okengine 0.21.1 → 0.23.0

package/src/runs/parquet.test.ts

@@ -12,7 +12,13 @@ import { join } from "node:path";
 
 import { duckPath, openDuckDB } from "./duckdb.ts";
 import { createRunsRuntime } from "./runtime.ts";
-import { readParquet, wideEventToRow, writeParquet, type ParquetRow } from "./parquet.ts";
+import {
+  readParquet,
+  rowToWideEvent,
+  wideEventToRow,
+  writeParquet,
+  type ParquetRow,
+} from "./parquet.ts";
 import type { WideEvent } from "./types.ts";
 
 const temps: string[] = [];
@@ -62,6 +68,26 @@ async function writeLegacyParquet(path: string, rows: readonly ParquetRow[]): Pr
   }
 }
 
+describe("parquet http frame", () => {
+  test("round-trips a frame and omits a null column", () => {
+    const event = sample("framed", null);
+    const framed = {
+      ...event,
+      http: {
+        request: {
+          method: "GET",
+          path: "/tasks",
+          query: { limit: "20" },
+          headers: { accept: "application/json" },
+        },
+        response: { status: 200, headers: { "content-type": "application/json" } },
+      },
+    };
+    expect(rowToWideEvent(wideEventToRow(framed)).http).toEqual(framed.http);
+    expect(rowToWideEvent(wideEventToRow(event)).http).toBeUndefined();
+  });
+});
+
 describe("parquet error_code types", () => {
   test("readParquet unions all-null JSON error_code with VARCHAR Unauthorized", async () => {
     const dir = await tmpDir();

package/src/runs/parquet.ts

@@ -35,6 +35,7 @@ const PARQUET_VARCHAR_COLUMNS = [
   "error_message",
   "input",
   "output",
+  "http",
   "effects",
   "logs",
   "archived",
@@ -88,6 +89,7 @@ export function wideEventToRow(event: WideEvent): ParquetRow {
     error_message: event.error?.message ?? null,
     input: event.input === undefined ? null : JSON.stringify(event.input),
     output: event.output === undefined ? null : JSON.stringify(event.output),
+    http: event.http === undefined ? null : JSON.stringify(event.http),
     effects: JSON.stringify(event.effects),
     logs: JSON.stringify(event.logs),
     duration_ms: event.durationMs,
@@ -167,6 +169,7 @@ export function rowToWideEvent(row: Record<string, unknown>): WideEvent {
               : (row.output as unknown),
         }
       : {}),
+    ...httpFromRow(row.http),
     effects: parseJsonArray(row.effects) as WideEvent["effects"],
     logs: parseJsonArray(row.logs) as WideEvent["logs"],
     durationMs: Number(row.duration_ms ?? 0),
@@ -308,6 +311,22 @@ function columnTypeOf(row: Record<string, unknown>): string | undefined {
   return typeof type === "string" && type.length > 0 ? type : undefined;
 }
 
+function httpFromRow(value: unknown): { http: WideEvent["http"] } | undefined {
+  const raw = typeof value === "string" && value.length > 0 ? safeJson(value) : value;
+  if (raw === null || raw === undefined || typeof raw !== "object") return undefined;
+  const frame = raw as NonNullable<WideEvent["http"]>;
+  if (typeof frame.request !== "object" || frame.request === null) return undefined;
+  return { http: frame };
+}
+
+function safeJson(value: string): unknown {
+  try {
+    return JSON.parse(value) as unknown;
+  } catch {
+    return undefined;
+  }
+}
+
 function parseJsonArray(value: unknown): unknown[] {
   if (Array.isArray(value)) return value;
   if (typeof value === "string" && value.length > 0) {

package/src/runs/types.ts

@@ -28,6 +28,32 @@ export interface RunError {
  */
 export type RunDimensions = Record<string, string | number | boolean | null | undefined>;
 
+/**
+ * HTTP message around a run — everything except the flow body.
+ *
+ * Credential header and query values are `[redacted]` before this is stored.
+ */
+export interface RunHttpFrame {
+  /** Request line plus query and headers. */
+  readonly request: {
+    /** Verb as received (`GET`, `POST`, …). */
+    readonly method: string;
+    /** Pathname only — query lives in {@link query}. */
+    readonly path: string;
+    /** Query string, last value wins for a repeated key. */
+    readonly query: Readonly<Record<string, string>>;
+    /** Lower-case header names. */
+    readonly headers: Readonly<Record<string, string>>;
+  };
+  /** Final response after `onResponse`, when the trigger produced one. */
+  readonly response?: {
+    /** Status code. */
+    readonly status: number;
+    /** Lower-case header names. */
+    readonly headers: Readonly<Record<string, string>>;
+  };
+}
+
 /**
  * One wide event — the atomic observability record.
  *
@@ -83,6 +109,11 @@ export interface WideEvent {
    * Absent on failures / in-flight sleeps — never invent a response.
    */
   readonly output?: unknown;
+  /**
+   * HTTP wire frame when the trigger was `http`.
+   * Absent on signal, clock, call-only, and runs recorded before the frame existed.
+   */
+  readonly http?: RunHttpFrame;
   /** Effect ledger snapshot. */
   readonly effects: readonly EffectEntry[];
   /**

