okengine 0.2.6 → 0.3.2

package/src/console/server/plugins.ts

@@ -6,26 +6,11 @@
  * Never installs — hands a `bun add …` command for community packages.
  */
 
-import {
-  allHookCostSummaries,
-  type HookCostSummary,
-} from "../../kernel/hook-timing.ts";
+import { allHookCostSummaries, type HookCostSummary } from "../../kernel/hook-timing.ts";
 import type { PluginRegistry } from "../../kernel/registry.ts";
-import type {
-  Manifest,
-  ManifestChange,
-  Plugin,
-  PluginOrigin,
-} from "../../manifest/types.ts";
-import {
-  CORE_PLUGINS,
-  isCorePluginOn,
-  type PluginConfigProbe,
-} from "../../plugins/catalogue.ts";
-import type {
-  PackageJsonProbe,
-  SupplyChainSignals,
-} from "../../plugins/supply-chain.ts";
+import type { Manifest, ManifestChange, Plugin, PluginOrigin } from "../../manifest/types.ts";
+import { CORE_PLUGINS, isCorePluginOn, type PluginConfigProbe } from "../../plugins/catalogue.ts";
+import type { PackageJsonProbe, SupplyChainSignals } from "../../plugins/supply-chain.ts";
 import type { ScanSourceFile } from "../../plugins/node-import-scan.ts";
 
 /** Plugin on/off — derived, never a config flag. */
@@ -93,21 +78,15 @@ export interface ProjectPluginsOptions {
   readonly cwd: string;
   readonly now: () => number;
   /** Injected capability-diff changes keyed by plugin id (tests). */
-  readonly capabilityDiffByPlugin?: Readonly<
-    Record<string, readonly ManifestChange[]>
-  >;
+  readonly capabilityDiffByPlugin?: Readonly<Record<string, readonly ManifestChange[]>>;
   /** When true, run doctor merge-base diff (default true). */
   readonly resolveCapabilityDiff?: boolean;
   /** Injected hook cost summaries (tests). */
   readonly hookCosts?: Readonly<Record<string, HookCostSummary>>;
   /** Per-plugin sources for oxc scan. */
-  readonly sourcesByPlugin?: Readonly<
-    Record<string, readonly ScanSourceFile[]>
-  >;
+  readonly sourcesByPlugin?: Readonly<Record<string, readonly ScanSourceFile[]>>;
   /** Per-plugin package.json injections (tests). */
-  readonly packageJsonByPlugin?: Readonly<
-    Record<string, PackageJsonProbe | null>
-  >;
+  readonly packageJsonByPlugin?: Readonly<Record<string, PackageJsonProbe | null>>;
   /** Per-plugin boot conflicts. */
   readonly bootConflictsByPlugin?: Readonly<Record<string, readonly string[]>>;
   /** Skip npm network. */
@@ -143,12 +122,7 @@ export async function projectPluginsList(
   const rows: ConsolePluginRow[] = [];
 
   for (const spec of CORE_PLUGINS) {
-    const on = isCorePluginOn(
-      spec.id,
-      options.manifest,
-      options.config,
-      new Set(plugged.keys()),
-    );
+    const on = isCorePluginOn(spec.id, options.manifest, options.config, new Set(plugged.keys()));
     const meta = plugged.get(spec.id);
     const manifestPlugin = options.manifest?.plugins?.[spec.id];
     rows.push(
@@ -242,12 +216,8 @@ function collectPlugged(
       const scopes = [...(prev?.scopes ?? []), scope];
       out.set(id, {
         version: caps.version ?? prev?.version ?? null,
-        declares: caps.declares.length
-          ? [...caps.declares]
-          : (prev?.declares ?? []),
-        intercepts: caps.intercepts.length
-          ? [...caps.intercepts]
-          : (prev?.intercepts ?? []),
+        declares: caps.declares.length ? [...caps.declares] : (prev?.declares ?? []),
+        intercepts: caps.intercepts.length ? [...caps.intercepts] : (prev?.intercepts ?? []),
         scopes,
         origin: prev?.origin,
       });
@@ -280,13 +250,10 @@ async function buildRow(input: {
   readonly options: ProjectPluginsOptions;
   readonly enableHint: string | null;
 }): Promise<ConsolePluginRow> {
-  const packageName =
-    input.origin === "community" ? communityPackageName(input.id) : null;
+  const packageName = input.origin === "community" ? communityPackageName(input.id) : null;
   const cost = input.costs[input.id] ?? null;
   const intercepts = input.interceptStages.map((stage) => {
-    const stageCost = cost?.byStage[
-      stage as keyof NonNullable<typeof cost>["byStage"]
-    ];
+    const stageCost = cost?.byStage[stage as keyof NonNullable<typeof cost>["byStage"]];
     return {
       stage,
       meanMs: stageCost?.meanMs ?? null,
@@ -305,9 +272,8 @@ async function buildRow(input: {
     fetchNpm: input.options.fetchNpm,
   };
 
