create-oke 0.10.2 → 0.11.0

package/templates/advanced/.env.example

@@ -6,6 +6,25 @@
 # --- Vault (app secrets) ---
 # Declare secrets in src/vault.ts with `vault.secret(...)`, then uncomment lines here.
 #
+# ── vault — built-in encrypted-at-rest store ────────────────
+# `drivers.vault` is "vault": secrets live encrypted in Postgres, no extra service.
+# Nothing below is required to start — the dotenv layers above resolve first.
+#
+#   oke vault init                 # creates the store, prints the master key ONCE
+#   export OKE_VAULT_MASTER_KEY=…  # every later command / boot unseals with this
+#   oke vault status               # sealed / initialized / kek generation
+#   oke vault audit                # hash-chained operation log
+#
+# Keep the master key out of this file in production — read it from your KMS or
+# secret manager at boot. Committing it defeats encryption at rest.
+# OKE_VAULT_MASTER_KEY=
+#
+# For `drivers.vault: "managed"` instead, point at your provider secret store:
+# OKE_VAULT_PROVIDER=aws-secrets-manager
+# OKE_VAULT_REGION=us-east-1
+# Optional prefix for secret names (defaults to oke/<env>/):
+# OKE_VAULT_MOUNT=oke/prod/
+#
 # --- Infrastructure ---
 # Same keys as `docker/.env.docker` after `oke dev --docker`.
 # Uncomment to override compose credentials for a host-managed service.
@@ -87,8 +106,9 @@
 # POSTGRES_INITDB_ARGS=--data-checksums
 
 # ── AI ──────────────────────────────────────────────────────
-# OKE_AI_DRIVER=ollama
-# OKE_AI_URL=http://127.0.0.1:11434
-# OKE_AI_MODEL=qwen3.5:9b
+# Default local: llama.cpp → openai-compatible (Ollama remains supported)
+# OKE_AI_DRIVER=openai-compatible
+# OKE_AI_URL=http://127.0.0.1:8080/v1
+# OKE_AI_MODEL=granite3.3:2b
 # ANTHROPIC_API_KEY=
 # OPENAI_API_KEY=

package/templates/advanced/README.md

@@ -46,5 +46,5 @@ Without AI, summarize returns a local excerpt (`via: "fallback"`).
 
 ## Drivers
 
-See `oke.config.ts`: local sqlite/memory/fs · docker postgres/redis/s3/openbao/smtp.
+See `oke.config.ts`: local env/memory/fs · docker postgres/redis/s3/smtp; vault built-in.
 Optional Meilisearch index pin is commented — enable via create-oke customize.

package/templates/advanced/drizzle.config.ts

@@ -3,25 +3,22 @@ import { defineConfig } from "drizzle-kit";
 /**
  * Domain schema sync for `oke db push|generate|migrate`.
  *
- * Dialect comes from OKE's `store.sql` driver map (resolved by the CLI and
- * injected as `OKE_DRIZZLE_DIALECT`) — never inferred from `DATABASE_URL`
- * presence. `src/db/schema.generated.ts` is emitted from `src/db/schema.decl.ts`
- * for the active dialect as a pre-step of `oke db` / `oke dev`.
+ * SQL is PostgreSQL-only (postgres / pglite). Domain tables come from
+ * `src/db/schema.decl.ts` → `src/db/schema.drizzle.ts` (emitted as a
+ * pre-step of `oke db` / `oke dev`).
  *
- * Versioned prod migrations land in `./src/db/migrations` — never mix with `.oke/`.
+ * System / auth / plugin stubs are separate: `oke schema generate` →
+ * `.oke/schema/oke.ts` (gitignored with `.oke/`). Re-run after adding plugins.
+ *
+ * Versioned prod migrations land in `./src/db/migrations`.
  */
-const dialect = (process.env.OKE_DRIZZLE_DIALECT ?? "sqlite") as "sqlite" | "postgresql";
-
 export default defineConfig({
-  dialect,
-  schema: "./src/db/schema.generated.ts",
+  dialect: "postgresql",
+  schema: "./src/db/schema.drizzle.ts",
   out: "./src/db/migrations",
   // Core runtime tables (oke_crons, …) are created by drivers — not domain schema.
   tablesFilter: ["!oke_*"],
   dbCredentials: {
-    url:
-      dialect === "postgresql"
-        ? (process.env.DATABASE_URL ?? process.env.OKE_STORE_SQL_URL!)
-        : (process.env.OKE_SQLITE_URL ?? "file:.oke/app.sqlite"),
+    url: process.env.DATABASE_URL ?? process.env.OKE_STORE_SQL_URL!,
   },
 });

package/templates/advanced/oke.config.ts

@@ -1,84 +1,43 @@
 import { defineConfig } from "okengine/config";
 
