okengine 0.2.6 → 0.3.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (681) hide show
  1. package/AGENTS.md +33 -30
  2. package/README.md +74 -340
  3. package/{spec/manifest.v1.schema.json → manifest.v1.schema.json} +40 -9
  4. package/package.json +47 -44
  5. package/site/content/docs/ai/llms-txt.mdx +54 -0
  6. package/site/content/docs/ai/mcp.mdx +123 -0
  7. package/site/content/docs/ai/meta.json +5 -0
  8. package/site/content/docs/ai/skills.mdx +53 -0
  9. package/site/content/docs/console/access.mdx +29 -0
  10. package/site/content/docs/console/ai.mdx +35 -0
  11. package/site/content/docs/console/architecture.mdx +35 -0
  12. package/site/content/docs/console/channels.mdx +37 -0
  13. package/site/content/docs/console/clock.mdx +31 -0
  14. package/site/content/docs/console/flows.mdx +31 -0
  15. package/site/content/docs/console/gates.mdx +35 -0
  16. package/site/content/docs/console/manifest-diff.mdx +34 -0
  17. package/site/content/docs/console/meta.json +23 -0
  18. package/site/content/docs/console/overview.mdx +40 -0
  19. package/site/content/docs/console/plugins.mdx +41 -0
  20. package/site/content/docs/console/privacy.mdx +32 -0
  21. package/site/content/docs/console/runs.mdx +40 -0
  22. package/site/content/docs/console/signals.mdx +31 -0
  23. package/site/content/docs/console/store.mdx +32 -0
  24. package/site/content/docs/console/tenancy.mdx +32 -0
  25. package/site/content/docs/console/traces.mdx +34 -0
  26. package/site/content/docs/console/vault.mdx +37 -0
  27. package/site/content/docs/elements/ai.mdx +180 -0
  28. package/site/content/docs/elements/channel.mdx +167 -0
  29. package/site/content/docs/elements/clock.mdx +182 -0
  30. package/site/content/docs/elements/flow.mdx +288 -0
  31. package/site/content/docs/elements/gate.mdx +171 -0
  32. package/site/content/docs/elements/meta.json +5 -0
  33. package/site/content/docs/elements/signal.mdx +171 -0
  34. package/site/content/docs/elements/store.mdx +320 -0
  35. package/site/content/docs/elements/vault.mdx +263 -0
  36. package/site/content/docs/get-started/basic-usage.mdx +124 -0
  37. package/site/content/docs/get-started/comparison.mdx +65 -0
  38. package/site/content/docs/get-started/installation.mdx +113 -0
  39. package/site/content/docs/get-started/introduction.mdx +123 -0
  40. package/site/content/docs/get-started/meta.json +5 -0
  41. package/site/content/docs/index.mdx +63 -0
  42. package/site/content/docs/meta.json +5 -0
  43. package/site/content/docs/plugins/compression.mdx +60 -0
  44. package/site/content/docs/plugins/cors.mdx +92 -0
  45. package/site/content/docs/plugins/csrf.mdx +96 -0
  46. package/site/content/docs/plugins/ip-allowlist.mdx +92 -0
  47. package/site/content/docs/plugins/maintenance-mode.mdx +101 -0
  48. package/site/content/docs/plugins/meta.json +15 -0
  49. package/site/content/docs/plugins/security-headers.mdx +136 -0
  50. package/site/content/docs/reference/cli.md +101 -0
  51. package/site/content/docs/reference/configuration.mdx +159 -0
  52. package/site/content/docs/reference/environment-variables.mdx +87 -0
  53. package/site/content/docs/reference/errors.mdx +80 -0
  54. package/site/content/docs/reference/fx.mdx +117 -0
  55. package/site/content/docs/reference/meta.json +5 -0
  56. package/site/content/docs/reference/plugins.mdx +249 -0
  57. package/site/content/docs/reference/security.md +63 -0
  58. package/src/auth/api-keys.ts +2 -5
  59. package/src/auth/attenuation.ts +2 -6
  60. package/src/auth/auth.test.ts +56 -31
  61. package/src/auth/invoke-as.ts +1 -3
  62. package/src/auth/operator.ts +8 -26
  63. package/src/auth/planes.ts +2 -7
  64. package/src/auth/plugin.ts +4 -7
  65. package/src/auth/roles.ts +1 -5
  66. package/src/auth/sessions.ts +10 -39
  67. package/src/cli/args.ts +1 -5
  68. package/src/cli/ask-dev-mode.ts +40 -0
  69. package/src/cli/build.ts +1 -2
  70. package/src/cli/client-add.test.ts +8 -15
  71. package/src/cli/client-add.ts +5 -14
  72. package/src/cli/completion.test.ts +1 -5
  73. package/src/cli/completion.ts +4 -17
  74. package/src/cli/db-auto-push.test.ts +64 -0
  75. package/src/cli/db-auto-push.ts +72 -0
  76. package/src/cli/db.test.ts +189 -0
  77. package/src/cli/db.ts +456 -0
  78. package/src/cli/dev-app-runner.ts +2 -8
  79. package/src/cli/dev-db-push.test.ts +193 -0
  80. package/src/cli/dev-mode.test.ts +45 -0
  81. package/src/cli/dev-mode.ts +78 -0
  82. package/src/cli/dev-schema-sync.test.ts +66 -0
  83. package/src/cli/dev-schema-sync.ts +139 -0
  84. package/src/cli/dev.test.ts +264 -15
  85. package/src/cli/dev.ts +355 -139
  86. package/src/cli/doc-staleness.test.ts +69 -0
  87. package/src/cli/docker-cli.test.ts +27 -8
  88. package/src/cli/docker.ts +11 -3
  89. package/src/cli/doctor-diff.test.ts +1 -5
  90. package/src/cli/doctor-diff.ts +17 -46
  91. package/src/cli/doctor-pii.ts +2 -7
  92. package/src/cli/doctor.test.ts +26 -4
  93. package/src/cli/doctor.ts +35 -11
  94. package/src/cli/drizzle-env.test.ts +67 -0
  95. package/src/cli/drizzle-env.ts +78 -0
  96. package/src/cli/ensure-drizzle-config.ts +50 -0
  97. package/src/cli/eval.ts +4 -14
  98. package/src/cli/gates-list.ts +1 -4
  99. package/src/cli/hero-meta.test.ts +17 -19
  100. package/src/cli/hero-meta.ts +20 -30
  101. package/src/cli/images.ts +3 -8
  102. package/src/cli/index.ts +11 -2
  103. package/src/cli/load-config.images.test.ts +14 -14
  104. package/src/cli/load-config.ts +47 -47
  105. package/src/cli/mcp-from-console.ts +1 -4
  106. package/src/cli/mode.ts +65 -0
  107. package/src/cli/openbao-bootstrap.test.ts +147 -0
  108. package/src/cli/openbao-bootstrap.ts +280 -0
  109. package/src/cli/openbao-restart.integration.test.ts +136 -0
  110. package/src/cli/ports.test.ts +7 -14
  111. package/src/cli/ports.ts +7 -5
  112. package/src/cli/privacy-erase.ts +1 -3
  113. package/src/cli/registry.ts +75 -25
  114. package/src/cli/resolve-dev-sql-env.test.ts +48 -0
  115. package/src/cli/resolve-dev-sql-env.ts +42 -0
  116. package/src/cli/schema.ts +3 -10
  117. package/src/cli/stack.ts +8 -10
  118. package/src/cli/start.ts +4 -15
  119. package/src/cli/upgrade.ts +1 -4
  120. package/src/cli/vault-cmd.ts +63 -0
  121. package/src/client/budget-entry.ts +1 -6
  122. package/src/client/create.test.ts +6 -12
  123. package/src/client/create.ts +2 -8
  124. package/src/client/errors.ts +1 -4
  125. package/src/client/index.ts +1 -6
  126. package/src/client/notes-contract.test.ts +4 -13
  127. package/src/client/transport.ts +9 -30
  128. package/src/client/types.ts +15 -30
  129. package/src/compiler/aot.test.ts +2 -9
  130. package/src/compiler/aot.ts +1 -4
  131. package/src/compiler/differential.test.ts +3 -11
  132. package/src/compiler/dynamic.ts +1 -4
  133. package/src/compiler/effects-infer.ts +8 -34
  134. package/src/compiler/emit.ts +1 -3
  135. package/src/compiler/extract.test.ts +136 -30
  136. package/src/compiler/extract.ts +485 -157
  137. package/src/compiler/fixtures/skyport/oke.config.ts +3 -3
  138. package/src/compiler/fixtures/skyport/src/flows/bookings/index.ts +7 -3
  139. package/src/compiler/fixtures/skyport/src/flows/payments/index.ts +1 -3
  140. package/src/compiler/fixtures/skyport/src/flows/support/index.ts +4 -1
  141. package/src/compiler/fixtures/skyport.expected.json +24 -83
  142. package/src/compiler/fixtures/triggers/five-triggers.ts +1 -2
  143. package/src/compiler/http-parse.ts +2 -9
  144. package/src/compiler/index.ts +1 -5
  145. package/src/compiler/response.ts +16 -7
  146. package/src/compiler/sucrose.ts +11 -31
  147. package/src/config/define-config.test.ts +55 -34
  148. package/src/config/index.ts +177 -46
  149. package/src/config/resolve-driver.test.ts +28 -17
  150. package/src/console/budget.test.ts +1 -4
  151. package/src/console/index.ts +1 -4
  152. package/src/console/server/access.test.ts +15 -43
  153. package/src/console/server/access.ts +19 -49
  154. package/src/console/server/ai.test.ts +3 -11
  155. package/src/console/server/ai.ts +23 -46
  156. package/src/console/server/app.ts +16 -45
  157. package/src/console/server/auth-rate.test.ts +4 -12
  158. package/src/console/server/bind.ts +1 -5
  159. package/src/console/server/channels.test.ts +2 -6
  160. package/src/console/server/channels.ts +10 -35
  161. package/src/console/server/claim.ts +2 -8
  162. package/src/console/server/clock.test.ts +2 -6
  163. package/src/console/server/clock.ts +8 -26
  164. package/src/console/server/console.test.ts +1 -3
  165. package/src/console/server/diff.test.ts +5 -17
  166. package/src/console/server/diff.ts +10 -31
  167. package/src/console/server/dry-run.audit.test.ts +2 -8
  168. package/src/console/server/flows.ts +64 -233
  169. package/src/console/server/gates.test.ts +14 -50
  170. package/src/console/server/gates.ts +13 -48
  171. package/src/console/server/index.ts +2 -9
  172. package/src/console/server/live.ts +3 -12
  173. package/src/console/server/operator-db.test.ts +4 -15
  174. package/src/console/server/operator-db.ts +13 -32
  175. package/src/console/server/plugin.ts +50 -53
  176. package/src/console/server/plugins.test.ts +2 -6
  177. package/src/console/server/plugins.ts +17 -56
  178. package/src/console/server/runs-pii.ts +2 -7
  179. package/src/console/server/security.gate.test.ts +18 -40
  180. package/src/console/server/serve.ts +10 -25
  181. package/src/console/server/signals.test.ts +1 -3
  182. package/src/console/server/signals.ts +17 -40
  183. package/src/console/server/state.ts +21 -59
  184. package/src/console/server/store.test.ts +20 -22
  185. package/src/console/server/store.ts +31 -76
  186. package/src/console/server/vault.test.ts +12 -29
  187. package/src/console/server/vault.ts +44 -66
  188. package/src/console/ui/access/AccessA11yView.tsx +6 -21
  189. package/src/console/ui/access/a11y.test.tsx +3 -12
  190. package/src/console/ui/access/acknowledgement.test.ts +1 -4
  191. package/src/console/ui/access/acknowledgement.ts +1 -3
  192. package/src/console/ui/access/blast-radius.ts +1 -3
  193. package/src/console/ui/access/confirmation.test.ts +1 -5
  194. package/src/console/ui/access/confirmation.ts +1 -4
  195. package/src/console/ui/access/fixture.ts +1 -5
  196. package/src/console/ui/access/grantable.test.ts +1 -3
  197. package/src/console/ui/access/grantable.ts +2 -7
  198. package/src/console/ui/access/index.ts +2 -9
  199. package/src/console/ui/access/provenance.test.ts +1 -3
  200. package/src/console/ui/access/provenance.ts +2 -6
  201. package/src/console/ui/access/search.test.ts +1 -5
  202. package/src/console/ui/access/search.ts +2 -6
  203. package/src/console/ui/ai/AiA11yView.tsx +6 -17
  204. package/src/console/ui/ai/a11y.test.tsx +2 -5
  205. package/src/console/ui/ai/fixture.ts +2 -7
  206. package/src/console/ui/ai/format.ts +1 -3
  207. package/src/console/ui/ai/group.test.ts +1 -3
  208. package/src/console/ui/ai/group.ts +4 -12
  209. package/src/console/ui/ai/index.ts +2 -9
  210. package/src/console/ui/ai/promotion.test.ts +2 -7
  211. package/src/console/ui/ai/promotion.ts +4 -13
  212. package/src/console/ui/ai/search.test.ts +2 -11
  213. package/src/console/ui/ai/search.ts +3 -13
  214. package/src/console/ui/ai/types.ts +1 -8
  215. package/src/console/ui/architecture/ArchitectureA11yView.tsx +8 -29
  216. package/src/console/ui/architecture/a11y.test.tsx +1 -2
  217. package/src/console/ui/architecture/declared.ts +1 -5
  218. package/src/console/ui/architecture/index.ts +7 -35
  219. package/src/console/ui/architecture/layout.ts +1 -3
  220. package/src/console/ui/architecture/pathologies.ts +10 -19
  221. package/src/console/ui/architecture/search.ts +6 -15
  222. package/src/console/ui/architecture/traffic.ts +4 -14
  223. package/src/console/ui/architecture/types.ts +2 -10
  224. package/src/console/ui/architecture/view.test.ts +7 -19
  225. package/src/console/ui/architecture/view.ts +9 -36
  226. package/src/console/ui/channels/ChannelsA11yView.tsx +4 -13
  227. package/src/console/ui/channels/a11y.test.tsx +1 -2
  228. package/src/console/ui/channels/confirmation.test.ts +1 -4
  229. package/src/console/ui/channels/confirmation.ts +1 -4
  230. package/src/console/ui/channels/findings.ts +1 -5
  231. package/src/console/ui/channels/index.ts +2 -8
