okengine 0.2.6 → 0.3.2

package/src/console/ui/traces/chain.test.ts

@@ -3,11 +3,7 @@
  */
 
 import { describe, expect, test } from "bun:test";
-import {
-  buildCausalChain,
-  groupTraceRoots,
-  initialFocusSpanId,
-} from "./chain.ts";
+import { buildCausalChain, groupTraceRoots, initialFocusSpanId } from "./chain.ts";
 import { TRACES_FIXTURE } from "./fixture.ts";
 
 describe("buildCausalChain", () => {
@@ -17,10 +13,7 @@ describe("buildCausalChain", () => {
     expect(chain?.parents.map((p) => p.id)).toEqual(["run-create-ok"]);
     expect(chain?.current.id).toBe("run-fulfill");
     expect(chain?.children).toEqual([]);
-    expect(chain?.connected.map((s) => s.id)).toEqual([
-      "run-create-ok",
-      "run-fulfill",
-    ]);
+    expect(chain?.connected.map((s) => s.id)).toEqual(["run-create-ok", "run-fulfill"]);
   });
 
   test("parents above, children below from root", () => {
@@ -37,25 +30,18 @@ describe("groupTraceRoots", () => {
     expect(roots.map((r) => r.rootId)).toContain("run-create-fail");
     expect(roots.map((r) => r.rootId)).toContain("run-ask");
     const ok = roots.find((r) => r.rootId === "run-create-ok");
-    expect(ok?.spans.map((s) => s.id)).toEqual([
-      "run-create-ok",
-      "run-fulfill",
-    ]);
+    expect(ok?.spans.map((s) => s.id)).toEqual(["run-create-ok", "run-fulfill"]);
   });
 });
 
 describe("initialFocusSpanId", () => {
   test("opens on the failing span", () => {
-    const failRoot = groupTraceRoots(TRACES_FIXTURE).find(
-      (r) => r.rootId === "run-create-fail",
-    );
+    const failRoot = groupTraceRoots(TRACES_FIXTURE).find((r) => r.rootId === "run-create-fail");
     expect(initialFocusSpanId(failRoot!.spans)).toBe("run-create-fail");
   });
 
   test("honours preferred id when present", () => {
-    const ok = groupTraceRoots(TRACES_FIXTURE).find(
-      (r) => r.rootId === "run-create-ok",
-    );
+    const ok = groupTraceRoots(TRACES_FIXTURE).find((r) => r.rootId === "run-create-ok");
     expect(initialFocusSpanId(ok!.spans, "run-fulfill")).toBe("run-fulfill");
   });
 });

package/src/console/ui/traces/chain.ts

@@ -94,9 +94,7 @@ export function buildCausalChain(
  */
 export function groupTraceRoots(spans: readonly TraceSpan[]): TraceRoot[] {
   const { byId, childrenOf } = indexSpans(spans);
-  const roots = spans.filter(
-    (s) => !s.parentId || !byId.has(s.parentId),
-  );
+  const roots = spans.filter((s) => !s.parentId || !byId.has(s.parentId));
   roots.sort((a, b) => b.startedAt - a.startedAt);
   return roots.map((root) => ({
     rootId: root.id,

package/src/console/ui/traces/critical-path.test.ts

@@ -8,9 +8,7 @@ import { TRACES_FIXTURE } from "./fixture.ts";
 
 describe("criticalPathSpanIds", () => {
   test("selects the longer root-to-leaf work path", () => {
-    const chain = TRACES_FIXTURE.filter(
-      (s) => s.id === "run-create-ok" || s.id === "run-fulfill",
-    );
+    const chain = TRACES_FIXTURE.filter((s) => s.id === "run-create-ok" || s.id === "run-fulfill");
     const path = criticalPathSpanIds(chain);
     expect(path.has("run-create-ok")).toBe(true);
     expect(path.has("run-fulfill")).toBe(true);