 /**
- * Advanced starter — same Notes domain, docker-ready driver map.
- * Recommended create path seeds `.oke/mode` as docker.
+ * Advanced starter — same Notes domain, Docker-first + store.index.
+ * `oke dev` always uses Docker Compose (dev). Tests use PGLite / memory.
+ * Pin only driver keys that differ from `DRIVER_DEFAULTS` (see okengine/config).
  */
 export default defineConfig({
   db: {
     declare: "src/db/schema.decl.ts",
-    generated: "src/db/schema.generated.ts",
+    generated: "src/db/schema.drizzle.ts",
   },
   drivers: {
     store: {
-      sql: {
-        local: "sqlite",
-        docker: "postgres",
-        test: "memory",
-        prod: "postgres",
-      },
-      kv: {
-        local: "memory",
-        docker: "redis",
-        test: "memory",
-        prod: "redis",
-      },
-      files: {
-        local: "fs",
-        docker: "s3",
-        test: "memory",
-        prod: "s3",
-      },
+      // No three-env default table — set explicitly when you need search.
       index: {
-        local: "memory",
-        docker: "meilisearch",
         test: "memory",
         prod: "meilisearch",
       },
     },
-    signal: {
-      local: "memory",
-      docker: "redis",
-      test: "memory",
-      prod: "redis",
-    },
-    clock: {
-      local: "memory",
-      docker: "postgres",
-      test: "frozen",
-      prod: "postgres",
-    },
-    journal: {
-      local: "memory",
-      docker: "postgres",
-      test: "memory",
-      prod: "postgres",
-    },
+    // Built-in encrypted-at-rest store — lives in Postgres, no extra service.
+    // Default `vault.dev` is `"env"`; pin built-in for local Docker-first apps.
+    // `oke vault init` prints the master key; set OKE_VAULT_MASTER_KEY to unseal.
     vault: {
-      local: "env",
-      docker: "openbao",
-      test: "memory",
-      prod: "openbao",
-    },
-    channel: {
-      email: {
-        local: "console",
-        docker: "smtp",
-        test: "console",
-        prod: "smtp",
-      },
+      dev: "vault",
     },
-    // Opt in: create-oke --ai / oke ai setup writes drivers.ai + src/core/ai.ts
+    // Opt in: create-oke --ai / oke ai setup writes drivers.ai + models in src/core.ts
   },
   images: {
-    "store.sql": "postgres:18-alpine",
-    pgdog: "ghcr.io/pgdogdev/pgdog:v0.1.51",
-    "store.kv": "redis:8-alpine",
-    "store.files": "rustfs/rustfs:1.0.0-beta.11",
-    "channel.email": "axllent/mailpit:v1.22.3",
-    vault: "openbao/openbao:2.6.1",
-    // "store.index": "getmeili/meilisearch:v1.37",
+    store: {
+      sql: "postgres:18-alpine",
+      kv: "redis:8-alpine",
+      files: "rustfs/rustfs:1.0.0-beta.11",
+      // index: "getmeili/meilisearch:v1.37",
+    },
+    channel: {
+      email: "axllent/mailpit:v1.22.3",
+    },
+    // pgdog: "ghcr.io/pgdogdev/pgdog:v0.1.51", // create-oke wizard / --pgdog
     // ai: "ghcr.io/ggml-org/llama.cpp:server-b10290", // or ollama/ollama:0.32.6
   },
-  i18n: { locales: ["en", "ar"], default: "en", dir: { ar: "rtl" } },
+  i18n: { locales: ["en"], default: "en" },
 });

package/templates/advanced/package.json

@@ -9,13 +9,15 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
+    "@electric-sql/pglite": "^0.5.4",
+    "@electric-sql/pglite-pgvector": "^0.0.5",
     "@types/bun": "latest",
     "drizzle-kit": "1.0.0-rc.4",
     "typescript": "^7.0.2"
   },
   "scripts": {
     "typecheck": "tsc --noEmit",
-    "test": "bun test",
+    "test": "oke test",
     "dev": "oke dev"
   }
 }

package/templates/advanced/src/app.ts

@@ -1,15 +1,8 @@
-import "./core";
-import "./locales/en";
-import "./locales/ar";
+import "@/core";
 