  232. package/src/console/ui/channels/locale.test.ts +1 -3
  233. package/src/console/ui/channels/locale.ts +2 -8
  234. package/src/console/ui/channels/search.ts +4 -13
  235. package/src/console/ui/channels/taxonomy.ts +1 -3
  236. package/src/console/ui/clock/ClockA11yView.tsx +9 -26
  237. package/src/console/ui/clock/a11y.test.tsx +2 -5
  238. package/src/console/ui/clock/confirmation.test.ts +1 -3
  239. package/src/console/ui/clock/confirmation.ts +1 -4
  240. package/src/console/ui/clock/findings.ts +1 -4
  241. package/src/console/ui/clock/health.ts +2 -7
  242. package/src/console/ui/clock/index.ts +2 -10
  243. package/src/console/ui/clock/search.test.ts +1 -3
  244. package/src/console/ui/clock/search.ts +2 -6
  245. package/src/console/ui/clock/timeline.test.ts +1 -3
  246. package/src/console/ui/clock/waiting-on.test.ts +1 -5
  247. package/src/console/ui/clock/waiting-on.ts +2 -7
  248. package/src/console/ui/diff/DiffA11yView.tsx +8 -17
  249. package/src/console/ui/diff/a11y.test.tsx +2 -5
  250. package/src/console/ui/diff/group.test.ts +3 -13
  251. package/src/console/ui/diff/group.ts +2 -8
  252. package/src/console/ui/diff/index.ts +2 -8
  253. package/src/console/ui/diff/search.test.ts +1 -5
  254. package/src/console/ui/diff/search.ts +4 -16
  255. package/src/console/ui/diff/summary.ts +1 -2
  256. package/src/console/ui/dist/assets/{index-Dy4jht9P.js → index-BWo8R7NR.js} +2 -2
  257. package/src/console/ui/dist/assets/{panel-access-Dd37LU2c.js → panel-access-C0J2D-a2.js} +1 -1
  258. package/src/console/ui/dist/assets/{panel-ai-CC7LR6-J.js → panel-ai-D_m6WQI8.js} +1 -1
  259. package/src/console/ui/dist/assets/{panel-architecture-B5b3iKCz.js → panel-architecture-CKnXFyUx.js} +1 -1
  260. package/src/console/ui/dist/assets/{panel-channels-CeNjTKXp.js → panel-channels-BOmQ-onL.js} +1 -1
  261. package/src/console/ui/dist/assets/{panel-clock-DgFTLoHV.js → panel-clock-giAq0Ccv.js} +1 -1
  262. package/src/console/ui/dist/assets/{panel-diff-DxehccqB.js → panel-diff-cdonmH8c.js} +1 -1
  263. package/src/console/ui/dist/assets/{panel-flows-BtrVn-Eg.js → panel-flows-DlCU5zjA.js} +2 -2
  264. package/src/console/ui/dist/assets/{panel-gates-Z9MKRGdH.js → panel-gates-XclZxWD5.js} +1 -1
  265. package/src/console/ui/dist/assets/{panel-overview-Dt_AeXgd.js → panel-overview-BznEOTnb.js} +1 -1
  266. package/src/console/ui/dist/assets/{panel-plugins-DWd0TowH.js → panel-plugins-CcGM1g64.js} +1 -1
  267. package/src/console/ui/dist/assets/{panel-runs-DGstFHeq.js → panel-runs-CGWNHLR4.js} +1 -1
  268. package/src/console/ui/dist/assets/{panel-signals-DzEa2Fnt.js → panel-signals-CNywkdak.js} +1 -1
  269. package/src/console/ui/dist/assets/{panel-store-BJkbNgxx.js → panel-store-KmTbFHMH.js} +1 -1
  270. package/src/console/ui/dist/assets/{panel-traces-BaRVO3gM.js → panel-traces-DBLx2ilD.js} +1 -1
  271. package/src/console/ui/dist/assets/panel-vault-CEnFc0dk.js +1 -0
  272. package/src/console/ui/dist/index.html +1 -1
  273. package/src/console/ui/flows/FlowsA11yView.tsx +7 -22
  274. package/src/console/ui/flows/a11y.test.tsx +2 -8
  275. package/src/console/ui/flows/buffer.test.ts +3 -11
  276. package/src/console/ui/flows/buffer.ts +4 -11
  277. package/src/console/ui/flows/confirmation.ts +1 -3
  278. package/src/console/ui/flows/contract.test.ts +3 -7
  279. package/src/console/ui/flows/contract.ts +12 -36
  280. package/src/console/ui/flows/graph.test.ts +3 -11
  281. package/src/console/ui/flows/graph.ts +5 -15
  282. package/src/console/ui/flows/index.ts +1 -6
  283. package/src/console/ui/flows/save-as-test.ts +1 -3
  284. package/src/console/ui/flows/search.ts +8 -25
  285. package/src/console/ui/flows/tiers.ts +2 -9
  286. package/src/console/ui/gates/GatesA11yView.tsx +4 -13
  287. package/src/console/ui/gates/a11y.test.tsx +2 -5
  288. package/src/console/ui/gates/audit.ts +1 -3
  289. package/src/console/ui/gates/denial.test.ts +1 -3
  290. package/src/console/ui/gates/denial.ts +4 -12
  291. package/src/console/ui/gates/findings.ts +1 -3
  292. package/src/console/ui/gates/group.test.ts +3 -3
  293. package/src/console/ui/gates/group.ts +3 -11
  294. package/src/console/ui/gates/index.ts +2 -10
  295. package/src/console/ui/gates/search.ts +3 -10
  296. package/src/console/ui/overview/OverviewA11yView.tsx +9 -27
  297. package/src/console/ui/overview/a11y.test.tsx +1 -2
  298. package/src/console/ui/overview/busiest.ts +1 -3
  299. package/src/console/ui/overview/compose.ts +1 -13
  300. package/src/console/ui/overview/cost.ts +34 -38
  301. package/src/console/ui/overview/fixture.ts +21 -26
  302. package/src/console/ui/overview/golden.ts +4 -14
  303. package/src/console/ui/overview/index.ts +2 -9
  304. package/src/console/ui/overview/rank.test.ts +3 -10
  305. package/src/console/ui/overview/rank.ts +2 -7
  306. package/src/console/ui/overview/slo.test.ts +5 -9
  307. package/src/console/ui/overview/slo.ts +6 -23
  308. package/src/console/ui/overview/verdict.ts +3 -10
  309. package/src/console/ui/plugins/PluginsA11yView.tsx +8 -18
  310. package/src/console/ui/plugins/a11y.test.tsx +1 -2
  311. package/src/console/ui/plugins/fixture.ts +2 -4
  312. package/src/console/ui/plugins/group.test.ts +1 -3
  313. package/src/console/ui/plugins/group.ts +1 -6
  314. package/src/console/ui/plugins/index.ts +3 -13
  315. package/src/console/ui/plugins/search.ts +7 -19
  316. package/src/console/ui/runs/RunsA11yView.tsx +5 -20
  317. package/src/console/ui/runs/a11y.test.tsx +2 -5
  318. package/src/console/ui/runs/explain.ts +2 -6
  319. package/src/console/ui/runs/group.ts +3 -12
  320. package/src/console/ui/runs/histogram.test.ts +2 -11
  321. package/src/console/ui/runs/histogram.ts +1 -4
  322. package/src/console/ui/runs/index.ts +4 -18
  323. package/src/console/ui/runs/project.ts +2 -6
  324. package/src/console/ui/runs/query.test.ts +1 -3
  325. package/src/console/ui/runs/query.ts +12 -35
  326. package/src/console/ui/runs/search.ts +5 -19
  327. package/src/console/ui/runs/trace-link.test.ts +2 -6
  328. package/src/console/ui/runs/trace-link.ts +4 -16
  329. package/src/console/ui/runs/types.ts +1 -3
  330. package/src/console/ui/shell/App.tsx +2 -10
  331. package/src/console/ui/shell/client.ts +22 -115
  332. package/src/console/ui/shell/components/ui.tsx +1 -4
  333. package/src/console/ui/shell/layout/Shell.tsx +2 -4
  334. package/src/console/ui/shell/main.tsx +31 -96
  335. package/src/console/ui/shell/panels/access/AccessPanel.tsx +34 -98
  336. package/src/console/ui/shell/panels/ai/AiPanel.tsx +35 -106
  337. package/src/console/ui/shell/panels/architecture/ArchitecturePanel.tsx +18 -66
  338. package/src/console/ui/shell/panels/channels/ChannelsPanel.tsx +20 -57
  339. package/src/console/ui/shell/panels/clock/ClockPanel.tsx +22 -54
  340. package/src/console/ui/shell/panels/diff/DiffPanel.tsx +20 -61
  341. package/src/console/ui/shell/panels/flows/ContractEditor.tsx +6 -23
  342. package/src/console/ui/shell/panels/flows/FlowDrawer.tsx +13 -28
  343. package/src/console/ui/shell/panels/flows/FlowsPanel.tsx +9 -29
  344. package/src/console/ui/shell/panels/gates/GatesPanel.tsx +24 -80
  345. package/src/console/ui/shell/panels/overview/OverviewPanel.tsx +20 -58
  346. package/src/console/ui/shell/panels/plugins/PluginsPanel.tsx +16 -41
  347. package/src/console/ui/shell/panels/runs/RunsPanel.tsx +31 -99
  348. package/src/console/ui/shell/panels/signals/SignalsPanel.tsx +38 -101
  349. package/src/console/ui/shell/panels/store/StorePanel.tsx +27 -66
  350. package/src/console/ui/shell/panels/traces/TracesPanel.tsx +28 -89
  351. package/src/console/ui/shell/panels/vault/VaultPanel.tsx +22 -53
  352. package/src/console/ui/shell/setup/Wizard.tsx +3 -5
  353. package/src/console/ui/shell/styles.css +1 -2
  354. package/src/console/ui/signals/SignalsA11yView.tsx +9 -33
  355. package/src/console/ui/signals/a11y.test.tsx +2 -5
  356. package/src/console/ui/signals/confirmation.test.ts +1 -5
  357. package/src/console/ui/signals/confirmation.ts +2 -6
  358. package/src/console/ui/signals/dry-run.ts +1 -3
  359. package/src/console/ui/signals/durable.ts +1 -3
  360. package/src/console/ui/signals/findings.ts +1 -3
  361. package/src/console/ui/signals/group.test.ts +2 -8
  362. package/src/console/ui/signals/group.ts +2 -10
  363. package/src/console/ui/signals/index.ts +1 -4
  364. package/src/console/ui/signals/monitor.ts +2 -7
  365. package/src/console/ui/signals/schema-form.test.ts +3 -14
  366. package/src/console/ui/signals/schema-form.ts +1 -4
  367. package/src/console/ui/signals/search.ts +4 -13
  368. package/src/console/ui/store/StoreA11yView.tsx +3 -9
  369. package/src/console/ui/store/a11y.test.tsx +2 -5
  370. package/src/console/ui/store/confirmation.test.ts +1 -3
  371. package/src/console/ui/store/confirmation.ts +1 -4
  372. package/src/console/ui/store/dry-run.ts +2 -5
  373. package/src/console/ui/store/fixture.ts +1 -2
  374. package/src/console/ui/store/group.test.ts +1 -6
  375. package/src/console/ui/store/group.ts +1 -4
  376. package/src/console/ui/store/index.ts +1 -5
  377. package/src/console/ui/store/search.ts +2 -6
  378. package/src/console/ui/store/will-not-fire.ts +1 -2
  379. package/src/console/ui/traces/TracesA11yView.tsx +10 -29
  380. package/src/console/ui/traces/a11y.test.tsx +1 -2
  381. package/src/console/ui/traces/chain.test.ts +5 -19
  382. package/src/console/ui/traces/chain.ts +1 -3
  383. package/src/console/ui/traces/critical-path.test.ts +1 -3
  384. package/src/console/ui/traces/critical-path.ts +2 -6
  385. package/src/console/ui/traces/filter.test.ts +2 -6
  386. package/src/console/ui/traces/filter.ts +5 -13
  387. package/src/console/ui/traces/fold.test.ts +4 -12
  388. package/src/console/ui/traces/fold.ts +1 -3
  389. package/src/console/ui/traces/mini.ts +1 -3
  390. package/src/console/ui/traces/replay.test.ts +1 -3
  391. package/src/console/ui/traces/replay.ts +1 -3
  392. package/src/console/ui/traces/sampling.ts +1 -4
  393. package/src/console/ui/traces/search.ts +4 -17
  394. package/src/console/ui/traces/tier.ts +1 -3
  395. package/src/console/ui/vault/VaultA11yView.tsx +5 -17
  396. package/src/console/ui/vault/a11y.test.tsx +1 -2
  397. package/src/console/ui/vault/blast-radius.ts +1 -3
  398. package/src/console/ui/vault/confirmation.test.ts +1 -5
  399. package/src/console/ui/vault/confirmation.ts +1 -4
  400. package/src/console/ui/vault/dormant.test.ts +1 -4
  401. package/src/console/ui/vault/export-safe.test.ts +1 -5
  402. package/src/console/ui/vault/export-safe.ts +1 -4
  403. package/src/console/ui/vault/fixture.ts +3 -3
  404. package/src/console/ui/vault/group.ts +1 -2
  405. package/src/console/ui/vault/index.ts +2 -10
  406. package/src/console/ui/vault/search.ts +2 -6
  407. package/src/console/ui/vault/types.ts +1 -1
  408. package/src/console/xss.gate.test.ts +1 -3
  409. package/src/docker/compose.ts +215 -27
  410. package/src/docker/derive.ts +6 -14
  411. package/src/docker/docker.test.ts +118 -15
  412. package/src/docker/dockerfile.integration.test.ts +12 -21
  413. package/src/docker/helpers.ts +5 -4
  414. package/src/docker/index.ts +9 -6
  415. package/src/docker/pin.ts +1 -9
  416. package/src/docker/recipes/index.ts +6 -6
  417. package/src/docker/recipes/mailpit.ts +22 -0
  418. package/src/docker/recipes/openbao.ts +47 -0
  419. package/src/docker/recipes/postgres.ts +17 -6
  420. package/src/docker/recipes/redis.ts +11 -2
  421. package/src/docker/recipes/rustfs.ts +32 -0
  422. package/src/docker/stack-id.test.ts +73 -5
  423. package/src/docker/stack-id.ts +124 -33
  424. package/src/docker/stack.integration.test.ts +6 -21
  425. package/src/docker/stack.ts +36 -4
  426. package/src/docker/types.ts +16 -4
  427. package/src/docs-origin.ts +4 -4
  428. package/src/drivers/ai-anthropic.ts +5 -14
  429. package/src/drivers/ai-mock.ts +2 -5
  430. package/src/drivers/ai-openai-compatible.ts +4 -10
  431. package/src/drivers/ai-providers.test.ts +6 -13
  432. package/src/drivers/bun-native-completeness.test.ts +6 -15
  433. package/src/drivers/channel-console.ts +6 -7
  434. package/src/drivers/channel-fcm.ts +20 -30
  435. package/src/drivers/channel-resend.ts +1 -3
  436. package/src/drivers/channel-smtp.ts +2 -6