package/src/runtime/json-code-block.test.ts

@@ -118,8 +118,11 @@ describe("renderJsonCodeBlockHtml", () => {
     expect(html).toContain("Ready");
     expect(html).not.toContain('data-slot="json-code-auth-switch"');
     expect(html).toContain('data-slot="json-code-view-toggle"');
-    expect(html).toContain('href="/?raw=1"');
-    expect(html).toContain(">Pretty</a>");
+    expect(html).toContain('data-view="fields"');
+    expect(html).toContain('data-slot="json-code-fields"');
+    expect(html).toContain(">Fields</button>");
+    expect(html).toContain(">JSON</button>");
+    expect(html).not.toContain(">Pretty</button>");
     expect(html).not.toContain(">Raw</a>");
     expect(html).not.toContain(">Console</a>");
     expect(html).not.toContain("</script><script>alert(1)</script>");
@@ -130,6 +133,28 @@ describe("renderJsonCodeBlockHtml", () => {
     expect(escapeHtml(`<&"`)).toBe("&lt;&amp;&quot;");
   });
 
+  test("response fields preview nested values and redact credential headers", () => {
+    const html = renderJsonCodeBlockHtml({
+      json: JSON.stringify({ data: [{ id: "ENG-12", n: 2 }], error: null }),
+      status: 200,
+      method: "GET",
+      path: "/views",
+      app: "keel",
+      rawHref: "/views?raw=1",
+      prettyHref: "/views",
+      headers: { "content-type": "application/json", authorization: "Bearer secret" },
+    });
+    expect(html).toContain('data-slot="json-code-response"');
+    expect(html).toContain('data-slot="json-code-response-status"');
+    expect(html).toContain('data-slot="json-code-response-headers"');
+    expect(html).toContain("id: ENG-12 · n: 2");
+    expect(html).toContain(">1 item<");
+    expect(html).toContain("application/json");
+    expect(html).toContain("[redacted]");
+    expect(html).not.toContain("Bearer secret");
+    expect(html).toContain(">OK<");
+  });
+
   test("renders latency next to the status", () => {
     const html = renderJsonCodeBlockHtml({
       json: '{"ok":true}',
@@ -193,12 +218,10 @@ describe("renderJsonCodeBlockHtml", () => {
     expect(publicHtml).not.toContain('data-slot="json-code-auth-switch"');
     expect(publicHtml).not.toContain("data-auth-default");
     expect(publicHtml).not.toContain("data-route-public");
-    expect(publicHtml).not.toContain('data-slot="json-code-auth-global"');
-    expect(publicHtml).not.toContain('data-rail-section="auth"');
-    expect(publicHtml).not.toContain(">Inherit</button>");
-    expect(publicHtml).not.toContain(">Custom</button>");
-    expect(publicHtml).not.toContain("oke:json-code:bearer");
-    expect(publicHtml).not.toContain("Authentication");
+    expect(publicHtml).toContain('data-rail-section="auth"');
+    expect(publicHtml).toContain(">Auth</span>");
+    expect(publicHtml).toContain(">Inherit</button>");
+    expect(publicHtml).toContain(">Custom</button>");
 
     const userHtml = renderJsonCodeBlockHtml({
       json: '{"ok":true}',
@@ -216,13 +239,12 @@ describe("renderJsonCodeBlockHtml", () => {
     expect(userHtml).not.toContain('data-slot="json-code-auth-switch"');
     expect(userHtml).not.toContain('data-slot="json-code-api-key-global"');
     expect(userHtml).not.toContain('data-slot="json-code-api-key-route"');
-    expect(userHtml).not.toContain('data-slot="json-code-auth-global"');
-    expect(userHtml).not.toContain('data-rail-section="auth"');
-    expect(userHtml).not.toContain("Authentication");
+    expect(userHtml).toContain('data-rail-section="auth"');
+    expect(userHtml).toContain('data-slot="json-code-global-auth"');
     expect(userHtml).not.toContain(">Console</a>");
   });
 