package/src/console/ui/traces/critical-path.ts

@@ -13,14 +13,10 @@ import type { TraceSpan } from "./types.ts";
  *
  * @param spans - Connected spans (one trace)
  */
-export function criticalPathSpanIds(
-  spans: readonly TraceSpan[],
-): ReadonlySet<string> {
+export function criticalPathSpanIds(spans: readonly TraceSpan[]): ReadonlySet<string> {
   if (spans.length === 0) return new Set();
   const { byId, childrenOf } = indexSpans(spans);
-  const roots = spans.filter(
-    (s) => !s.parentId || !byId.has(s.parentId),
-  );
+  const roots = spans.filter((s) => !s.parentId || !byId.has(s.parentId));
   let best: string[] = [];
   let bestCost = -1;
 

package/src/console/ui/traces/filter.test.ts

@@ -68,11 +68,7 @@ describe("effect filter", () => {
   });
 
   test("trace-level match when any connected span matches", () => {
-    const chain = TRACES_FIXTURE.filter(
-      (s) => s.id === "run-create-ok" || s.id === "run-fulfill",
-    );
-    expect(
-      traceMatchesEffectFilter(chain, { kind: "sent" }),
-    ).toBe(true);
+    const chain = TRACES_FIXTURE.filter((s) => s.id === "run-create-ok" || s.id === "run-fulfill");
+    expect(traceMatchesEffectFilter(chain, { kind: "sent" })).toBe(true);
   });
 });

package/src/console/ui/traces/filter.ts

@@ -19,22 +19,18 @@ export function matchesEffectFilter(
   if (!filter) return true;
   switch (filter.kind) {
     case "wrote":
-      return span.effects.some(
-        (e) => e.kind === "write" && e.resource === filter.resource,
-      );
+      return span.effects.some((e) => e.kind === "write" && e.resource === filter.resource);
     case "asked":
       return span.effects.some((e) => e.kind === "ask");
     case "sent":
       return span.effects.some(
         (e) =>
-          e.kind === "send" &&
-          (filter.resource === undefined || e.resource === filter.resource),
+          e.kind === "send" && (filter.resource === undefined || e.resource === filter.resource),
       );
     case "secret":
       return span.effects.some(
         (e) =>
-          e.kind === "secret" &&
-          (filter.resource === undefined || e.resource === filter.resource),
+          e.kind === "secret" && (filter.resource === undefined || e.resource === filter.resource),
       );
     case "cost":
       return (span.cost ?? 0) > filter.min;
@@ -63,9 +59,7 @@ export function traceMatchesEffectFilter(
  *
  * @param raw - URL value
  */
-export function parseEffectFilter(
-  raw: string | undefined,
-): EffectFilter | null {
+export function parseEffectFilter(raw: string | undefined): EffectFilter | null {
   if (!raw?.trim()) return null;
   const value = raw.trim();
   if (value === "asked") return { kind: "asked" };
@@ -93,9 +87,7 @@ export function parseEffectFilter(
  *
  * @param filter - Filter
  */
-export function serializeEffectFilter(
-  filter: EffectFilter | null | undefined,
-): string | undefined {
+export function serializeEffectFilter(filter: EffectFilter | null | undefined): string | undefined {
   if (!filter) return undefined;
   switch (filter.kind) {
     case "wrote":

package/src/console/ui/traces/fold.test.ts

@@ -13,9 +13,7 @@ import {
 
 describe("foldTimeline", () => {
   test("collapses multi-day idle into one labelled fold", () => {
-    const chain = TRACES_FIXTURE.filter(
-      (s) => s.id === "run-create-ok" || s.id === "run-fulfill",
-    );
+    const chain = TRACES_FIXTURE.filter((s) => s.id === "run-create-ok" || s.id === "run-fulfill");
     const folded = foldTimeline(intervalsFromSpans(chain));
     const folds = folded.segments.filter((s) => s.kind === "fold");
     expect(folds.length).toBe(1);
@@ -29,9 +27,7 @@ describe("foldTimeline", () => {
   });
 
   test("expanded fold restores proportional display weight", () => {
-    const chain = TRACES_FIXTURE.filter(
-      (s) => s.id === "run-create-ok" || s.id === "run-fulfill",
-    );
+    const chain = TRACES_FIXTURE.filter((s) => s.id === "run-create-ok" || s.id === "run-fulfill");
     const intervals = intervalsFromSpans(chain);
     const draft = foldTimeline(intervals);
     const foldId = draft.segments.find((s) => s.kind === "fold")?.id;
@@ -47,16 +43,12 @@ describe("foldTimeline", () => {
   });
 