  437. package/src/drivers/channel-types.ts +2 -12
  438. package/src/drivers/channel-unifonic.ts +2 -6
  439. package/src/drivers/channel-wa-cloud.ts +2 -6
  440. package/src/drivers/channel-webpush.ts +21 -60
  441. package/src/drivers/conformance.test.ts +2 -10
  442. package/src/drivers/conformance.ts +8 -21
  443. package/src/drivers/drizzle-dialect.test.ts +20 -0
  444. package/src/drivers/drizzle-dialect.ts +37 -0
  445. package/src/drivers/fs.ts +2 -8
  446. package/src/drivers/index.ts +12 -57
  447. package/src/drivers/memory.ts +287 -75
  448. package/src/drivers/pgvector.ts +7 -11
  449. package/src/drivers/postgres.ts +7 -13
  450. package/src/drivers/redis.ts +13 -37
  451. package/src/drivers/s3.ts +15 -18
  452. package/src/drivers/signal-engine.ts +12 -49
  453. package/src/drivers/signal-memory.ts +2 -8
  454. package/src/drivers/signal-nats.ts +4 -9
  455. package/src/drivers/signal-postgres.ts +62 -129
  456. package/src/drivers/signal-redis.ts +7 -21
  457. package/src/drivers/signal-types.ts +1 -4
  458. package/src/drivers/sqlite.ts +3 -12
  459. package/src/drivers/types.ts +4 -23
  460. package/src/drivers/vault-driver-removal.test.ts +55 -0
  461. package/src/drivers/vault-env.ts +2 -6
  462. package/src/drivers/vault-infisical.ts +1 -5
  463. package/src/drivers/vault-managed.ts +1 -5
  464. package/src/drivers/vault-memory.ts +1 -5
  465. package/src/drivers/vault-openbao.test.ts +97 -0
  466. package/src/drivers/vault-openbao.ts +103 -40
  467. package/src/drivers/vault-types.ts +3 -16
  468. package/src/elements/ai/declare.ts +4 -14
  469. package/src/elements/ai/eval.ts +2 -6
  470. package/src/elements/ai/pii.ts +1 -3
  471. package/src/elements/ai/runtime.ts +12 -50
  472. package/src/elements/ai/schema.ts +4 -15
  473. package/src/elements/ai.test.ts +13 -24
  474. package/src/elements/ai.ts +1 -5
  475. package/src/elements/channel/consent.ts +3 -12
  476. package/src/elements/channel/costs.ts +4 -15
  477. package/src/elements/channel/declare.ts +1 -4
  478. package/src/elements/channel/email-auth.ts +1 -4
  479. package/src/elements/channel/locale.ts +2 -10
  480. package/src/elements/channel/mask.ts +1 -3
  481. package/src/elements/channel/mime.ts +2 -12
  482. package/src/elements/channel/outcomes.test.ts +1 -5
  483. package/src/elements/channel/outcomes.ts +5 -15
  484. package/src/elements/channel/receipts.ts +2 -7
  485. package/src/elements/channel/runtime.ts +28 -74
  486. package/src/elements/channel/suppression.ts +8 -14
  487. package/src/elements/channel.test.ts +8 -31
  488. package/src/elements/channel.ts +3 -14
  489. package/src/elements/clock/actions.ts +6 -18
  490. package/src/elements/clock/declare.ts +1 -3
  491. package/src/elements/clock/dst.ts +1 -5
  492. package/src/elements/clock/durable.ts +4 -16
  493. package/src/elements/clock/health.ts +2 -7
  494. package/src/elements/clock/leader.ts +2 -9
  495. package/src/elements/clock/reconcile.ts +4 -15
  496. package/src/elements/clock/runtime.ts +2 -5
  497. package/src/elements/clock/schedule.ts +4 -20
  498. package/src/elements/clock.test.ts +2 -7
  499. package/src/elements/clock.ts +5 -23
  500. package/src/elements/gate/permissions.ts +1 -4
  501. package/src/elements/gate/runtime.ts +7 -28
  502. package/src/elements/gate.ts +1 -5
  503. package/src/elements/index.ts +9 -7
  504. package/src/elements/signal/declare.ts +2 -7
  505. package/src/elements/signal/reconcile.test.ts +1 -4
  506. package/src/elements/signal/runtime.ts +1 -3
  507. package/src/elements/signal.test.ts +3 -15
  508. package/src/elements/signal.ts +2 -8
  509. package/src/elements/store/cache.test.ts +46 -0
  510. package/src/elements/store/cache.ts +3 -11
  511. package/src/elements/store/classify.ts +5 -22
  512. package/src/elements/store/declare.ts +11 -17
  513. package/src/elements/store/domain-ddl.test.ts +86 -0
  514. package/src/elements/store/emit-drizzle.ts +363 -0
  515. package/src/elements/store/files-policy.test.ts +1 -5
  516. package/src/elements/store/files-policy.ts +4 -12
  517. package/src/elements/store/load-plugin-tables.ts +103 -0
  518. package/src/elements/store/missing-relation.test.ts +83 -0
  519. package/src/elements/store/missing-relation.ts +38 -0
  520. package/src/elements/store/replica.ts +1 -4
  521. package/src/elements/store/resource-list-docs.fixture.ts +56 -0
  522. package/src/elements/store/resource-list-docs.test.ts +79 -0
  523. package/src/elements/store/resource.test.ts +253 -0
  524. package/src/elements/store/resource.ts +786 -0
  525. package/src/elements/store/runtime.ts +25 -28
  526. package/src/elements/store/schema-decl.test.ts +227 -0
  527. package/src/elements/store/schema-decl.ts +516 -0
  528. package/src/elements/store/sql-condition.test.ts +132 -0
  529. package/src/elements/store/sql-condition.ts +293 -65
  530. package/src/elements/store/sql-session.test.ts +135 -0
  531. package/src/elements/store/sql-session.ts +241 -84
  532. package/src/elements/store/table.ts +69 -23
  533. package/src/elements/store.test.ts +17 -39
  534. package/src/elements/store.ts +53 -31
  535. package/src/elements/vault/chain.ts +34 -0
  536. package/src/elements/vault/declare.ts +22 -32
  537. package/src/elements/vault/fingerprint.ts +2 -7
  538. package/src/elements/vault/redact.ts +2 -6
  539. package/src/elements/vault/runtime.ts +19 -33
  540. package/src/elements/vault.test.ts +12 -55
  541. package/src/elements/vault.ts +9 -13
  542. package/src/index.ts +5 -2
  543. package/src/kernel/adopt-routes.ts +15 -29
  544. package/src/kernel/app.ts +92 -118
  545. package/src/kernel/auth-resolve.ts +2 -9
  546. package/src/kernel/boot-bind/ai.ts +1 -4
  547. package/src/kernel/boot-bind/channel.test.ts +60 -0
  548. package/src/kernel/boot-bind/channel.ts +61 -5
  549. package/src/kernel/boot-bind/clock.ts +2 -6
  550. package/src/kernel/boot-bind/gate.ts +2 -8
  551. package/src/kernel/boot-bind/runs.ts +1 -3
  552. package/src/kernel/boot-bind/signal.ts +3 -10
  553. package/src/kernel/boot-bind/store.test.ts +27 -18
  554. package/src/kernel/boot-bind/store.ts +93 -52
  555. package/src/kernel/boot-bind/vault.ts +2 -8
  556. package/src/kernel/boot.test.ts +4 -10
  557. package/src/kernel/boot.ts +30 -77
  558. package/src/kernel/budget.test.ts +1 -3
  559. package/src/kernel/capability.ts +3 -10
  560. package/src/kernel/dry-run.test.ts +1 -4
  561. package/src/kernel/dry-run.ts +3 -11
  562. package/src/kernel/edge.test.ts +68 -0
  563. package/src/kernel/effects.test.ts +1 -5
  564. package/src/kernel/effects.ts +4 -11
  565. package/src/kernel/errors.registry.test.ts +2 -8
  566. package/src/kernel/errors.ts +23 -32
  567. package/src/kernel/flow.test.ts +12 -25
  568. package/src/kernel/flow.ts +13 -25
  569. package/src/kernel/fx.test.ts +31 -40
  570. package/src/kernel/fx.ts +135 -90
  571. package/src/kernel/hook-timing.test.ts +3 -6
  572. package/src/kernel/hook-timing.ts +5 -14
  573. package/src/kernel/hooks.test.ts +43 -10
  574. package/src/kernel/hooks.ts +25 -12
  575. package/src/kernel/index.ts +11 -17
  576. package/src/kernel/journal.ts +7 -31
  577. package/src/kernel/on.ts +45 -9
  578. package/src/kernel/pipeline.test.ts +10 -19
  579. package/src/kernel/pipeline.ts +5 -17
  580. package/src/kernel/plug.ts +4 -11
  581. package/src/kernel/plugin/conflicts.test.ts +13 -25
  582. package/src/kernel/plugin/decorate.test.ts +8 -13
  583. package/src/kernel/plugin/scoping.test.ts +4 -11
  584. package/src/kernel/plugin.ts +81 -27
  585. package/src/kernel/registry-isolation.test.ts +74 -0
  586. package/src/kernel/registry.ts +102 -30
  587. package/src/kernel/router.test.ts +15 -13
  588. package/src/kernel/router.ts +9 -29
  589. package/src/kernel/routing-budget.test.ts +1 -3
  590. package/src/kernel/run-telemetry.ts +1 -3
  591. package/src/kernel/triggers.ts +63 -21
  592. package/src/manifest/diff.test.ts +26 -91
  593. package/src/manifest/diff.ts +95 -225
  594. package/src/manifest/fixtures/skyport.excerpt.json +1 -1
  595. package/src/manifest/fixtures/skyport.manifest.json +1 -1
  596. package/src/manifest/index.ts +3 -10
  597. package/src/manifest/types.ts +30 -6
  598. package/src/manifest/undeclared.test.ts +4 -12
  599. package/src/manifest/undeclared.ts +1 -2
  600. package/src/manifest/validate.test.ts +2 -6
  601. package/src/manifest/validate.ts +5 -15
  602. package/src/mcp/authorization.ts +8 -27
  603. package/src/mcp/confirmation.ts +3 -10
  604. package/src/mcp/data.ts +2 -6
  605. package/src/mcp/docs-index.ts +4 -7
  606. package/src/mcp/docs-mcp.test.ts +3 -12
  607. package/src/mcp/docs-server.ts +7 -27
  608. package/src/mcp/docs-tools.ts +2 -6
  609. package/src/mcp/index.ts +1 -6
  610. package/src/mcp/injection.gate.test.ts +4 -18
  611. package/src/mcp/mcp.test.ts +18 -49
  612. package/src/mcp/protocol.ts +3 -10
  613. package/src/mcp/server.ts +11 -52
  614. package/src/mcp/session.ts +4 -14
  615. package/src/mcp/tools.ts +14 -50
  616. package/src/plugins/catalogue.test.ts +3 -7
  617. package/src/plugins/catalogue.ts +1 -3
  618. package/src/plugins/compression.test.ts +127 -0
  619. package/src/plugins/compression.ts +94 -0
  620. package/src/plugins/config-source.test.ts +204 -0
  621. package/src/plugins/config-source.ts +209 -0
  622. package/src/plugins/cors.test.ts +138 -0
  623. package/src/plugins/cors.ts +129 -0
  624. package/src/plugins/csrf.test.ts +102 -0
  625. package/src/plugins/csrf.ts +86 -0
  626. package/src/plugins/headers.ts +54 -0
  627. package/src/plugins/index.ts +26 -0
  628. package/src/plugins/ip-allowlist.test.ts +105 -0
  629. package/src/plugins/ip-allowlist.ts +76 -0
  630. package/src/plugins/maintenance-mode.test.ts +91 -0
  631. package/src/plugins/maintenance-mode.ts +85 -0
  632. package/src/plugins/node-import-scan.ts +2 -5
  633. package/src/plugins/security-headers.test.ts +243 -0
  634. package/src/plugins/security-headers.ts +255 -0
  635. package/src/plugins/supply-chain.ts +5 -17
  636. package/src/release/exports.ts +3 -8
  637. package/src/release/measure.exports.test.ts +1 -3
  638. package/src/release/measure.ts +16 -45
  639. package/src/runs/bench.test.ts +1 -3
  640. package/src/runs/collect.ts +8 -25
  641. package/src/runs/drivers/clickhouse.ts +2 -9
  642. package/src/runs/drivers/files.ts +9 -31
  643. package/src/runs/drivers/memory.ts +5 -22
  644. package/src/runs/drivers/postgres.ts +8 -20
  645. package/src/runs/duckdb.ts +2 -8
  646. package/src/runs/index.ts +3 -14
  647. package/src/runs/outlier.ts +3 -10
  648. package/src/runs/parquet.ts +8 -26
  649. package/src/runs/privacy.ts +2 -8
  650. package/src/runs/runs.test.ts +3 -9
  651. package/src/runs/runtime.ts +7 -32
  652. package/src/runs/shred.ts +10 -29
  653. package/src/runs/types.ts +1 -4
  654. package/src/runtime/bun.ts +4 -15
  655. package/src/runtime/cold-start.bench.ts +1 -3
  656. package/src/runtime/dev-request-log.test.ts +1 -4
  657. package/src/runtime/dev-request-log.ts +1 -4
  658. package/src/runtime/index.ts +1 -6
  659. package/src/runtime/primitives.ts +5 -4
  660. package/src/runtime/security.ts +3 -13
  661. package/src/runtime/serve.test.ts +4 -7
  662. package/src/runtime/types.ts +1 -4
  663. package/src/runtime/web-standard.ts +3 -15
  664. package/src/term.test.ts +4 -6
  665. package/src/term.ts +49 -98
  666. package/src/test/create-test-app.test.ts +4 -14
  667. package/src/test/create-test-app.ts +27 -33
  668. package/src/test/provisions.integration.test.ts +3 -11
  669. package/src/upgrade/codemods.test.ts +25 -6
  670. package/src/upgrade/codemods.ts +116 -3
  671. package/src/validation/standard-schema.test.ts +2 -5
  672. package/src/validation/standard-schema.ts +13 -33
  673. package/docs/spec/console.md +0 -739
  674. package/docs/spec/example.md +0 -1196
  675. package/docs/spec/four-applications.md +0 -1195
  676. package/docs/spec/unified-theory.md +0 -489
  677. package/src/cli/doc-drift.test.ts +0 -146
  678. package/src/cli/doc-drift.ts +0 -430
  679. package/src/cli/doctor-diff-examples.ts +0 -92
  680. package/src/console/ui/dist/assets/panel-vault-BbfWdox0.js +0 -1
  681. package/src/drivers/vault-sops.ts +0 -271
@@ -16,8 +16,7 @@ describe("Gates panel accessibility", () => {
16
16
  let container: HTMLElement;
17
17
 