-  const { projectSupplyChain, projectSupplyChainSync } = await import(
-    "../../plugins/supply-chain.ts"
-  );
+  const { projectSupplyChain, projectSupplyChainSync } =
+    await import("../../plugins/supply-chain.ts");
   const supplyChain = input.options.syncSupplyChain
     ? projectSupplyChainSync(supplyOpts)
     : await projectSupplyChain(supplyOpts);
@@ -337,10 +303,7 @@ async function buildRow(input: {
       kind: c.kind,
       summary: c.summary,
     })),
-    installCommand:
-      input.origin === "community" && packageName
-        ? `bun add ${packageName}`
-        : null,
+    installCommand: input.origin === "community" && packageName ? `bun add ${packageName}` : null,
     enableHint: input.enableHint,
     packageName,
   };
@@ -400,9 +363,7 @@ export function filterCapabilityDiffForPlugin(
   pluginId: string,
 ): readonly ManifestChange[] {
   const prefix = `/plugins/${pluginId}`;
-  return changes.filter(
-    (c) => c.path === prefix || c.path.startsWith(`${prefix}/`),
-  );
+  return changes.filter((c) => c.path === prefix || c.path.startsWith(`${prefix}/`));
 }
 
 function communityPackageName(id: string): string {
@@ -421,7 +382,7 @@ function enableHintForCore(id: string, on: boolean): string | null {
     case "rate-limit":
       return "app.plug(rateLimit({ max: 30 }))  // or unit.plug / flow.plug";
     case "tenancy":
-      return "oke.config.ts → tenancy: { isolation: \"row\", resolve: … }";
+      return 'oke.config.ts → tenancy: { isolation: "row", resolve: … }';
     case "privacy":
       return "oke.config.ts → privacy: { … }  // or runs: { redact: { … } }";
     default:

package/src/console/server/runs-pii.ts

@@ -39,9 +39,7 @@ export function piiFieldNamesFromManifest(
         "pii" in tags &&
         (tags as { pii?: boolean }).pii
       ) {
-        const col = key.includes(".")
-          ? key.slice(key.lastIndexOf(".") + 1)
-          : key;
+        const col = key.includes(".") ? key.slice(key.lastIndexOf(".") + 1) : key;
         names.add(col);
       }
     }
@@ -88,10 +86,7 @@ export function maskWideEventForConsole(
     if (line.data === undefined) return line;
     return {
       ...line,
-      data: maskPiiRecord(
-        line.data as Record<string, unknown>,
-        piiFields,
-      ),
+      data: maskPiiRecord(line.data as Record<string, unknown>, piiFields),
     };
   });
   return { ...event, dimensions, logs };

package/src/console/server/security.gate.test.ts

@@ -17,18 +17,12 @@ import type { WideEvent } from "../../runs/types.ts";
 import type { ConsoleAppHandle } from "./app.ts";
 import { AUTH_RATE_LIMIT } from "./auth-rate.ts";
 import { projectRun } from "./flows.ts";
-import {
-  maskWideEventForConsole,
-  piiFieldNamesFromManifest,
-} from "./runs-pii.ts";
+import { maskWideEventForConsole, piiFieldNamesFromManifest } from "./runs-pii.ts";
 import { startConsoleApp } from "./serve.ts";
 