   test("work stays proportional — display sum excludes collapsed dead time", () => {
-    const chain = TRACES_FIXTURE.filter(
-      (s) => s.id === "run-create-ok" || s.id === "run-fulfill",
-    );
+    const chain = TRACES_FIXTURE.filter((s) => s.id === "run-create-ok" || s.id === "run-fulfill");
     const folded = foldTimeline(intervalsFromSpans(chain));
     const workDisplay = folded.segments
       .filter((s) => s.kind === "work")
       .reduce((s, seg) => s + seg.displayMs, 0);
-    expect(folded.displayDurationMs).toBe(
-      workDisplay + COLLAPSED_FOLD_DISPLAY_MS,
-    );
+    expect(folded.displayDurationMs).toBe(workDisplay + COLLAPSED_FOLD_DISPLAY_MS);
     expect(folded.wallDurationMs).toBeGreaterThan(folded.displayDurationMs);
   });
 

package/src/console/ui/traces/fold.ts

@@ -144,9 +144,7 @@ export function intervalsFromSpans(spans: readonly TraceSpan[]): WorkInterval[]
           endMs: e.timestamp + Math.max(1, e.duration),
           tier: tierOfKind(e.kind),
           spanId: span.id,
-          failed:
-            span.errorCode != null &&
-            e === span.effects[span.effects.length - 1],
+          failed: span.errorCode != null && e === span.effects[span.effects.length - 1],
         });
       }
     } else {

package/src/console/ui/traces/mini.ts

@@ -55,9 +55,7 @@ export function miniWaterfall(spans: readonly TraceSpan[]): MiniBar[] {
  *
  * @param spans - Connected spans
  */
-export function rootErrorCode(
-  spans: readonly TraceSpan[],
-): string | null {
+export function rootErrorCode(spans: readonly TraceSpan[]): string | null {
   for (const s of spans) {
     if (s.errorCode) return s.errorCode;
   }

package/src/console/ui/traces/replay.test.ts

@@ -8,9 +8,7 @@ import { replayDecision } from "./replay.ts";
 
 describe("replayDecision", () => {
   test("offers dry-run when the trace has an external effect", () => {
-    const chain = TRACES_FIXTURE.filter(
-      (s) => s.id === "run-create-ok" || s.id === "run-fulfill",
-    );
+    const chain = TRACES_FIXTURE.filter((s) => s.id === "run-create-ok" || s.id === "run-fulfill");
     const decision = replayDecision(chain);
     expect(decision.mode).toBe("dry-run");
     if (decision.mode !== "dry-run") return;

package/src/console/ui/traces/replay.ts

@@ -21,9 +21,7 @@ export type ReplayDecision =
  *
  * @param spans - Connected spans
  */
-export function replayDecision(
-  spans: readonly TraceSpan[],
-): ReplayDecision {
+export function replayDecision(spans: readonly TraceSpan[]): ReplayDecision {
   if (traceHasExternal(spans)) {
     return {
       mode: "dry-run",

package/src/console/ui/traces/sampling.ts

@@ -25,10 +25,7 @@ export interface FullTraceBoost {
  * @param boosts - Active boosts
  * @param now - Clock
  */
-export function samplingLabel(
-  boosts: readonly FullTraceBoost[],
-  now: number = Date.now(),
-): string {
+export function samplingLabel(boosts: readonly FullTraceBoost[], now: number = Date.now()): string {
   const live = boosts.filter((b) => b.until > now);
   if (live.length === 0) return DEFAULT_SAMPLING_LABEL;
   const flows = live.map((b) => b.flow).join(", ");

package/src/console/ui/traces/search.ts

@@ -6,11 +6,7 @@
  */
 
 import { z } from "zod";
-import {
-  parseEffectFilter,
-  serializeEffectFilter,
-  type EffectFilter,
-} from "./filter.ts";
+import { parseEffectFilter, serializeEffectFilter, type EffectFilter } from "./filter.ts";
 