18
18
  beforeEach(() => {
19
- (globalThis as { IS_REACT_ACT_ENVIRONMENT?: boolean }).IS_REACT_ACT_ENVIRONMENT =
20
- true;
19
+ (globalThis as { IS_REACT_ACT_ENVIRONMENT?: boolean }).IS_REACT_ACT_ENVIRONMENT = true;
21
20
  window = new Window({ url: "http://console.test/gates" });
22
21
  Object.defineProperty(globalThis, "window", {
23
22
  value: window,
@@ -97,9 +96,7 @@ describe("Gates panel accessibility", () => {
97
96
 
98
97
  test("axe reports zero violations at WCAG 2.2 AA (from principal)", async () => {
99
98
  await act(async () => {
100
- root.render(
101
- <GatesA11yView from="principal" openPrincipal="role:role_member" />,
102
- );
99
+ root.render(<GatesA11yView from="principal" openPrincipal="role:role_member" />);
103
100
  });
104
101
 
105
102
  await new Promise((r) => setTimeout(r, 10));
@@ -56,8 +56,6 @@ export function auditLines(audit: GateAuditRecord): readonly AuditLine[] {
56
56
  */
57
57
  export function formatViolation(violation: PlaneViolationRecord): string {
58
58
  const scopes = violation.applicationScopes.join(", ");
59
- const who = violation.email
60
- ? `${violation.name} <${violation.email}>`
61
- : violation.name;
59
+ const who = violation.email ? `${violation.name} <${violation.email}>` : violation.name;
62
60
  return `${who} holds application scope(s): ${scopes}`;
63
61
  }
@@ -26,9 +26,7 @@ describe("formatDenial", () => {
26
26
 