-  test("Authentication interactive UI is gone", () => {
+  test("Authorization follows headers and global auth lives on the strip", () => {
     const html = renderJsonCodeBlockHtml({
       json: '{"ok":true}',
       status: 200,
@@ -234,29 +256,56 @@ describe("renderJsonCodeBlockHtml", () => {
       auth: { kind: "public" },
     });
     expect(html).not.toContain('data-slot="json-code-auth-switch"');
-    expect(html).not.toContain(">Authentication</button>");
-    expect(html).not.toContain("Global API Key");
-    expect(html).not.toContain("Route API Key");
-    expect(html).not.toContain('data-slot="json-code-api-key-apply-global"');
-    expect(html).not.toContain('data-slot="json-code-api-key-apply-route"');
-    expect(html).not.toContain('data-slot="json-code-auth-route-mode"');
-    expect(html).not.toContain('data-slot="json-code-auth-inherit"');
-    expect(html).not.toContain('data-rail-section="auth"');
-    expect(html).not.toContain(">Inherit</button>");
-    expect(html).not.toContain(">Custom</button>");
-    expect(html).not.toContain("oke:json-code:bearer");
-    expect(html).not.toContain("oke:json-code:bearer-route");
-    expect(html).not.toContain("oke:json-code:auth-route-mode");
-    expect(html).not.toContain("oke:json-code:auth-tone");
+    expect(html).toContain(">Inherit</button>");
+    expect(html).toContain(">Custom</button>");
+    expect(html).toContain('aria-label="Request headers"');
+    expect(html).toContain('data-headers-mode="inherit"');
+    expect(html).toContain('data-headers-mode="custom"');
+    expect(html).toContain("data-headers-custom");
+    expect(html).toContain("oke:json-code:headers-mode");
+    expect(html).toContain("function headersMode");
+    const headersAt = html.indexOf('<details class="rail-acc" data-rail-section="headers"');
+    const authAt = html.indexOf('<details class="rail-acc" data-rail-section="auth"');
+    expect(html.slice(headersAt, authAt)).toContain('data-headers-mode="inherit"');
+    expect(html.slice(authAt)).toContain('data-auth-mode="inherit"');
     expect(html).not.toContain("function resolveBearer");
-    expect(html).not.toContain("function routeIsPublic");
-    expect(html).not.toContain("function applyGlobalKey");
-    expect(html).not.toContain("refreshAuthTone");
+    expect(html.indexOf('<details class="rail-acc" data-rail-section="headers"')).toBeLessThan(
+      html.indexOf('<details class="rail-acc" data-rail-section="auth"'),
+    );
+    expect(html.indexOf('<details class="rail-acc" data-rail-section="auth"')).toBeLessThan(
+      html.indexOf('<details class="rail-acc" data-rail-section="cookies"'),
+    );
+    expect(html.indexOf('<details class="rail-acc" data-rail-section="query"')).toBeLessThan(
+      html.indexOf('<details class="rail-acc" data-rail-section="path"'),
+    );
+    expect(html.indexOf('<details class="rail-acc" data-rail-section="path"')).toBeLessThan(
+      html.indexOf('<details class="rail-acc" data-rail-section="body"'),
+    );
+    expect(html).toContain(">Auth</span>");
+    expect(html).toContain('data-auth-type="none"');
+    expect(html).toContain(">No</button>");
+    expect(html).toContain(">Bearer</button>");
+    expect(html).toContain(">Basic</button>");
+    expect(html).toContain(">API</button>");
+    expect(html).not.toContain("auth-opt");
+    expect(html).toContain('data-auth-scope="request"');
+    expect(html).toContain('data-auth-scope="global"');
+    expect(html).toContain('data-slot="json-code-global-auth"');
+    expect(html).toContain('data-slot="json-code-global-headers"');
+    expect(html).toContain('data-slot="json-code-global-panel"');
+    expect(html).toContain('data-kv="headers-global"');
+    expect(html).toContain("oke:json-code:auth");
+    expect(html).toContain("oke:json-code:auth-global");
+    expect(html).toContain("oke:json-code:headers-global");
+    expect(html).toContain("function effectiveAuth");
+    expect(html).toContain("function storedAuth");
+    expect(html).toContain("function forgetSecretsOnReload");
+    expect(html).toContain("function replayStoredAuth");
+    expect(html).toContain("oke:json-code:auth-replay");
+    expect(html).toContain("parsed.token");
+    expect(html).toContain('type="password"');
+    expect(html).toContain("data-auth-reveal");
     expect(html).toContain('data-slot="json-code-send"');
-    expect(html).toContain('data-kv="headers"');
-    expect(html).toContain('aria-label="Request"');
-    expect(html).not.toContain(":6533");
-    expect(html).not.toContain(">Console</a>");
   });
 