 /** Zod schema for Traces URL search params. */
 export const TracesSearchSchema = z.object({
@@ -47,9 +43,7 @@ export function parseTracesSearch(raw: unknown): TracesSearch {
  *
  * @param search - Typed search
  */
-export function serializeTracesSearch(
-  search: TracesSearch,
-): Record<string, string> {
+export function serializeTracesSearch(search: TracesSearch): Record<string, string> {
   const out: Record<string, string> = {};
   if (search.trace) out.trace = search.trace;
   if (search.span) out.span = search.span;
@@ -91,11 +85,7 @@ export function expandedFoldsOf(search: TracesSearch): Set<string> {
  * @param rootId - Root span id
  * @param spanId - Optional focus span
  */
-export function openTrace(
-  prev: TracesSearch,
-  rootId: string,
-  spanId?: string,
-): TracesSearch {
+export function openTrace(prev: TracesSearch, rootId: string, spanId?: string): TracesSearch {
   return {
     ...prev,
     trace: rootId,
@@ -137,10 +127,7 @@ export function toggleFold(prev: TracesSearch, foldId: string): TracesSearch {
  * @param prev - Current search
  * @param filter - Effect filter
  */
-export function setEffectFilter(
-  prev: TracesSearch,
-  filter: EffectFilter | null,
-): TracesSearch {
+export function setEffectFilter(prev: TracesSearch, filter: EffectFilter | null): TracesSearch {
   return {
     ...prev,
     effect: serializeEffectFilter(filter),

package/src/console/ui/traces/tier.ts

@@ -34,9 +34,7 @@ export function tierOfKind(kind: EffectKind): UiEffectTier {
  *
  * @param effects - Span effects
  */
-export function peakSpanTier(
-  effects: readonly TraceEffect[],
-): SpanTier {
+export function peakSpanTier(effects: readonly TraceEffect[]): SpanTier {
   let peak: SpanTier = "none";
   for (const e of effects) {
     const t = tierOfKind(e.kind);

package/src/console/ui/vault/VaultA11yView.tsx

@@ -51,17 +51,10 @@ export function VaultA11yView(props: VaultA11yViewProps) {
                       style={{ minHeight: 32, width: "100%" }}
                     >
                       <span>{s.name}</span>
-                      {s.sensitive && s.fingerprint ? (
-                        <span> {s.fingerprint}</span>
-                      ) : null}
-                      {!s.sensitive && s.cleartext ? (
-                        <span> {s.cleartext}</span>
-                      ) : null}
+                      {s.sensitive && s.fingerprint ? <span> {s.fingerprint}</span> : null}
+                      {!s.sensitive && s.cleartext ? <span> {s.cleartext}</span> : null}
                       {s.blastRadius.count > 0 ? (
-                        <span role="status">
-                          {" "}
-                          blast {s.blastRadius.count}
-                        </span>
+                        <span role="status"> blast {s.blastRadius.count}</span>
                       ) : null}
                       {s.sharedFingerprintEnvs.length > 0 ? (
                         <span role="status"> shared fingerprint</span>
@@ -108,11 +101,7 @@ export function VaultA11yView(props: VaultA11yViewProps) {
                 {open.resolution.map((step) => (
                   <li key={step.source}>
                     {step.source}
-                    {step.won
-                      ? " — won"
-                      : step.present
-                        ? " — present (lost)"
-                        : " — absent"}
+                    {step.won ? " — won" : step.present ? " — present (lost)" : " — absent"}
                   </li>
                 ))}
               </ol>
@@ -122,8 +111,7 @@ export function VaultA11yView(props: VaultA11yViewProps) {
             <section aria-label="Readers">
               <h3>Readers</h3>
               <p>
-                Flows that declare fx.vault({open.name}):{" "}
-                {open.readers.join(", ") || "none"}
+                Flows that declare fx.vault({open.name}): {open.readers.join(", ") || "none"}
               </p>
             </section>
 