27
27
  describe("formatEvaluationStep", () => {
28
28
  test("preserves registration order marks", () => {
29
- const steps = SIMULATE_RATE_FIXTURE.evaluations.map((e, i) =>
30
- formatEvaluationStep(e, i),
31
- );
29
+ const steps = SIMULATE_RATE_FIXTURE.evaluations.map((e, i) => formatEvaluationStep(e, i));
32
30
  expect(steps[0]).toContain("pass");
33
31
  expect(steps[2]).toContain("deny");
34
32
  expect(steps[2]).toContain("retryAfterMs 12000");
@@ -12,17 +12,12 @@ import type { GateDenialRecord, GateEvaluationRecord } from "./types.ts";
12
12
  export function formatDenial(denial: GateDenialRecord): string {
13
13
  switch (denial.code) {
14
14
  case "RateLimited": {
15
- const ms =
16
- typeof denial.data.retryAfterMs === "number"
17
- ? denial.data.retryAfterMs
18
- : 0;
15
+ const ms = typeof denial.data.retryAfterMs === "number" ? denial.data.retryAfterMs : 0;
19
16
  return `RateLimited { retryAfterMs: ${ms} } · HTTP ${denial.status}`;
20
17
  }
21
18
  case "Forbidden": {
22
- const gate =
23
- typeof denial.data.gate === "string" ? denial.data.gate : "?";
24
- const reason =
25
- typeof denial.data.reason === "string" ? denial.data.reason : "";
19
+ const gate = typeof denial.data.gate === "string" ? denial.data.gate : "?";
20
+ const reason = typeof denial.data.reason === "string" ? denial.data.reason : "";
26
21
  return `Forbidden { gate: ${gate}${reason ? `, reason: ${reason}` : ""} } · HTTP ${denial.status}`;
27
22
  }
28
23
  case "Unauthorized":
@@ -36,10 +31,7 @@ export function formatDenial(denial: GateDenialRecord): string {
36
31
  * @param evaluation - Step
37
32
  * @param index - 0-based order
38
33
  */
39
- export function formatEvaluationStep(
40
- evaluation: GateEvaluationRecord,
41
- index: number,
42
- ): string {
34
+ export function formatEvaluationStep(evaluation: GateEvaluationRecord, index: number): string {
43
35
  const mark = evaluation.allowed ? "pass" : "deny";
44
36
  const extra =
45
37
  evaluation.kind === "rate" && evaluation.retryAfterMs !== undefined
@@ -12,8 +12,6 @@ import type { GateAuditRecord } from "./types.ts";
12
12
  *
13
13
  * @param audit - Gates audit record
14
14
  */
15
- export function unguardedFlowFindings(
16
- audit: GateAuditRecord,
17
- ): readonly AuditLine[] {
15
+ export function unguardedFlowFindings(audit: GateAuditRecord): readonly AuditLine[] {
18
16
  return auditLines(audit).filter((line) => line.code === "unguarded");
19
17
  }
@@ -23,8 +23,8 @@ describe("groupFlows", () => {
23
23
  const groups = groupFlows(GATES_LIST_FIXTURE.flows);
24
24
  const user = groups.find((g) => g.id === "user");
25
25
  expect(user?.items.some((i) => i.flag === "unguarded")).toBe(true);
26
- expect(
27
- user?.items.find((i) => i.id === "bookings.create")?.meta,
28
- ).toContain("member → booking:create");
26
+ expect(user?.items.find((i) => i.id === "bookings.create")?.meta).toContain(
27
+ "member booking:create",
28
+ );
29
29
  });
30
30
  });
@@ -4,11 +4,7 @@
4
4
  * The roles × permissions matrix is refused as an entry point.
5
5
  */
6
6
 