 /** Deduplicate console.* flows from the live binding registry. */
 function consoleFlows(handle: ConsoleAppHandle) {
-  const byName = new Map<
-    string,
-    { readonly name: string; readonly plane: string | undefined }
-  >();
+  const byName = new Map<string, { readonly name: string; readonly plane: string | undefined }>();
   for (const binding of handle.app.bindings) {
     const name = binding.flow.name;
     if (!name.startsWith("console.")) continue;
@@ -106,19 +100,14 @@ describe("console security gates (whole surface)", () => {
     const failures: string[] = [];
     for (const binding of handle.app.bindings) {
       if (!binding.flow.name.startsWith("console.")) continue;
-      const result = await handle.app.execute(
-        binding.flow,
-        {},
-        binding.trigger,
-        {
-          validated: true,
-          principal: {
-            plane: "user",
-            userId: "user-plane-1",
-            scopes: ["bookings:create"],
-          },
+      const result = await handle.app.execute(binding.flow, {}, binding.trigger, {
+        validated: true,
+        principal: {
+          plane: "user",
+          userId: "user-plane-1",
+          scopes: ["bookings:create"],
         },
-      );
+      });
       const code = result.failure?.error?.code;
       if (code !== "Forbidden") {
         failures.push(`${binding.flow.name} → ${code ?? "no-failure"}`);
@@ -197,29 +186,20 @@ describe("console security gates (whole surface)", () => {
 
   test("7. every registered console.* flow leaves a Runs entry when executed", async () => {
     const flows = consoleFlows(handle);
-    const before = new Set(
-      (await handle.state.listRuns()).map((r: WideEvent) => r.flow),
-    );
+    const before = new Set((await handle.state.listRuns()).map((r: WideEvent) => r.flow));
 
     for (const flowMeta of flows) {
       if (before.has(flowMeta.name)) continue;
-      const binding = handle.app.bindings.find(
-        (b: Binding) => b.flow.name === flowMeta.name,
-      );
+      const binding = handle.app.bindings.find((b: Binding) => b.flow.name === flowMeta.name);
       expect(binding).toBeDefined();
       try {
-        await handle.app.execute(
-          binding!.flow,
-          {},
-          binding!.trigger,
-          {
-            validated: true,
-            principal: {
-              plane: "operator",
-              operatorId,
-            },
+        await handle.app.execute(binding!.flow, {}, binding!.trigger, {
+          validated: true,
+          principal: {
+            plane: "operator",
+            operatorId,
           },
-        );
+        });
       } catch {
         // Handler throws still record a wide event (pipeline catches).
       }
@@ -227,9 +207,7 @@ describe("console security gates (whole surface)", () => {
 
     const after = await handle.state.listRuns();
     const names = new Set(after.map((r: WideEvent) => r.flow));
-    const missing = flows
-      .map((f) => f.name)
-      .filter((name) => !names.has(name));
+    const missing = flows.map((f) => f.name).filter((name) => !names.has(name));
     expect(missing).toEqual([]);
   });
 

package/src/console/server/serve.ts

@@ -83,8 +83,9 @@ export async function serveConsole(
       : {}),
   });
 
+  // Console serve `"dev"` is the auth/session flavor — ConfigEnv uses `local`.
   const env = options.env ?? "dev";
-  await handle.app.boot({ env });
+  await handle.app.boot({ env: env === "dev" ? "local" : env });
   handle.state.listRuns = async () => {
     const runs = handle.app.bootResult?.runs;
     if (!runs) return [];
@@ -94,8 +95,7 @@ export async function serveConsole(
   await bindManifestStoreRuntime(handle.state);
   await bindManifestVaultRuntime(handle.state);
 
-  const staticDir =
-    options.staticDir ?? new URL("../ui/dist/", import.meta.url).pathname;
+  const staticDir = options.staticDir ?? new URL("../ui/dist/", import.meta.url).pathname;
 
   const live = createLiveWebsocket(handle.state);
   const allowed = resolveAllowedHosts(hostname, options.allowedHosts);
@@ -112,9 +112,7 @@ export async function serveConsole(
     const authed = withCookieAuth(request);
 