package/src/console/ui/vault/a11y.test.tsx

@@ -16,8 +16,7 @@ describe("Vault panel accessibility", () => {
   let container: HTMLElement;
 
   beforeEach(() => {
-    (globalThis as { IS_REACT_ACT_ENVIRONMENT?: boolean }).IS_REACT_ACT_ENVIRONMENT =
-      true;
+    (globalThis as { IS_REACT_ACT_ENVIRONMENT?: boolean }).IS_REACT_ACT_ENVIRONMENT = true;
     window = new Window({ url: "http://console.test/vault" });
     Object.defineProperty(globalThis, "window", {
       value: window,

package/src/console/ui/vault/blast-radius.ts

@@ -25,9 +25,7 @@ export function formatBlastRadius(blast: VaultBlastRadius): BlastRadiusLine {
     };
   }
   const remaining =
-    blast.longestOutstandingMs != null
-      ? formatDuration(blast.longestOutstandingMs)
-      : null;
+    blast.longestOutstandingMs != null ? formatDuration(blast.longestOutstandingMs) : null;
   return {
     summary: `${blast.count} in-flight durable run(s) will wake holding a new key`,
     detail: remaining

package/src/console/ui/vault/confirmation.test.ts

@@ -1,9 +1,5 @@
 import { describe, expect, test } from "bun:test";
-import {
-  rotateConfirmation,
-  setConfirmation,
-  validateTypedConfirm,
-} from "./confirmation.ts";
+import { rotateConfirmation, setConfirmation, validateTypedConfirm } from "./confirmation.ts";
 
 describe("vault confirmation", () => {
   test("set requires typed confirm in production", () => {

package/src/console/ui/vault/confirmation.ts

@@ -4,10 +4,7 @@
  * There is no preview affordance for Vault — set and rotate are real writes.
  */
 
-import {
-  type ConfirmationPattern,
-  validateTypedConfirm,
-} from "../flows/confirmation.ts";
+import { type ConfirmationPattern, validateTypedConfirm } from "../flows/confirmation.ts";
 
 export { validateTypedConfirm };
 export type { ConfirmationPattern };

package/src/console/ui/vault/dormant.test.ts

@@ -16,10 +16,7 @@ describe("dormantSecrets", () => {
       lastReadAt: null,
       readers: [],
     };
-    const dormant = dormantSecrets(
-      [...VAULT_FIXTURE, neverRead],
-      now,
-    );
+    const dormant = dormantSecrets([...VAULT_FIXTURE, neverRead], now);
     expect(dormant.some((s) => s.name === "LEGACY_WEBHOOK_SECRET")).toBe(true);
     expect(dormant.some((s) => s.kind === "config")).toBe(false);
   });

package/src/console/ui/vault/export-safe.test.ts

@@ -1,9 +1,5 @@
 import { describe, expect, test } from "bun:test";
-import {
-  assertExportHasNoSecrets,
-  exportSafeList,
-  exportSafeRow,
-} from "./export-safe.ts";
+import { assertExportHasNoSecrets, exportSafeList, exportSafeRow } from "./export-safe.ts";
 import { FIXTURE_SECRET_VALUE, VAULT_FIXTURE } from "./fixture.ts";
 
 describe("exportSafe", () => {

package/src/console/ui/vault/export-safe.ts

@@ -53,10 +53,7 @@ export function exportSafeList(rows: readonly VaultRecord[]): string {
  * @param payload - Serialized text
  * @param knownSecrets - Cleartext secrets that must not appear
  */
-export function assertExportHasNoSecrets(
-  payload: string,
-  knownSecrets: readonly string[],
-): void {
+export function assertExportHasNoSecrets(payload: string, knownSecrets: readonly string[]): void {
   for (const secret of knownSecrets) {
     if (secret.length > 0 && payload.includes(secret)) {
       throw new Error("vault export leaked a secret value");