-import { oke } from "okengine";
-import * as routes from "./flows/generated";
+import { oke } from "okengine/http";
+import * as routes from "@/flows/generated";
 
-// stores (store.sql/store.files) · secrets (vault.secret) · signals (signal())
-// · channel templates (channel.<medium>().template()) auto-register from
-// `./core` (and `./flows/notes/signals`) — no explicit arrays needed.
-// `./flows/generated` is a real file, regenerated by `oke dev` / `oke build`
-// from every `src/flows/<unit>/index.ts` folder — never edit it by hand.
 export const app = oke({ name: "notes" }).adopt(routes);
 
 export type App = typeof app;

package/templates/advanced/src/core.ts

@@ -0,0 +1,58 @@
+/**
+ * App core — element wiring loaded by `import "@/core"` from `app.ts`.
+ *
+ * Order matches how you usually extend the starter:
+ * locales → store → gate → vault → channel → (AI via `oke ai setup`).
+ * Keep this file until a section outgrows it, then split by element.
+ */
+
+import "@/locales";
+
+import { channel, gate, store, vault } from "okengine";
+import { z } from "zod";
+import * as schema from "@/db/schema.decl";
+
+// --- Store -------------------------------------------------------------------
+
+/** SQL store for Notes (`schema.decl`). Drivers: pglite locally · postgres in docker. */
+export const db = store.sql("app", { schema });
+
+/** Object storage for note attachments (fs locally · s3 in docker). */
+export const files = store.files("uploads");
+
+// --- Gate --------------------------------------------------------------------
+
+/**
+ * Write policy for notes. Starter allows everyone — swap in real auth scopes:
+ *
+ * ```ts
+ * export const notesWrite = gate.policy("notes:write", ({ auth }) =>
+ *   auth.scopes.has("notes:write"),
+ * );
+ * ```
+ */
+export const notesWrite = gate.policy("notes:write", () => true);
+
+// --- Vault -------------------------------------------------------------------
+
+/** HMAC secret for outbound note webhooks (`fx.vault.get` on create). */
+export const webhookSecret = vault.secret("APP_WEBHOOK_SECRET", {
+  description: "HMAC secret for outbound note webhooks",
+  dev: "dev-webhook-secret-change-me",
+});
+
+// --- Channel -----------------------------------------------------------------
+
+const mail = channel.email({ from: "Notes <notes@localhost>" });
+
+/** Fired when a note is created (console driver locally · SMTP in docker). */
+export const noteCreatedMail = mail.template("note-created", {
+  locales: ["en"],
+  schema: z.object({
+    id: z.string(),
+    title: z.string(),
+  }),
+});
+
+// --- AI ----------------------------------------------------------------------
+// `oke ai setup` / create-oke --ai appends models here.

package/templates/advanced/src/db/schema.decl.ts

@@ -2,7 +2,7 @@ import { store, field, id, now } from "okengine";
 
 /**
  * Notes domain — abstract declarations, emitted to
- * `src/db/schema.generated.ts` for the active dialect by `oke db` / `oke dev`.
+ * `src/db/schema.drizzle.ts` for the active dialect by `oke db` / `oke dev`.
  */
 export const notes = store.schema.table("notes", {
   id: field.text().primaryKey().defaultFn(id),

package/templates/advanced/src/db/seed/index.ts

@@ -1,6 +1,6 @@
 import { defineSeed, type Fx } from "okengine";
-import { db } from "../../core";
-import { notes } from "../schema.decl";
+import { db } from "@/core";
+import { notes } from "@/db/schema.decl";
 
 /**
  * Seed data — run explicitly with `oke db seed` (never at boot).

package/templates/advanced/src/flows/notes/index.ts

@@ -1,8 +1,8 @@
 import { on, flow, http, every, gate, fail } from "okengine";
 import { eq, isNull } from "drizzle-orm";
 