7
- import type {
8
- FlowGatesRecord,
9
- GatesListGroup,
10
- PrincipalRecord,
11
- } from "./types.ts";
7
+ import type { FlowGatesRecord, GatesListGroup, PrincipalRecord } from "./types.ts";
12
8
 
13
9
  /**
14
10
  * Group principals by kind for the from-principal inquiry.
@@ -71,8 +67,7 @@ export function groupFlows(
71
67
  const filtered = q
72
68
  ? flows.filter(
73
69
  (f) =>
74
- f.flowId.toLowerCase().includes(q) ||
75
- f.gates.some((g) => g.toLowerCase().includes(q)),
70
+ f.flowId.toLowerCase().includes(q) || f.gates.some((g) => g.toLowerCase().includes(q)),
76
71
  )
77
72
  : flows;
78
73
 
@@ -91,10 +86,7 @@ export function groupFlows(
91
86
  .map((f) => ({
92
87
  id: f.flowId,
93
88
  label: f.flowId,
94
- meta:
95
- f.gates.length === 0
96
- ? "ungated"
97
- : f.gates.join(" → "),
89
+ meta: f.gates.length === 0 ? "ungated" : f.gates.join(" → "),
98
90
  flag: f.unguarded ? "unguarded" : undefined,
99
91
  })),
100
92
  }))
@@ -18,11 +18,7 @@ export type {
18
18
  WideningRecord,
19
19
  } from "./types.ts";
20
20
 
21
- export {
22
- GATES_LIST_FIXTURE,
23
- SIMULATE_ALLOW_FIXTURE,
24
- SIMULATE_RATE_FIXTURE,
25
- } from "./fixture.ts";
21
+ export { GATES_LIST_FIXTURE, SIMULATE_ALLOW_FIXTURE, SIMULATE_RATE_FIXTURE } from "./fixture.ts";
26
22
 
27
23
  export {
28
24
  parseGatesSearch,
@@ -36,11 +32,7 @@ export {
36
32
 
37
33
  export { groupPrincipals, groupFlows } from "./group.ts";
38
34
 
39
- export {
40
- auditLines,
41
- formatViolation,
42
- type AuditLine,
43
- } from "./audit.ts";
35
+ export { auditLines, formatViolation, type AuditLine } from "./audit.ts";
44
36
 
45
37
  export { unguardedFlowFindings } from "./findings.ts";
46
38
 
@@ -24,9 +24,7 @@ export type GatesSearch = z.infer<typeof GatesSearchSchema>;
24
24
  *
25
25
  * @param search - Raw router search
26
26
  */
27
- export function parseGatesSearch(
28
- search: Record<string, unknown>,
29
- ): GatesSearch {
27
+ export function parseGatesSearch(search: Record<string, unknown>): GatesSearch {
30
28
  const parsed = GatesSearchSchema.safeParse(search);
31
29
  return parsed.success ? parsed.data : {};
32
30
  }
@@ -36,9 +34,7 @@ export function parseGatesSearch(
36
34
  *
37
35
  * @param search - Search state
38
36
  */
39
- export function serializeGatesSearch(
40
- search: GatesSearch,
41
- ): Record<string, string> {
37
+ export function serializeGatesSearch(search: GatesSearch): Record<string, string> {
42
38
  const out: Record<string, string> = {};
43
39
  if (search.q) out.q = search.q;
44
40
  if (search.from) out.from = search.from;
@@ -54,10 +50,7 @@ export function serializeGatesSearch(
54
50
  * @param kind - Principal kind
55
51
  * @param id - Principal id
56
52
  */
57
- export function encodePrincipal(
58
- kind: "role" | "key" | "user",
59
- id: string,
60
- ): string {
53
+ export function encodePrincipal(kind: "role" | "key" | "user", id: string): string {
61
54
  return `${kind}:${id}`;
62
55
  }
63
56
 
@@ -4,14 +4,8 @@
4
4
  */
5
5
 
6
6
  import { composeOverview } from "./compose.ts";
7
- import {
8
- OVERVIEW_DAY_ONE_INPUTS,
9
- OVERVIEW_INPUTS_FIXTURE,
10
- } from "./fixture.ts";
11
- import {
12
- formatBudgetDuration,
13
- formatBurnRate,
14
- } from "./verdict.ts";
7
+ import { OVERVIEW_DAY_ONE_INPUTS, OVERVIEW_INPUTS_FIXTURE } from "./fixture.ts";
8
+ import { formatBudgetDuration, formatBurnRate } from "./verdict.ts";
15
9
 
16
10
  /** Props for {@link OverviewA11yView}. */
17
11
  export interface OverviewA11yViewProps {
@@ -25,9 +19,7 @@ export interface OverviewA11yViewProps {
25
19
  * @param props - Fixture selection
26
20
  */
27
21
  export function OverviewA11yView(props: OverviewA11yViewProps = {}) {
28
- const view = composeOverview(
29
- props.dayOne ? OVERVIEW_DAY_ONE_INPUTS : OVERVIEW_INPUTS_FIXTURE,
30
- );
22
+ const view = composeOverview(props.dayOne ? OVERVIEW_DAY_ONE_INPUTS : OVERVIEW_INPUTS_FIXTURE);
31
23
 