package/src/console/ui/vault/fixture.ts

@@ -26,7 +26,7 @@ export const VAULT_FIXTURE: readonly VaultRecord[] = [
     resolution: [
       { source: "process.env", present: false, won: false },
       { source: ".env.local", present: true, won: true },
-      { source: ".env.stack", present: false, won: false },
+      { source: ".env.docker", present: false, won: false },
       { source: "driver", present: false, won: false },
       { source: "dev-fallback", present: false, won: false },
     ],
@@ -52,7 +52,7 @@ export const VAULT_FIXTURE: readonly VaultRecord[] = [
     resolution: [
       { source: "process.env", present: true, won: true },
       { source: ".env.local", present: false, won: false },
-      { source: ".env.stack", present: false, won: false },
+      { source: ".env.docker", present: false, won: false },
       { source: "driver", present: false, won: false },
       { source: "dev-fallback", present: false, won: false },
     ],
@@ -71,5 +71,5 @@ export const VAULT_FIXTURE: readonly VaultRecord[] = [
 /** List response matching `console.vault.list`. */
 export const VAULT_LIST_FIXTURE: VaultListResponse = {
   secrets: VAULT_FIXTURE,
-  env: "dev",
+  env: "local",
 };

package/src/console/ui/vault/group.ts

@@ -18,8 +18,7 @@ export function groupByKind(
   const filtered = q
     ? secrets.filter(
         (s) =>
-          s.name.toLowerCase().includes(q) ||
-          (s.description?.toLowerCase().includes(q) ?? false),
+          s.name.toLowerCase().includes(q) || (s.description?.toLowerCase().includes(q) ?? false),
       )
     : secrets;
 

package/src/console/ui/vault/index.ts

@@ -11,11 +11,7 @@ export type {
   VaultResolutionStep,
 } from "./types.ts";
 
-export {
-  VAULT_FIXTURE,
-  VAULT_LIST_FIXTURE,
-  FIXTURE_SECRET_VALUE,
-} from "./fixture.ts";
+export { VAULT_FIXTURE, VAULT_LIST_FIXTURE, FIXTURE_SECRET_VALUE } from "./fixture.ts";
 
 export {
   parseVaultSearch,
@@ -38,8 +34,4 @@ export { formatBlastRadius, formatDuration } from "./blast-radius.ts";
 
 export { dormantSecrets, DORMANT_MS } from "./dormant.ts";
 
-export {
-  exportSafeRow,
-  exportSafeList,
-  assertExportHasNoSecrets,
-} from "./export-safe.ts";
+export { exportSafeRow, exportSafeList, assertExportHasNoSecrets } from "./export-safe.ts";

package/src/console/ui/vault/search.ts

@@ -19,9 +19,7 @@ export type VaultSearch = z.infer<typeof VaultSearchSchema>;
  *
  * @param search - Raw router search
  */
-export function parseVaultSearch(
-  search: Record<string, unknown>,
-): VaultSearch {
+export function parseVaultSearch(search: Record<string, unknown>): VaultSearch {
   const parsed = VaultSearchSchema.safeParse(search);
   return parsed.success ? parsed.data : {};
 }
@@ -31,9 +29,7 @@ export function parseVaultSearch(
  *
  * @param search - Search state
  */
-export function serializeVaultSearch(
-  search: VaultSearch,
-): Record<string, string> {
+export function serializeVaultSearch(search: VaultSearch): Record<string, string> {
   const out: Record<string, string> = {};
   if (search.q) out.q = search.q;
   if (search.name) out.name = search.name;

package/src/console/ui/vault/types.ts

@@ -6,7 +6,7 @@
 export type VaultResolutionSource =
   | "process.env"
   | ".env.local"
-  | ".env.stack"
+  | ".env.docker"
   | "driver"
   | "dev-fallback";
 

package/src/console/xss.gate.test.ts

@@ -111,8 +111,6 @@ describe("console XSS gate", () => {
   test("gate fails a PR that introduces raw HTML", () => {
     const bad = `export function Evil() { return <div dangerouslySetInnerHTML={{ __html: x }} />; }`;
     expect(findXssViolations(bad).length).toBeGreaterThan(0);
-    expect(findXssViolations(`el.innerHTML = payload`)).toContain(
-      String(/\.innerHTML\s*=/),
-    );
+    expect(findXssViolations(`el.innerHTML = payload`)).toContain(String(/\.innerHTML\s*=/));
   });
 });