chore(deps): biome 2.5.5 + ultracite 7.9.4 migration

apps/console/biome.jsonc

@@ -5,6 +5,7 @@
   "formatter": {
     "lineWidth": 120
   },
+  "linter": { "rules": { "correctness": { "noUnresolvedImports": "off" } } },
   "files": {
     "ignoreUnknown": true,
     // Stock Ultracite + lineWidth 120 — no rule overrides beyond the

apps/console/next-config-redirects.test.mjs

@@ -6,6 +6,7 @@ import test from "node:test";
 import nextConfig from "./next.config.mjs";
 
 const redirects = await nextConfig.redirects();
+const TRAILING_SLASH_RE = /\/$/;
 
 function matchRule(rule, pathname) {
   const { source, destination } = rule;
@@ -17,7 +18,7 @@ function matchRule(rule, pathname) {
     }
     if (pathname.startsWith(`${prefix}/`)) {
       const rest = pathname.slice(prefix.length + 1);
-      return destination.replace(":rest*", rest).replace(/\/$/, "") || "/";
+      return destination.replace(":rest*", rest).replace(TRAILING_SLASH_RE, "") || "/";
     }
     return null;
   }

apps/console/next.config.mjs

@@ -1,13 +1,13 @@
 // Copyright The PDP-Connect Contributors
 // SPDX-License-Identifier: Apache-2.0
 
-import path from 'path';
-import { fileURLToPath } from 'url';
-import { collectAllowedDevOrigins } from './scripts/dev-origins.mjs';
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { collectAllowedDevOrigins } from "./scripts/dev-origins.mjs";
 
-const __dirname = fileURLToPath(new URL('.', import.meta.url));
+const __dirname = fileURLToPath(new URL(".", import.meta.url));
 
-const allowedDevOrigins = process.env.NODE_ENV === 'production' ? [] : collectAllowedDevOrigins();
+const allowedDevOrigins = process.env.NODE_ENV === "production" ? [] : collectAllowedDevOrigins();
 
 function parseBuildWorkers(value) {
   if (!value) {
@@ -18,80 +18,72 @@ function parseBuildWorkers(value) {
 }
 
 const buildWorkers = parseBuildWorkers(process.env.PDPP_WEB_BUILD_WORKERS);
-const manualUploadBodyLimit = '1024mb';
+const manualUploadBodyLimit = "1024mb";
 
 /** @type {import('next').NextConfig} */
 const nextConfig = {
   ...(allowedDevOrigins.length > 0 ? { allowedDevOrigins } : {}),
-  output: 'standalone',
-  outputFileTracingRoot: path.join(__dirname, '../..'),
-  outputFileTracingIncludes: {
-    '/well-known/skills/**': [
-      '../../docs/agent-skills/**/*.md',
-      '../../openspec/README.md',
-      '../../pnpm-workspace.yaml',
-    ],
-    '/llms-full.txt': [
-      '../../docs/agent-skills/**/*.md',
-      '../../openspec/README.md',
-      '../../pnpm-workspace.yaml',
-    ],
-    '/llms.txt': [
-      '../../docs/agent-skills/**/*.md',
-      '../../openspec/README.md',
-      '../../pnpm-workspace.yaml',
-    ],
-  },
-  reactStrictMode: true,
   experimental: {
     cpus: buildWorkers,
     proxyClientMaxBodySize: manualUploadBodyLimit,
     serverActions: {
       bodySizeLimit: manualUploadBodyLimit,
     },
   },
-  // Transpile the reference-implementation workspace package so Next can
-  // consume its TypeScript sources directly once shim pairs (.js + .d.ts)
-  // collapse into single .ts exports. Without this, Next's bundler would
-  // reject .ts entries from a node_modules-resolved workspace package.
-  transpilePackages: ['pdpp-reference-implementation', '@pdpp/brand', '@pdpp/brand-react', '@pdpp/operator-ui'],
-  async redirects() {
+  output: "standalone",
+  outputFileTracingIncludes: {
+    "/llms-full.txt": ["../../docs/agent-skills/**/*.md", "../../openspec/README.md", "../../pnpm-workspace.yaml"],
+    "/llms.txt": ["../../docs/agent-skills/**/*.md", "../../openspec/README.md", "../../pnpm-workspace.yaml"],
+    "/well-known/skills/**": [
+      "../../docs/agent-skills/**/*.md",
+      "../../openspec/README.md",
+      "../../pnpm-workspace.yaml",
+    ],
+  },
+  outputFileTracingRoot: path.join(__dirname, "../.."),
+  reactStrictMode: true,
+  redirects() {
     return [
       {
-        source: '/favicon.ico',
-        destination: '/brand/pdpp-favicon.svg',
+        destination: "/brand/pdpp-favicon.svg",
         permanent: false,
+        source: "/favicon.ico",
       },
     ];
   },
-  async rewrites() {
+  rewrites() {
     return [
       {
-        source: '/.well-known/oauth-authorization-server',
-        destination: '/well-known/oauth-authorization-server',
+        destination: "/well-known/oauth-authorization-server",
+        source: "/.well-known/oauth-authorization-server",
       },
       {
-        source: '/.well-known/oauth-protected-resource/:path*',
-        destination: '/well-known/oauth-protected-resource/:path*',
+        destination: "/well-known/oauth-protected-resource/:path*",
+        source: "/.well-known/oauth-protected-resource/:path*",
       },
       {
-        source: '/.well-known/oauth-protected-resource',
-        destination: '/well-known/oauth-protected-resource',
+        destination: "/well-known/oauth-protected-resource",
+        source: "/.well-known/oauth-protected-resource",
       },
       {
-        source: '/.well-known/skills/:path*',
-        destination: '/well-known/skills/:path*',
+        destination: "/well-known/skills/:path*",
+        source: "/.well-known/skills/:path*",
       },
       {
-        source: '/.well-known/llms.txt',
-        destination: '/llms.txt',
+        destination: "/llms.txt",
+        source: "/.well-known/llms.txt",
       },
     ];
   },
+  // Transpile the reference-implementation workspace package so Next can
+  // consume its TypeScript sources directly once shim pairs (.js + .d.ts)
+  // collapse into single .ts exports. Without this, Next's bundler would
+  // reject .ts entries from a node_modules-resolved workspace package.
+  transpilePackages: ["pdpp-reference-implementation", "@pdpp/brand", "@pdpp/brand-react", "@pdpp/operator-ui"],
   webpack(config) {
     config.resolve.alias = {
       ...config.resolve.alias,
-      '@': path.join(__dirname, 'src'),
+      "@": path.join(__dirname, "src"),
     };
     return config;
   },