   test("renders the Request rail with tabs and current GET on", () => {
@@ -319,7 +368,7 @@ describe("renderJsonCodeBlockHtml", () => {
     expect(html).toContain('data-slot="json-code-request-dock"');
     expect(html).toContain('data-slot="json-code-send"');
     expect(html).toContain('data-slot="json-code-reset"');
-    expect(html).not.toContain('data-slot="json-code-dock-auth"');
+    expect(html).toContain('data-slot="json-code-global-auth"');
     expect(html).toContain('data-rail-section="query"');
     expect(html).toContain(">Params</span>");
     expect(html).toContain('data-rail-section="body"');
@@ -330,25 +379,35 @@ describe("renderJsonCodeBlockHtml", () => {
     expect(html).toContain('data-slot="json-code-body-raw"');
     expect(html).toContain('data-slot="json-code-body-hi"');
     expect(html).toContain('data-kv="body"');
-    expect(html).not.toContain('data-rail-section="auth"');
-    expect(html).not.toContain('data-slot="json-code-auth-route-mode"');
-    expect(html).not.toContain(">Inherit</button>");
-    expect(html).not.toContain(">Custom</button>");
-    expect(html).not.toContain('data-slot="json-code-auth-global"');
+    expect(html).toContain('data-rail-section="auth"');
+    expect(html).toContain(">Inherit</button>");
+    expect(html).toContain(">Custom</button>");
+    expect(html).toContain('data-slot="json-code-global-headers"');
     expect(html).toContain('data-rail-section="cookies"');
     expect(html).toContain('data-rail-section="headers"');
     expect(html).toContain('data-rail-section="path"');
-    expect(html.indexOf('data-rail-section="query"')).toBeLessThan(
-      html.indexOf('data-rail-section="body"'),
+    expect(html.indexOf('<details class="rail-acc" data-rail-section="query"')).toBeLessThan(
+      html.indexOf('<details class="rail-acc" data-rail-section="path"'),
+    );
+    expect(html.indexOf('<details class="rail-acc" data-rail-section="path"')).toBeLessThan(
+      html.indexOf('<details class="rail-acc" data-rail-section="body"'),
     );
-    expect(html.indexOf('data-rail-section="body"')).toBeLessThan(
-      html.indexOf('data-rail-section="cookies"'),
+    expect(html.indexOf('<details class="rail-acc" data-rail-section="body"')).toBeLessThan(
+      html.indexOf('<details class="rail-acc" data-rail-section="headers"'),
+    );
+    expect(html.indexOf('<details class="rail-acc" data-rail-section="auth"')).toBeLessThan(
+      html.indexOf('<details class="rail-acc" data-rail-section="cookies"'),
     );
     expect(html).toContain('data-method="GET"');
     expect(html).toContain('data-method="POST"');
     expect(html).toContain('class="rail-acc"');
     expect(html).toContain('class="rail-dock"');
-    expect(html).toContain(">Routes</p>");
+    expect(html.indexOf('data-slot="json-code-request-dock"')).toBeLessThan(
+      html.indexOf('data-rail-section="routes"'),
+    );
+    expect(html).toContain(">Routes</span>");
+    expect(html).toContain('aria-label="Collapse routes"');
+    expect(html).toContain('aria-label="Expand routes"');
     expect(html).toContain('data-kv="cookies"');
     expect(html).toContain('data-kv="headers"');
     expect(html).toContain('data-kv="query"');
@@ -521,10 +580,10 @@ describe("asBrowserJsonCodeBlock — HTTP", () => {
     expect(raw.headers.get("content-type")).toContain("text/html");
     const html = await raw.text();
     expect(html).toContain('data-view="raw"');
+    expect(html).toContain('data-code-view="raw"');
     expect(html).toContain('data-slot="json-code-view-toggle"');
-    expect(html).toContain('href="/health"');
-    expect(html).toContain(">Raw</a>");
-    expect(html).toContain('aria-pressed="true"');
+    expect(html).toContain(">JSON</button>");
+    expect(html).toContain('data-response-view="json" aria-pressed="true"');
     expect(html).toContain("&quot;ok&quot;:true");
 
     const forced = await app.fetch(