
 import {
   CLIENT_BUDGET_BYTES,
   COLD_START_BUDGET_MS,
@@ -93,9 +90,7 @@ async function gzipBuildOutputs(
   label: string,
 ): Promise<number> {
   if (!result.success) {
-    throw new Error(
-      `${label} build failed:\n${result.logs.map(String).join("\n")}`,
-    );
+    throw new Error(`${label} build failed:\n${result.logs.map(String).join("\n")}`);
   }
   let total = 0;
   for (const artifact of result.outputs) {
@@ -147,9 +142,7 @@ export async function measureKernelEdgeGzipBytes(): Promise<number> {
     external: [...BUILD_EXTERNALS],
   });
   if (!result.success) {
-    throw new Error(
-      `kernel edge build failed:\n${result.logs.map(String).join("\n")}`,
-    );
+    throw new Error(`kernel edge build failed:\n${result.logs.map(String).join("\n")}`);
   }
   const artifact = result.outputs[0];
   if (!artifact) throw new Error("kernel edge build produced no output");
@@ -169,9 +162,7 @@ export async function measureClientGzipBytes(): Promise<number> {
     format: "esm",
   });
   if (!result.success) {
-    throw new Error(
-      `client build failed:\n${result.logs.map(String).join("\n")}`,
-    );
+    throw new Error(`client build failed:\n${result.logs.map(String).join("\n")}`);
   }
   const artifact = result.outputs[0];
   if (!artifact) throw new Error("client build produced no output");
@@ -196,11 +187,7 @@ export async function measureExportGzipBytes(entry: string): Promise<number> {
       `export function __okeExportBudgetAnchor(){return mod;}\n`,
   );
   try {
-    return await measureEntryGzipBytes(
-      anchor,
-      `export ${entry}`,
-      EXPORT_BUILD_EXTERNALS,
-    );
+    return await measureEntryGzipBytes(anchor, `export ${entry}`, EXPORT_BUILD_EXTERNALS);
   } finally {
     await rm(dir, { recursive: true, force: true });
   }
@@ -418,12 +405,11 @@ export async function measureAllBudgets(): Promise<BudgetsSnapshot> {
   // Cold start alone first — parallel gzip work contends for CPU on CI and
   // falsely inflates the wall-clock probe.
   const coldStartMedianMs = await measureColdStartMedianMs();
-  const [kernelEdgeGzipBytes, clientGzipBytes, consoleInitialGzipBytes] =
-    await Promise.all([
-      measureKernelEdgeGzipBytes(),
-      measureClientGzipBytes(),
-      measureConsoleInitialGzipBytes(),
-    ]);
+  const [kernelEdgeGzipBytes, clientGzipBytes, consoleInitialGzipBytes] = await Promise.all([
+    measureKernelEdgeGzipBytes(),
+    measureClientGzipBytes(),
+    measureConsoleInitialGzipBytes(),
+  ]);
   const routingP99Ms = measureRoutingP99Ms();
 
   const budgets: BudgetSample[] = [
@@ -482,15 +468,7 @@ export async function measureAllBudgets(): Promise<BudgetsSnapshot> {
     })),
   );
   for (const { target, bytes } of exportSizes) {
-    budgets.push(
-      regressionSample(
-        target.id,
-        target.label,
-        target.group,
-        bytes,
-        previous,
-      ),
-    );
+    budgets.push(regressionSample(target.id, target.label, target.group, bytes, previous));
   }
 
   return {
@@ -506,9 +484,7 @@ export async function measureAllBudgets(): Promise<BudgetsSnapshot> {
  * @param snapshot - Measured budgets
  */
 export function formatBudgetsReport(snapshot: BudgetsSnapshot): string {
-  const lines = [
-    `okengine budgets v${snapshot.version} @ ${snapshot.measuredAt}`,
-  ];
+  const lines = [`okengine budgets v${snapshot.version} @ ${snapshot.measuredAt}`];
   const order: readonly BudgetGroup[] = ["core", "exports", "drivers"];
   for (const group of order) {
     const rows = snapshot.budgets.filter((b) => b.group === group);
@@ -579,8 +555,7 @@ function sample(
   gate: BudgetGate,
   group: BudgetGroup,
 ): BudgetSample {
-  const rounded =
-    unit === "bytes" ? Math.round(value) : Math.round(value * 1000) / 1000;
+  const rounded = unit === "bytes" ? Math.round(value) : Math.round(value * 1000) / 1000;
   return {
     id,
     label,
@@ -652,8 +627,7 @@ function formatValue(value: number, unit: BudgetSample["unit"]): string {
  */
 function initialAssetHrefs(html: string): string[] {
   const hrefs: string[] = [];
-  const re =
-    /(?:src|href)=["'](\/?assets\/[^"']+\.(?:js|css))["']/g;
+  const re = /(?:src|href)=["'](\/?assets\/[^"']+\.(?:js|css))["']/g;
   for (const match of html.matchAll(re)) {
     const href = match[1];
     if (href) hrefs.push(href.replace(/^\//, ""));
@@ -671,9 +645,7 @@ async function gzipFile(path: string): Promise<number> {
  *
  * @param dir - Vite outDir
  */
-export async function consoleBundleBreakdown(
-  dir: string,
-): Promise<ConsoleBundleBreakdown> {
+export async function consoleBundleBreakdown(dir: string): Promise<ConsoleBundleBreakdown> {
   const assetsDir = join(dir, "assets");
   const indexPath = join(dir, "index.html");
   const indexFile = Bun.file(indexPath);