-import { db, files, noteCreatedMail, webhookSecret } from "../../core";
-import { notes } from "../../db/schema.decl";
+import { db, files, noteCreatedMail, webhookSecret } from "@/core";
+import { notes } from "@/db/schema.decl";
 import {
   NoteAttachIn,
   NoteAttachOut,
@@ -25,7 +25,6 @@ export const list = on(
   http.get("/notes").gate(gate.public),
   flow("notes.list", {
     out: NoteListOut,
-    effects: { reads: ["sql:app"] },
     do: async (_input, fx) => {
       const rows = await fx.store(db).select().from(notes).where(isNull(notes.archivedAt));
       const sorted = [...rows].sort((a, b) => Number(b.createdAt) - Number(a.createdAt));
@@ -48,14 +47,9 @@ export const create = on(
   flow("notes.create", {
     in: NoteCreateIn,
     out: NoteOut,
-    effects: {
-      writes: ["sql:app"],
-      emits: ["note-created"],
-      secrets: ["APP_WEBHOOK_SECRET"],
-    },
     do: async (input, fx) => {
       // Prove Vault is wired (local: env/dev fallback).
-      fx.vault(webhookSecret);
+      await fx.vault.get(webhookSecret);
       const id = fx.id();
       const createdAt = fx.clock.now();
       await fx.store(db).insert(notes).values({
@@ -84,7 +78,6 @@ export const get = on(
     in: NoteIdIn,
     out: NoteOut,
     errors: { NotFound },
-    effects: { reads: ["sql:app"] },
     do: async (input, fx) => {
       const row = await fx.store(db).findById(notes, input.id);
       if (!row) return fail("NotFound", { id: input.id });
@@ -106,7 +99,6 @@ export const archive = on(
     in: NoteIdIn,
     out: NoteOut,
     errors: { NotFound },
-    effects: { reads: ["sql:app"], writes: ["sql:app"] },
     do: async (input, fx) => {
       const row = await fx.store(db).findById(notes, input.id);
       if (!row) return fail("NotFound", { id: input.id });
@@ -131,7 +123,6 @@ export const archive = on(
 export const onCreated = on(
   noteCreated,
   flow("notes.onCreated", {
-    effects: { sends: ["note-created"] },
     do: async (payload, fx) => {
       await fx.send(noteCreatedMail, {
         to: "you@localhost",
@@ -148,7 +139,6 @@ export const attach = on(
     in: NoteAttachIn,
     out: NoteAttachOut,
     errors: { NotFound },
-    effects: { reads: ["sql:app"], writes: ["files:uploads"] },
     do: async (input, fx) => {
       const row = await fx.store(db).findById(notes, input.id);
       if (!row) return fail("NotFound", { id: input.id });
@@ -164,7 +154,6 @@ export const digest = on(
   every("1d"),
   flow("notes.digest", {
     out: NoteDigestOut,
-    effects: { reads: ["sql:app"] },
     do: async (_input, fx) => {
       const rows = await fx.store(db).select().from(notes).where(isNull(notes.archivedAt));
       return { active: rows.length, at: fx.clock.now() };
@@ -182,7 +171,6 @@ export const summarize = on(
     in: NoteSummarizeIn,
     out: NoteSummarizeOut,
     errors: { NotFound },
-    effects: { reads: ["sql:app"], asks: ["summarize-note"] },
     do: async (input, fx) => {
       const row = await fx.store(db).findById(notes, input.id);
       if (!row) return fail("NotFound", { id: input.id });

package/templates/advanced/src/locales/index.ts

@@ -0,0 +1,6 @@
+/**
+ * Message catalogs — imported once from `src/core.ts`.
+ * Add a sibling import when you add a locale file.
+ */
+
+import "./en";

package/templates/advanced/tests/advanced.test.ts

@@ -1,6 +1,6 @@
 import { afterAll, beforeAll, expect, test } from "bun:test";
 import { createTestApp, type TestApp } from "okengine/test";
-import { app, type App } from "../src/app";
+import { app, type App } from "@/app";
 
 let t: TestApp<App>;
 

package/templates/advanced/tsconfig.json

@@ -6,6 +6,9 @@
     "moduleDetection": "force",
     "types": ["bun"],
     "moduleResolution": "bundler",
+    "paths": {
+      "@/*": ["./src/*"]
+    },
     "allowImportingTsExtensions": true,
     "verbatimModuleSyntax": true,
     "noEmit": true,