     if (url.pathname.startsWith("/console/")) {
-      const response = await runWithDevSurface("Console", () =>
-        handle.app.fetch(authed),
-      );
+      const response = await runWithDevSurface("Console", () => handle.app.fetch(authed));
       const withCookies = await attachSessionCookies(authed, response);
       return withConsoleSecurityHeaders(withCookies);
     }
@@ -172,9 +170,7 @@ export async function serveConsole(
   const boundPort = server.port ?? port;
   const boundHost = server.hostname ?? hostname;
   const hostForUrl =
-    boundHost.includes(":") && !boundHost.startsWith("[")
-      ? `[${boundHost}]`
-      : boundHost;
+    boundHost.includes(":") && !boundHost.startsWith("[") ? `[${boundHost}]` : boundHost;
   const url = new URL(`http://${hostForUrl}:${boundPort}/`);
 
   return {
@@ -238,9 +234,7 @@ export function withCookieAuth(request: Request): Request {
     return request;
   }
   const cookie = request.headers.get("cookie") ?? "";
-  const match = cookie.match(
-    new RegExp(`(?:^|;\\s*)${CONSOLE_COOKIES.access}=([^;]+)`),
-  );
+  const match = cookie.match(new RegExp(`(?:^|;\\s*)${CONSOLE_COOKIES.access}=([^;]+)`));
   if (!match?.[1]) return request;
   const token = decodeURIComponent(match[1]);
   const headers = new Headers(request.headers);
@@ -261,8 +255,7 @@ export async function attachSessionCookies(
   if (response.status >= 400) return response;
   const url = new URL(request.url);
   const isSessionIssue =
-    url.pathname === "/console/setup/claim" ||
-    url.pathname === "/console/session/login";
+    url.pathname === "/console/setup/claim" || url.pathname === "/console/session/login";
   const isLogout = url.pathname === "/console/session/logout";
   if (!isSessionIssue && !isLogout) return response;
 
@@ -277,10 +270,7 @@ export async function attachSessionCookies(
 
   const headers = new Headers(response.headers);
   if (isLogout) {
-    headers.append(
-      "Set-Cookie",
-      consoleSessionCookie(CONSOLE_COOKIES.access, "", { clear: true }),
-    );
+    headers.append("Set-Cookie", consoleSessionCookie(CONSOLE_COOKIES.access, "", { clear: true }));
     headers.append(
       "Set-Cookie",
       consoleSessionCookie(CONSOLE_COOKIES.refresh, "", { clear: true }),
@@ -305,10 +295,7 @@ export async function attachSessionCookies(
   });
 }
 
-async function serveStatic(
-  staticDir: string,
-  pathname: string,
-): Promise<Response | null> {
+async function serveStatic(staticDir: string, pathname: string): Promise<Response | null> {
   if (pathname.includes("..")) return null;
   const path = pathname === "/" ? "index.html" : pathname.replace(/^\//, "");
   const file = Bun.file(`${staticDir}${path}`);
@@ -317,9 +304,7 @@ async function serveStatic(
 }
 
 function pluginFrameResponse(pathname: string): Response {
-  const id = pathname
-    .slice("/plugin-frame/".length)
-    .replace(/[^a-z0-9_-]/gi, "");
+  const id = pathname.slice("/plugin-frame/".length).replace(/[^a-z0-9_-]/gi, "");
   const html = `<!doctype html>
 <html lang="en">
 <head>

package/src/console/server/signals.test.ts

@@ -1,9 +1,7 @@
 import { describe, expect, test } from "bun:test";
 import { memorySignalDriver } from "../../drivers/signal-memory.ts";
 import { signal } from "../../elements/signal/declare.ts";
-import {
-  createMemorySignalConfigStore,
-} from "../../elements/signal/reconcile.ts";
+import { createMemorySignalConfigStore } from "../../elements/signal/reconcile.ts";
 import { createSignalRuntime } from "../../elements/signal/runtime.ts";
 import type { Manifest } from "../../manifest/types.ts";
 import { projectSignalsList } from "./signals.ts";

package/src/console/server/signals.ts

@@ -13,10 +13,7 @@ import type {
   SignalReplayResult,
   SignalStats,
 } from "../../drivers/signal-types.ts";
-import type {
-  SignalConfigRow,
-  SignalConfigStore,
-} from "../../elements/signal/reconcile.ts";
+import type { SignalConfigRow, SignalConfigStore } from "../../elements/signal/reconcile.ts";
 import { reconcileSignals } from "../../elements/signal/reconcile.ts";
 import { signal as declareSignal } from "../../elements/signal/declare.ts";
 