apps/console/postcss.config.mjs

@@ -3,7 +3,7 @@
 
 const config = {
   plugins: {
-    '@tailwindcss/postcss': {},
+    "@tailwindcss/postcss": {},
   },
 };
 

apps/console/src/app/(console)/audit/[traceId]/page.tsx

@@ -176,12 +176,12 @@ function groupTimeline(events: SpineEvent[]): TimelineNode[] {
       }
       const runLen = j - i;
       if (runLen >= PROGRESS_GROUP_THRESHOLD) {
-        nodes.push({ kind: "progress-group", events: events.slice(i, j), start: i });
+        nodes.push({ events: events.slice(i, j), kind: "progress-group", start: i });
         i = j;
         continue;
       }
     }
-    nodes.push({ kind: "event", event: current, index: i });
+    nodes.push({ event: current, index: i, kind: "event" });
     i += 1;
   }
   return nodes;
@@ -230,6 +230,7 @@ function EventTableRow({ event, index }: { event: SpineEvent; index: number }) {
               padding: "var(--space-2)",
             }}
           >
+            {/** biome-ignore lint/suspicious/noUnnecessaryConditions: runtime value, TS type is optimistic */}
             {JSON.stringify(redactSecrets(event.data || {}), null, 2)}
           </pre>
         </details>
@@ -239,7 +240,7 @@ function EventTableRow({ event, index }: { event: SpineEvent; index: number }) {
 }
 
 function ProgressGroupTableRow({ events, startIndex }: { events: SpineEvent[]; startIndex: number }) {
-  const first = events[0];
+  const [first] = events;
   const last = events.at(-1);
   if (!(first && last)) {
     return null;
@@ -315,7 +316,7 @@ export default async function TraceDetailPage({
     notFound();
   }
 
-  const events = envelope.events;
+  const { events } = envelope;
   const first = events[0] ?? null;
   const actorLabel = first ? `${first.actor_type}/${first.actor_id}` : null;
 
@@ -413,10 +414,10 @@ export default async function TraceDetailPage({
               href={`/grants/${encodeURIComponent(id)}`}
               key={`grant:${id}`}
               style={{
+                alignItems: "center",
                 border: "1px solid var(--color-border)",
                 color: "var(--color-foreground)",
                 display: "inline-flex",
-                alignItems: "center",
                 padding: "var(--space-1) var(--space-2-5)",
               }}
             >
@@ -433,10 +434,10 @@ export default async function TraceDetailPage({
               href={`/syncs/${encodeURIComponent(id)}`}
               key={`run:${id}`}
               style={{
+                alignItems: "center",
                 border: "1px solid var(--color-border)",
                 color: "var(--color-foreground)",
                 display: "inline-flex",
-                alignItems: "center",
                 padding: "var(--space-1) var(--space-2-5)",
               }}
             >