package/templates/standard/.env.example

@@ -6,6 +6,25 @@
 # --- Vault (app secrets) ---
 # Declare secrets in src/vault.ts with `vault.secret(...)`, then uncomment lines here.
 #
+# ── vault — built-in encrypted-at-rest store ────────────────
+# `drivers.vault` is "vault": secrets live encrypted in Postgres, no extra service.
+# Nothing below is required to start — the dotenv layers above resolve first.
+#
+#   oke vault init                 # creates the store, prints the master key ONCE
+#   export OKE_VAULT_MASTER_KEY=…  # every later command / boot unseals with this
+#   oke vault status               # sealed / initialized / kek generation
+#   oke vault audit                # hash-chained operation log
+#
+# Keep the master key out of this file in production — read it from your KMS or
+# secret manager at boot. Committing it defeats encryption at rest.
+# OKE_VAULT_MASTER_KEY=
+#
+# For `drivers.vault: "managed"` instead, point at your provider secret store:
+# OKE_VAULT_PROVIDER=aws-secrets-manager
+# OKE_VAULT_REGION=us-east-1
+# Optional prefix for secret names (defaults to oke/<env>/):
+# OKE_VAULT_MOUNT=oke/prod/
+#
 # --- Infrastructure ---
 # Same keys as `docker/.env.docker` after `oke dev --docker`.
 # Uncomment to override compose credentials for a host-managed service.
@@ -87,8 +106,9 @@
 # POSTGRES_INITDB_ARGS=--data-checksums
 
 # ── AI ──────────────────────────────────────────────────────
-# OKE_AI_DRIVER=ollama
-# OKE_AI_URL=http://127.0.0.1:11434
-# OKE_AI_MODEL=qwen3.5:9b
+# Default local: llama.cpp → openai-compatible (Ollama remains supported)
+# OKE_AI_DRIVER=openai-compatible
+# OKE_AI_URL=http://127.0.0.1:8080/v1
+# OKE_AI_MODEL=granite3.3:2b
 # ANTHROPIC_API_KEY=
 # OPENAI_API_KEY=

package/templates/standard/README.md

@@ -48,7 +48,7 @@ never anonymous `flow_1`.
 | `src/db/migrations/` | versioned drizzle migrations |
 | `src/flows/notes/` | list · create · get · archive · onCreated |
 | `src/flows/main/` | root · health |
-| `oke.config.ts` | local sqlite · docker postgres (+ redis/s3/openbao/smtp) |
+| `oke.config.ts` | local env · docker postgres (+ redis/s3/smtp); vault built-in |
 | `.github/workflows/ci.yml` | `bun run typecheck` + `bun test` on push/PR |
 
 Switch mode anytime: `oke mode docker` then `oke dev` (or `oke dev --docker`).

package/templates/standard/drizzle.config.ts

@@ -3,25 +3,22 @@ import { defineConfig } from "drizzle-kit";
 /**
  * Domain schema sync for `oke db push|generate|migrate`.
  *
- * Dialect comes from OKE's `store.sql` driver map (resolved by the CLI and
- * injected as `OKE_DRIZZLE_DIALECT`) — never inferred from `DATABASE_URL`
- * presence. `src/db/schema.generated.ts` is emitted from `src/db/schema.decl.ts`
- * for the active dialect as a pre-step of `oke db` / `oke dev`.
+ * SQL is PostgreSQL-only (postgres / pglite). Domain tables come from
+ * `src/db/schema.decl.ts` → `src/db/schema.drizzle.ts` (emitted as a
+ * pre-step of `oke db` / `oke dev`).
  *
- * Versioned prod migrations land in `./src/db/migrations` — never mix with `.oke/`.
+ * System / auth / plugin stubs are separate: `oke schema generate` →
+ * `.oke/schema/oke.ts` (gitignored with `.oke/`). Re-run after adding plugins.
+ *
+ * Versioned prod migrations land in `./src/db/migrations`.
  */
-const dialect = (process.env.OKE_DRIZZLE_DIALECT ?? "sqlite") as "sqlite" | "postgresql";
-
 export default defineConfig({
-  dialect,
-  schema: "./src/db/schema.generated.ts",
+  dialect: "postgresql",
+  schema: "./src/db/schema.drizzle.ts",
   out: "./src/db/migrations",
   // Core runtime tables (oke_crons, …) are created by drivers — not domain schema.
   tablesFilter: ["!oke_*"],
   dbCredentials: {
-    url:
-      dialect === "postgresql"
-        ? (process.env.DATABASE_URL ?? process.env.OKE_STORE_SQL_URL!)
-        : (process.env.OKE_SQLITE_URL ?? "file:.oke/app.sqlite"),
+    url: process.env.DATABASE_URL ?? process.env.OKE_STORE_SQL_URL!,
   },
 });

package/templates/standard/oke.config.ts

@@ -1,75 +1,33 @@
 import { defineConfig } from "okengine/config";
 