@@ -84,15 +81,14 @@ export interface ProjectSignalsOptions {
 export async function projectSignalsList(
   options: ProjectSignalsOptions,
 ): Promise<readonly ConsoleSignalRow[]> {
-  const declared = Object.entries(options.manifest?.signals ?? {}).map(
-    ([name, s]) =>
-      declareSignal(name, {
-        delivery: s.delivery,
-        retries: s.retries,
-        deadLetter: s.deadLetter,
-        schema: s.schema,
-        optional: s.optional,
-      }),
+  const declared = Object.entries(options.manifest?.signals ?? {}).map(([name, s]) =>
+    declareSignal(name, {
+      delivery: s.delivery,
+      retries: s.retries,
+      deadLetter: s.deadLetter,
+      schema: s.schema,
+      optional: s.optional,
+    }),
   );
   const reconciled = await reconcileSignals(declared, options.config);
   const statsByName = new Map<string, SignalStats>();
@@ -109,10 +105,7 @@ export async function projectSignalsList(
     const stats = statsByName.get(cfg.name);
     const producers = producersOf(cfg.name, flows);
     const consumers = consumersOf(cfg.name, flows);
-    const consumersDurable =
-      consumers.length === 0
-        ? null
-        : consumers.every((c) => c.durable);
+    const consumersDurable = consumers.length === 0 ? null : consumers.every((c) => c.durable);
 
     // Attach causal run ids onto dead letters when a matching emit exists.
     const deadLetters = (stats?.deadLetters ?? []).map((dl) =>
@@ -165,13 +158,10 @@ export async function projectSignalsList(
       schema: stats.schema,
       subscribers: [...stats.subscribers],
       recentLive: [...stats.recentLive],
-      deadLetters: stats.deadLetters.map((dl) =>
-        withCause(dl, name, options.runs),
-      ),
+      deadLetters: stats.deadLetters.map((dl) => withCause(dl, name, options.runs)),
       producers,
       consumers,
-      consumersDurable:
-        consumers.length === 0 ? null : consumers.every((c) => c.durable),
+      consumersDurable: consumers.length === 0 ? null : consumers.every((c) => c.durable),
     });
   }
 
@@ -208,10 +198,7 @@ export async function discardViaBus(
   return bus.discard(options);
 }
 
-function producersOf(
-  signalName: string,
-  flows: NonNullable<Manifest["flows"]>,
-): SignalEndpoint[] {
+function producersOf(signalName: string, flows: NonNullable<Manifest["flows"]>): SignalEndpoint[] {
   const out: SignalEndpoint[] = [];
   for (const [flowId, flow] of Object.entries(flows)) {
     if (flow.effects?.emits?.includes(signalName)) {
@@ -221,10 +208,7 @@ function producersOf(
   return out;
 }
 
-function consumersOf(
-  signalName: string,
-  flows: NonNullable<Manifest["flows"]>,
-): SignalEndpoint[] {
+function consumersOf(signalName: string, flows: NonNullable<Manifest["flows"]>): SignalEndpoint[] {
   const out: SignalEndpoint[] = [];
   for (const [flowId, flow] of Object.entries(flows)) {
     if (flow.trigger?.signal === signalName) {
@@ -234,10 +218,7 @@ function consumersOf(
   return out;
 }
 
-function endpoint(
-  flowId: string,
-  flow: NonNullable<Manifest["flows"]>[string],
-): SignalEndpoint {
+function endpoint(flowId: string, flow: NonNullable<Manifest["flows"]>[string]): SignalEndpoint {
   return {
     flowId,
     durable: flow.durable === true,
@@ -246,9 +227,7 @@ function endpoint(
   };
 }
 