package/src/runs/bench.test.ts

@@ -38,9 +38,7 @@ describe("runs 1M-row query benchmark", () => {
         ) TO '${duckPath(parquetPath)}' (FORMAT PARQUET, COMPRESSION ZSTD)
       `);
       const genMs = performance.now() - t0;
-      console.log(
-        `runs-bench generate rows=${ROW_COUNT} parquet_ms=${genMs.toFixed(1)}`,
-      );
+      console.log(`runs-bench generate rows=${ROW_COUNT} parquet_ms=${genMs.toFixed(1)}`);
       expect(await Bun.file(parquetPath).exists()).toBe(true);
     } finally {
       session.close();

package/src/runs/collect.ts

@@ -11,10 +11,7 @@ import type { AnyFlowDef } from "../kernel/flow.ts";
 import type { Fx } from "../kernel/fx.ts";
 import type { Trigger } from "../kernel/triggers.ts";
 import type { FlowPlane } from "../manifest/types.ts";
-import {
-  cacheDimensionOf,
-  type RunTelemetry,
-} from "../kernel/run-telemetry.ts";
+import { cacheDimensionOf, type RunTelemetry } from "../kernel/run-telemetry.ts";
 import type { RunError, WideEvent } from "./types.ts";
 
 /** Inputs for {@link collectWideEvent}. */
@@ -57,18 +54,12 @@ export interface CollectWideEventInput {
  */
 export function collectWideEvent(input: CollectWideEventInput): WideEvent {
   const plane: FlowPlane = input.flow.plane ?? "user";
-  const principal =
-    plane === "operator"
-      ? input.fx.operator.id
-      : input.fx.auth.userId;
+  const principal = plane === "operator" ? input.fx.operator.id : input.fx.auth.userId;
   const tenant = input.fx.tenant.id;
-  const subjectId =
-    input.telemetry.subjectId ?? principal ?? tenant ?? null;
+  const subjectId = input.telemetry.subjectId ?? principal ?? tenant ?? null;
   const cache = cacheDimensionOf(input.telemetry);
   const gates =
-    input.telemetry.gates.length > 0
-      ? [...input.telemetry.gates]
-      : httpGates(input.trigger);
+    input.telemetry.gates.length > 0 ? [...input.telemetry.gates] : httpGates(input.trigger);
 
   const error = failureToRunError(input.failure);
   const durationMs = Math.max(0, input.endedAt - input.startedAt);
@@ -103,9 +94,7 @@ export function collectWideEvent(input: CollectWideEventInput): WideEvent {
     subjectId,
     gates,
     cache,
-    ...(input.telemetry.replica !== undefined
-      ? { replica: input.telemetry.replica }
-      : {}),
+    ...(input.telemetry.replica !== undefined ? { replica: input.telemetry.replica } : {}),
     ...(input.telemetry.replicaLagMs !== undefined
       ? { replicaLagMs: input.telemetry.replicaLagMs }
       : {}),
@@ -113,9 +102,7 @@ export function collectWideEvent(input: CollectWideEventInput): WideEvent {
     ...(input.telemetry.promptVersion !== undefined
       ? { promptVersion: input.telemetry.promptVersion }
       : {}),
-    ...(input.buildVersion !== undefined
-      ? { buildVersion: input.buildVersion }
-      : {}),
+    ...(input.buildVersion !== undefined ? { buildVersion: input.buildVersion } : {}),
     error,
     effects: [...input.ledger.entries],
     logs: [...input.telemetry.logs],
@@ -129,14 +116,10 @@ export function collectWideEvent(input: CollectWideEventInput): WideEvent {
 
 function httpGates(trigger: Trigger): string[] {
   if (trigger.kind !== "http") return [];
-  return trigger.gates.map((g) =>
-    typeof g === "string" ? g : g.name,
-  );
+  return trigger.gates.map((g) => (typeof g === "string" ? g : g.name));
 }
 
-function failureToRunError(
-  failure: FlowFailure | null | undefined,
-): RunError | null {
+function failureToRunError(failure: FlowFailure | null | undefined): RunError | null {
   if (!failure) return null;
   const code = failure.error?.code ?? "failure";
   const message = failure.error?.message;