32
24
  return (
33
25
  <div className="overview-a11y">
@@ -50,13 +42,8 @@ export function OverviewA11yView(props: OverviewA11yViewProps = {}) {
50
42
  </span>
51
43
  <span> {s.availability}</span>
52
44
  <span> burn {formatBurnRate(s.burnRate)}</span>
53
- <span>
54
- {" "}
55
- exhausts {formatBudgetDuration(s.timeToExhaustionMs)}
56
- </span>
57
- {s.ceremonial ? (
58
- <span role="status"> CEREMONIAL</span>
59
- ) : null}
45
+ <span> exhausts {formatBudgetDuration(s.timeToExhaustionMs)}</span>
46
+ {s.ceremonial ? <span role="status"> CEREMONIAL</span> : null}
60
47
  </li>
61
48
  ))}
62
49
  </ul>
@@ -77,10 +64,7 @@ export function OverviewA11yView(props: OverviewA11yViewProps = {}) {
77
64
  ${c.spent.toFixed(2)} / ${c.declaredBudget.toFixed(2)}
78
65
  </span>
79
66
  <span> burn {formatBurnRate(c.burnRate)}</span>
80
- <span>
81
- {" "}
82
- exhausts {formatBudgetDuration(c.timeToExhaustionMs)}
83
- </span>
67
+ <span> exhausts {formatBudgetDuration(c.timeToExhaustionMs)}</span>
84
68
  </li>
85
69
  ))}
86
70
  </ul>
@@ -138,11 +122,9 @@ export function OverviewA11yView(props: OverviewA11yViewProps = {}) {
138
122
  <h2>Declare a first objective</h2>
139
123
  <p>
140
124
  Your busiest flow is{" "}
141
- <a href={view.firstSloInvite.href}>
142
- {view.firstSloInvite.busiestFlow}
143
- </a>{" "}
144
- ({view.firstSloInvite.runCount} runs). Add{" "}
145
- <code>slo: {"{ availability: \"99.9%\" }"}</code> on that flow.
125
+ <a href={view.firstSloInvite.href}>{view.firstSloInvite.busiestFlow}</a> (
126
+ {view.firstSloInvite.runCount} runs). Add{" "}
127
+ <code>slo: {'{ availability: "99.9%" }'}</code> on that flow.
146
128
  </p>
147
129
  </section>
148
130
  ) : null}
@@ -16,8 +16,7 @@ describe("Overview panel accessibility", () => {
16
16
  let container: HTMLElement;
17
17
 
18
18
  beforeEach(() => {
19
- (globalThis as { IS_REACT_ACT_ENVIRONMENT?: boolean }).IS_REACT_ACT_ENVIRONMENT =
20
- true;
19
+ (globalThis as { IS_REACT_ACT_ENVIRONMENT?: boolean }).IS_REACT_ACT_ENVIRONMENT = true;
21
20
  window = new Window({ url: "http://console.test/overview" });
22
21
  Object.defineProperty(globalThis, "window", {
23
22
  value: window,
@@ -11,9 +11,7 @@ import type { FirstSloInvite } from "./types.ts";
11
11
  *
12
12
  * @param runs - Real Runs population
13
13
  */
14
- export function firstSloInvite(
15
- runs: readonly RunRecord[],
16
- ): FirstSloInvite | null {
14
+ export function firstSloInvite(runs: readonly RunRecord[]): FirstSloInvite | null {
17
15
  if (runs.length === 0) return null;
18
16
  const groups = groupByDimension(runs, "flow");
19
17
  const top = groups[0];
@@ -48,19 +48,7 @@ export interface OverviewInputs {
48
48
  * @param inputs - Aggregated panel data
49
49
  */
50
50
  export function composeOverview(inputs: OverviewInputs): OverviewView {
51
- const {
52
- manifest,
53
- runs,
54
- gates,
55
- signals,
56
- clock,
57
- vault,
58
- channels,
59
- ai,
60
- diff,
61
- access,
62
- now,
63
- } = inputs;
51
+ const { manifest, runs, gates, signals, clock, vault, channels, ai, diff, access, now } = inputs;
64
52
 
65
53
  const graph =
66
54
  inputs.architectureGraph !== undefined
@@ -32,18 +32,18 @@ export function computeCostBudgets(options: {
32
32
  const budget = flow.cost?.budget;
33
33
  if (budget == null || budget <= 0) continue;
34
34
  const spent = sumCost(
35
- runs.filter(
36
- (r) => r.flow === name && r.startedAt >= from && r.startedAt <= now,
37
- ),
35
+ runs.filter((r) => r.flow === name && r.startedAt >= from && r.startedAt <= now),
36
+ );
37
+ out.push(
38
+ budgetRow({
39
+ id: `flow:${name}`,
40
+ name,
41
+ kind: "flow",
42
+ declaredBudget: budget,
43
+ spent,
44
+ windowMs: COST_WINDOW_MS,
45
+ }),
38
46
  );
39
- out.push(budgetRow({
40
- id: `flow:${name}`,
41
- name,
42
- kind: "flow",
43
- declaredBudget: budget,
44
- spent,
45
- windowMs: COST_WINDOW_MS,
46
- }));
47
47
  }
48
48
 
49
49
  if (ai) {
@@ -51,9 +51,7 @@ export function computeCostBudgets(options: {
51
51
  const cap = prompt.budgetMaxCostPerCall;
52
52
  if (cap == null || cap <= 0) continue;
53
53
  const version =
54
- ai.versions.find(
55
- (v) => v.prompt === prompt.name && v.version === prompt.version,
56
- ) ??
54
+ ai.versions.find((v) => v.prompt === prompt.name && v.version === prompt.version) ??
57
55
  ai.versions
58
56
  .filter((v) => v.prompt === prompt.name)
59
57
  .sort((a, b) => b.version - a.version)[0];
@@ -61,14 +59,16 @@ export function computeCostBudgets(options: {
61
59
  // Per-call budget × samples in window ≈ declared period budget.
62
60
  const declaredBudget = cap * version.sampleCount;
63
61
  const spent = version.cost.mean * version.sampleCount;
64
- out.push(budgetRow({
65
- id: `ai-prompt:${prompt.name}@${version.version}`,
66
- name: `${prompt.name}@${version.version}`,
67
- kind: "ai-prompt",
68
- declaredBudget,
69
- spent,
70
- windowMs: COST_WINDOW_MS,
71
- }));
62
+ out.push(
63
+ budgetRow({
64
+ id: `ai-prompt:${prompt.name}@${version.version}`,
65
+ name: `${prompt.name}@${version.version}`,
66
+ kind: "ai-prompt",
67
+ declaredBudget,
68
+ spent,
69
+ windowMs: COST_WINDOW_MS,
70
+ }),
71
+ );
72
72
  }
73
73
 
74
74
  for (const agent of ai.agents) {
@@ -78,21 +78,20 @@ export function computeCostBudgets(options: {
78
78
  if (agentRuns.length === 0) continue;
79
79
  const declaredBudget = cap * agentRuns.length;
80
80
  const spent = agentRuns.reduce((a, r) => a + r.cost, 0);
81
- out.push(budgetRow({
82
- id: `ai-agent:${agent.name}`,
83
- name: agent.name,
84
- kind: "ai-agent",
85
- declaredBudget,
86
- spent,
87
- windowMs: COST_WINDOW_MS,
88
- }));
81
+ out.push(
82
+ budgetRow({
83
+ id: `ai-agent:${agent.name}`,
84
+ name: agent.name,
85
+ kind: "ai-agent",
86
+ declaredBudget,
87
+ spent,
88
+ windowMs: COST_WINDOW_MS,
89
+ }),
90
+ );
89
91
  }
90
92
  }
91
93
 
92
- return out.sort(
93
- (a, b) =>
94
- b.burnRate - a.burnRate || a.name.localeCompare(b.name),
95
- );
94
+ return out.sort((a, b) => b.burnRate - a.burnRate || a.name.localeCompare(b.name));
96
95
  }
97
96
 
98
97
  function budgetRow(input: {
@@ -105,10 +104,7 @@ function budgetRow(input: {
105
104
  }): CostBudget {
106
105
  const { declaredBudget, spent, windowMs } = input;
107
106
  const burnRate = declaredBudget <= 0 ? 0 : spent / declaredBudget;
108
- const remainingFraction = Math.max(
109
- 0,
110
- 1 - (declaredBudget <= 0 ? 0 : spent / declaredBudget),
111
- );
107
+ const remainingFraction = Math.max(0, 1 - (declaredBudget <= 0 ? 0 : spent / declaredBudget));
112
108
  let timeToExhaustionMs: number | null = null;
113
109
  if (spent > 0 && burnRate > 0 && remainingFraction > 0) {
114
110
  // At current spend pace, remaining budget lasts:
@@ -85,7 +85,7 @@ export const OVERVIEW_VAULT_FIXTURE = {
85
85
  resolution: [
86
86
  { source: "process.env" as const, present: false, won: false },
87
87
  { source: ".env.local" as const, present: true, won: true },
88
- { source: ".env.stack" as const, present: false, won: false },
88
+ { source: ".env.docker" as const, present: false, won: false },
89
89
  { source: "driver" as const, present: false, won: false },
90
90
  { source: "dev-fallback" as const, present: false, won: false },
91
91
  ],
@@ -106,28 +106,26 @@ export const OVERVIEW_VAULT_FIXTURE = {
106
106
  * Runs that burn bookings.create in the short window
107
107
  * (error rate ≫ 0.1% tolerable for 99.9%).
108
108
  */
109
- export const OVERVIEW_BURN_RUNS: readonly RunRecord[] = Array.from(
110
- { length: 100 },
111
- (_, i) =>
112
- rowToRun({
113
- id: `burn-${i}`,
109
+ export const OVERVIEW_BURN_RUNS: readonly RunRecord[] = Array.from({ length: 100 }, (_, i) =>
110
+ rowToRun({
111
+ id: `burn-${i}`,
112
+ flow: "bookings.create",
113
+ unit: "bookings",
114
+ trigger: "http",
115
+ plane: "user",
116
+ cache: "none",
117
+ cost: 0.05,
118
+ startedAt: OVERVIEW_NOW - 30 * 60_000 + i * 1_000,
119
+ endedAt: OVERVIEW_NOW - 30 * 60_000 + i * 1_000 + 40,
120
+ durationMs: 40,
121
+ error: i < 20 ? "Timeout" : null,
122
+ effects: [],
123
+ logs: [],
124
+ dimensions: {
114
125
  flow: "bookings.create",
115
- unit: "bookings",
116
- trigger: "http",
117
- plane: "user",
118
- cache: "none",
119
- cost: 0.05,
120
- startedAt: OVERVIEW_NOW - 30 * 60_000 + i * 1_000,
121
- endedAt: OVERVIEW_NOW - 30 * 60_000 + i * 1_000 + 40,
122
- durationMs: 40,
123
- error: i < 20 ? "Timeout" : null,
124
- effects: [],
125
- logs: [],
126
- dimensions: {
127
- flow: "bookings.create",
128
- error_code: i < 20 ? "Timeout" : null,
129
- },
130
- }),
126
+ error_code: i < 20 ? "Timeout" : null,
127
+ },
128
+ }),
131
129
  );
132
130
 