-function peakTierOf(
-  flow: NonNullable<Manifest["flows"]>[string],
-): SignalEndpoint["peakTier"] {
+function peakTierOf(flow: NonNullable<Manifest["flows"]>[string]): SignalEndpoint["peakTier"] {
   const e = flow.effects;
   if (!e) return "none";
   if ((e.sends?.length ?? 0) > 0 || (e.asks?.length ?? 0) > 0) return "external";
@@ -266,9 +245,7 @@ function withCause(
 ): DeadLetter & { readonly causeRunId?: string; readonly causeFlow?: string } {
   if (!runs || runs.length === 0) return dl;
   const match = runs.find((r) =>
-    r.effects.some(
-      (e) => e.kind === "emit" && e.resource === signalName,
-    ),
+    r.effects.some((e) => e.kind === "emit" && e.resource === signalName),
   );
   if (!match) return dl;
   return {

package/src/console/server/state.ts

@@ -26,11 +26,7 @@ import type {
   SignalReplayOptions,
   SignalReplayResult,
 } from "../../drivers/signal-types.ts";
-import type {
-  AgentToolEffect,
-  AiRuntime,
-  EvalSuiteResult,
-} from "../../elements/ai.ts";
+import type { AgentToolEffect, AiRuntime, EvalSuiteResult } from "../../elements/ai.ts";
 import {
   createMemorySignalConfigStore,
   type SignalConfigStore,
@@ -38,10 +34,7 @@ import {
 import type { Manifest } from "../../manifest/types.ts";
 import type { WideEvent } from "../../runs/types.ts";
 import type { ConsoleAiProjection } from "./ai.ts";
-import {
-  createLoginAttemptBag,
-  type LoginAttemptBag,
-} from "./auth-rate.ts";
+import { createLoginAttemptBag, type LoginAttemptBag } from "./auth-rate.ts";
 import { mintClaimCode, type ClaimCodeState } from "./claim.ts";
 import type { ConsoleSignalRow } from "./signals.ts";
 import type {
@@ -68,19 +61,12 @@ import {
 import type { ConsoleVaultRow, VaultWriteInput } from "./vault.ts";
 import type { ChannelInbox } from "../../drivers/channel-types.ts";
 import type { ChannelRuntime, TemplateCatalog } from "../../elements/channel.ts";
-import type {
-  ConsoleChannelPreview,
-  ConsoleChannelsList,
-  EmailAuthResult,
-} from "./channels.ts";
+import type { ConsoleChannelPreview, ConsoleChannelsList, EmailAuthResult } from "./channels.ts";
 import type { OkeConfig } from "../../config/index.ts";
 import type { PluginRegistry } from "../../kernel/registry.ts";
 import type { ConsolePluginsList } from "./plugins.ts";
 import type { ConsoleDiffProjection } from "./diff.ts";
-import {
-  loadConsolePanel,
-  type ConsolePanelId,
-} from "./panel-load.ts";
+import { loadConsolePanel, type ConsolePanelId } from "./panel-load.ts";
 