 /**
- * Standard starter — local-first Notes.
- * Docker/prod pins stay ready when you switch `oke mode docker`.
+ * Standard starter — Docker-first Notes.
+ * `oke dev` always uses Docker Compose (dev). Tests use PGLite / memory.
+ * Pin only driver keys that differ from `DRIVER_DEFAULTS` (see okengine/config).
  */
 export default defineConfig({
   db: {
     declare: "src/db/schema.decl.ts",
-    generated: "src/db/schema.generated.ts",
+    generated: "src/db/schema.drizzle.ts",
   },
   drivers: {
-    store: {
-      sql: {
-        local: "sqlite",
-        docker: "postgres",
-        test: "memory",
-        prod: "postgres",
-      },
-      kv: {
-        local: "memory",
-        docker: "redis",
-        test: "memory",
-        prod: "redis",
-      },
-      files: {
-        local: "fs",
-        docker: "s3",
-        test: "memory",
-        prod: "s3",
-      },
-    },
-    signal: {
-      local: "memory",
-      docker: "redis",
-      test: "memory",
-      prod: "redis",
-    },
-    clock: {
-      local: "memory",
-      docker: "postgres",
-      test: "frozen",
-      prod: "postgres",
-    },
-    journal: {
-      local: "memory",
-      docker: "postgres",
-      test: "memory",
-      prod: "postgres",
-    },
+    // Built-in encrypted-at-rest store — lives in Postgres, no extra service.
+    // Default `vault.dev` is `"env"`; pin built-in for local Docker-first apps.
+    // `oke vault init` prints the master key; set OKE_VAULT_MASTER_KEY to unseal.
     vault: {
-      local: "env",
-      docker: "openbao",
-      test: "memory",
-      prod: "openbao",
-    },
-    channel: {
-      email: {
-        local: "console",
-        docker: "smtp",
-        test: "console",
-        prod: "smtp",
-      },
+      dev: "vault",
     },
   },
   images: {
-    "store.sql": "postgres:18-alpine",
-    pgdog: "ghcr.io/pgdogdev/pgdog:v0.1.51",
-    "store.kv": "redis:8-alpine",
-    "store.files": "rustfs/rustfs:1.0.0-beta.11",
-    "channel.email": "axllent/mailpit:v1.22.3",
-    vault: "openbao/openbao:2.6.1",
+    store: {
+      sql: "postgres:18-alpine",
+      kv: "redis:8-alpine",
+      files: "rustfs/rustfs:1.0.0-beta.11",
+    },
+    channel: {
+      email: "axllent/mailpit:v1.22.3",
+    },
+    // pgdog: "ghcr.io/pgdogdev/pgdog:v0.1.51", // create-oke wizard / --pgdog
   },
-  i18n: { locales: ["en", "ar"], default: "en", dir: { ar: "rtl" } },
+  i18n: { locales: ["en"], default: "en" },
 });

package/templates/standard/package.json

@@ -9,13 +9,15 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
+    "@electric-sql/pglite": "^0.5.4",
+    "@electric-sql/pglite-pgvector": "^0.0.5",
     "@types/bun": "latest",
     "drizzle-kit": "1.0.0-rc.4",
     "typescript": "^7.0.2"
   },
   "scripts": {
     "typecheck": "tsc --noEmit",
-    "test": "bun test",
+    "test": "oke test",
     "dev": "oke dev"
   }
 }

package/templates/standard/src/app.ts

@@ -1,15 +1,8 @@
-import "./core";
-import "./locales/en";
-import "./locales/ar";
+import "@/core";
 
-import { oke } from "okengine";
-import * as routes from "./flows/generated";
+import { oke } from "okengine/http";
+import * as routes from "@/flows/generated";
 
-// stores (store.sql) · secrets (vault.secret) · signals (signal()) · channel
-// templates (channel.<medium>().template()) auto-register from `./core`
-// (and `./flows/notes/signals`) — no explicit arrays needed.
-// `./flows/generated` is a real file, regenerated by `oke dev` / `oke build`
-// from every `src/flows/<unit>/index.ts` folder — never edit it by hand.
 export const app = oke({ name: "notes" }).adopt(routes);
 
 export type App = typeof app;