133
131
  /** Full Overview inputs — burning SLO + multi-panel findings. */
@@ -151,10 +149,7 @@ export const OVERVIEW_DAY_ONE_INPUTS: OverviewInputs = {
151
149
  manifest: {
152
150
  ...OVERVIEW_MANIFEST,
153
151
  flows: Object.fromEntries(
154
- Object.entries(OVERVIEW_MANIFEST.flows ?? {}).map(([k, f]) => [
155
- k,
156
- { ...f, slo: undefined },
157
- ]),
152
+ Object.entries(OVERVIEW_MANIFEST.flows ?? {}).map(([k, f]) => [k, { ...f, slo: undefined }]),
158
153
  ),
159
154
  journeys: undefined,
160
155
  },
@@ -19,21 +19,14 @@ export const SATURATION_LAG_MS = 200;
19
19
  * @param runs - Wide-event population
20
20
  * @param now - Clock
21
21
  */
22
- export function computeGoldenSignals(
23
- runs: readonly RunRecord[],
24
- now: number,
25
- ): GoldenSignals {
22
+ export function computeGoldenSignals(runs: readonly RunRecord[], now: number): GoldenSignals {
26
23
  const from = now - GOLDEN_WINDOW_MS;
27
- const window = runs.filter(
28
- (r) => r.startedAt >= from && r.startedAt <= now,
29
- );
24
+ const window = runs.filter((r) => r.startedAt >= from && r.startedAt <= now);
30
25
  const n = window.length;
31
26
  const errors = window.filter((r) => !!r.error).length;
32
27
  const durations = window.map((r) => r.durationMs).sort((a, b) => a - b);
33
28
  const saturated = window.filter(
34
- (r) =>
35
- (r.replicaLagMs != null && r.replicaLagMs > SATURATION_LAG_MS) ||
36
- r.cache === "miss",
29
+ (r) => (r.replicaLagMs != null && r.replicaLagMs > SATURATION_LAG_MS) || r.cache === "miss",
37
30
  ).length;
38
31
 
39
32
  return {
@@ -49,9 +42,6 @@ export function computeGoldenSignals(
49
42
  function percentile(sorted: readonly number[], p: number): number {
50
43
  if (sorted.length === 0) return 0;
51
44
  if (sorted.length === 1) return sorted[0]!;
52
- const idx = Math.min(
53
- sorted.length - 1,
54
- Math.max(0, Math.ceil(p * sorted.length) - 1),
55
- );
45
+ const idx = Math.min(sorted.length - 1, Math.max(0, Math.ceil(p * sorted.length) - 1));
56
46
  return sorted[idx]!;
57
47
  }
@@ -14,10 +14,7 @@ export type {
14
14
  WhatChanged,
15
15
  } from "./types.ts";
16
16
 
17
- export {
18
- composeOverview,
19
- type OverviewInputs,
20
- } from "./compose.ts";
17
+ export { composeOverview, type OverviewInputs } from "./compose.ts";
21
18
 
22
19
  export {
23
20
  declaredSlos,
@@ -35,11 +32,7 @@ export { computeGoldenSignals, GOLDEN_WINDOW_MS } from "./golden.ts";
35
32
 
36
33
  export { firstSloInvite } from "./busiest.ts";
37
34
 
38
- export {
39
- rankedFindings,
40
- compareFindings,
41
- type FindingInputs,
42
- } from "./rank.ts";
35
+ export { rankedFindings, compareFindings, type FindingInputs } from "./rank.ts";
43
36
 
44
37
  export {
45
38
  composeVerdict,
@@ -5,10 +5,7 @@
5
5
  import { describe, expect, test } from "bun:test";
6
6
  import { buildCausalityGraph } from "../flows/graph.ts";
7
7
  import { composeOverview } from "./compose.ts";
8
- import {
9
- OVERVIEW_DAY_ONE_INPUTS,
10
- OVERVIEW_INPUTS_FIXTURE,
11
- } from "./fixture.ts";
8
+ import { OVERVIEW_DAY_ONE_INPUTS, OVERVIEW_INPUTS_FIXTURE } from "./fixture.ts";
12
9
  import { compareFindings, rankedFindings } from "./rank.ts";
13
10
 
14
11
  describe("rankedFindings", () => {
@@ -35,9 +32,7 @@ describe("rankedFindings", () => {
35
32
  expect(access.length).toBeGreaterThan(0);
36
33
  expect(access.some((f) => f.detail.includes("unused 90d"))).toBe(true);
37
34
  expect(access.some((f) => f.detail.includes("never signed in"))).toBe(true);
38
- expect(access.some((f) => f.detail.includes("expired invitation"))).toBe(
39
- true,
40
- );
35
+ expect(access.some((f) => f.detail.includes("expired invitation"))).toBe(true);
41
36
  expect(access.every((f) => f.href === "/access")).toBe(true);
42
37
  });
43
38
 
@@ -114,9 +109,7 @@ describe("composeOverview day-one", () => {
114
109
  expect(view.golden.sampleCount).toBeGreaterThan(0);
115
110
  expect(view.firstSloInvite).not.toBeNull();
116
111
  expect(view.firstSloInvite!.busiestFlow).toBe("bookings.create");
117
- expect(view.verdict.tone === "warn" || view.verdict.tone === "critical").toBe(
118
- true,
119
- );
112
+ expect(view.verdict.tone === "warn" || view.verdict.tone === "critical").toBe(true);
120
113
  expect(view.verdict.line.length).toBeGreaterThan(0);
121
114
  });
122
115
 
@@ -115,10 +115,7 @@ function mapOverdue(crons: readonly ClockCronRecord[]): OverviewFinding[] {
115
115
  }));
116
116
  }
117
117
 
118
- function mapDormant(
119
- secrets: readonly VaultRecord[],
120
- now: number,
121
- ): OverviewFinding[] {
118
+ function mapDormant(secrets: readonly VaultRecord[], now: number): OverviewFinding[] {
122
119
  const dormant = dormantSecrets(secrets, now);
123
120
  if (dormant.length === 0) return [];
124
121
  return [
@@ -175,9 +172,7 @@ function mapPlugins(changes: readonly DiffChangeRecord[]): OverviewFinding[] {
175
172
  }));
176
173
  }
177
174
 
178
- function mapAiBudget(
179
- versions: readonly PromptVersionMetrics[],
180
- ): OverviewFinding[] {
175
+ function mapAiBudget(versions: readonly PromptVersionMetrics[]): OverviewFinding[] {
181
176
  return overBudgetFindings(versions).map((f) => ({
182
177
  id: `ai:budget:${f.prompt}@${f.version}`,
183
178
  source: "ai" as const,
@@ -3,12 +3,7 @@
3
3
  */
4
4
 
5
5
  import { describe, expect, test } from "bun:test";
6
- import {
7
- computeSloBurns,
8
- declaredSlos,
9
- hasDeclaredSlos,
10
- parseAvailability,
11
- } from "./slo.ts";
6
+ import { computeSloBurns, declaredSlos, hasDeclaredSlos, parseAvailability } from "./slo.ts";
12
7
  import {
13
8
  OVERVIEW_BURN_RUNS,
14
9
  OVERVIEW_DAY_ONE_INPUTS,
@@ -30,9 +25,10 @@ describe("declaredSlos", () => {
30
25
  const slos = declaredSlos(OVERVIEW_MANIFEST);
31
26
  expect(slos.some((s) => s.id === "flow:bookings.create")).toBe(true);
32
27
  expect(slos.some((s) => s.id === "journey:book-a-flight")).toBe(true);
33
- expect(
34
- slos.find((s) => s.id === "flow:bookings.create")?.tolerableErrorRate,
35
- ).toBeCloseTo(0.001, 10);
28
+ expect(slos.find((s) => s.id === "flow:bookings.create")?.tolerableErrorRate).toBeCloseTo(
29
+ 0.001,
30
+ 10,
31
+ );
36
32
  });
37
33
 
38
34
  test("day-one Manifest has no declared SLOs", () => {