 /** User-plane identity row for the Flows invoke-as picker. */
 export interface ConsoleIdentity {
@@ -192,9 +178,7 @@ export interface ConsoleState {
   /** Replay / dry-run via the real bus. */
   replaySignals: (options: SignalReplayOptions) => Promise<SignalReplayResult>;
   /** Discard dead letters via the real bus. */
-  discardSignals: (
-    options: SignalDiscardOptions,
-  ) => Promise<{ readonly discarded: number }>;
+  discardSignals: (options: SignalDiscardOptions) => Promise<{ readonly discarded: number }>;
   /**
    * Live store runtime. Bound after boot from Manifest (memory default)
    * or host injection.
@@ -214,13 +198,9 @@ export interface ConsoleState {
     options?: { readonly dryRun?: boolean },
   ) => Promise<StoreEditResult>;
   /** Delete rows/keys. */
-  deleteStore: (
-    input: StoreDeleteInput,
-  ) => Promise<{ readonly deleted: number }>;
+  deleteStore: (input: StoreDeleteInput) => Promise<{ readonly deleted: number }>;
   /** Purge cache keys for a resource. */
-  purgeStoreCache: (
-    resource: ResourceRef,
-  ) => Promise<{ readonly keys: readonly string[] }>;
+  purgeStoreCache: (resource: ResourceRef) => Promise<{ readonly keys: readonly string[] }>;
   /** Raw SQL console. */
   runStoreSql: (
     ref: ResourceRef,
@@ -247,9 +227,11 @@ export interface ConsoleState {
   /** Pause a cron. */
   pauseCron: (name: string) => Promise<{ readonly name: string; readonly status: string }>;
   /** Edit overridable schedule. */
-  editSchedule: (
-    input: EditScheduleInput,
-  ) => Promise<{ readonly name: string; readonly effectiveCron?: string; readonly effectiveEvery?: string }>;
+  editSchedule: (input: EditScheduleInput) => Promise<{
+    readonly name: string;
+    readonly effectiveCron?: string;
+    readonly effectiveEvery?: string;
+  }>;
   /** Wake a sleeping durable run early and resume. */
   wakeEarly: (runId: string) => Promise<{
     readonly runId: string;
@@ -423,20 +405,15 @@ export interface CreateConsoleStateOptions {
  *
  * @param options - Secret, clock, cwd
  */
-export function createConsoleState(
-  options: CreateConsoleStateOptions = {},
-): ConsoleState {
+export function createConsoleState(options: CreateConsoleStateOptions = {}): ConsoleState {
   const secret =
-    options.secret ??
-    process.env.OKE_CONSOLE_SECRET ??
-    `oke-console-dev-${crypto.randomUUID()}`;
+    options.secret ?? process.env.OKE_CONSOLE_SECRET ?? `oke-console-dev-${crypto.randomUUID()}`;
   const now = options.now ?? (() => Date.now());
   const operators = options.operators ?? createOperatorStore();
   const claim = mintClaimCode(now);
   const sessions = options.sessions ?? createSessionStore();
   const liveSubscribers = new Set<(msg: ConsoleLiveMessage) => void>();
-  const persistOperator =
-    options.persistOperator ?? ((_operatorId: string) => {});
+  const persistOperator = options.persistOperator ?? ((_operatorId: string) => {});
   const persistSessions = options.persistSessions ?? (() => {});
 
   const signalConfig = createMemorySignalConfigStore();
@@ -445,9 +422,7 @@ export function createConsoleState(
   const constructed = new Set<ConsolePanelId>();
   let accessSeeded = false;
 
-  const markPanel = async <T>(
-    id: ConsolePanelId,
-  ): Promise<T> => {
+  const markPanel = async <T>(id: ConsolePanelId): Promise<T> => {
     constructed.add(id);
     return loadConsolePanel<T>(id);
   };
@@ -901,10 +876,7 @@ export async function consoleEffectsForFlow(
  * @param state - Console state
  * @param message - Payload
  */
-export function publishLive(
-  state: ConsoleState,
-  message: ConsoleLiveMessage,
-): void {
+export function publishLive(state: ConsoleState, message: ConsoleLiveMessage): void {
   for (const sub of state.liveSubscribers) {
     try {
       sub(message);
@@ -937,10 +909,7 @@ export function setManifest(state: ConsoleState, manifest: Manifest): void {
  * @param state - Console state
  * @param runtime - Gate runtime
  */
-export function bindGateRuntime(
-  state: ConsoleState,
-  runtime: GateRuntime,
-): void {
+export function bindGateRuntime(state: ConsoleState, runtime: GateRuntime): void {
   state.gateRuntime = runtime;
 }
 
@@ -949,21 +918,14 @@ export function bindGateRuntime(
  *
  * @param state - Console state
  */
-export async function bindManifestGateRuntime(
-  state: ConsoleState,
-): Promise<void> {
+export async function bindManifestGateRuntime(state: ConsoleState): Promise<void> {
   if (state.gateRuntime) return;
   if (!state.manifest?.gates && !state.manifest?.flows) return;
   const hasGates =
     Object.keys(state.manifest.gates ?? {}).length > 0 ||
-    Object.values(state.manifest.flows ?? {}).some(
-      (f) => (f.gates?.length ?? 0) > 0,
-    );
+    Object.values(state.manifest.flows ?? {}).some((f) => (f.gates?.length ?? 0) > 0);
   if (!hasGates) return;
-  const { runtime } = await createManifestGateRuntime(
-    state.manifest,
-    state.now,
-  );
+  const { runtime } = await createManifestGateRuntime(state.manifest, state.now);
   state.gateRuntime = runtime;
 }