create-oke 0.13.0 → 0.15.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-oke",
-  "version": "0.13.0",
+  "version": "0.15.2",
   "description": "Scaffold an okengine app — bunx create-oke@latest <name>",
   "license": "MIT",
   "repository": {
@@ -32,6 +32,6 @@
     "typescript": "^7.0.2"
   },
   "engines": {
-    "bun": ">=1.3.14"
+    "bun": ">=1.4.0"
   }
 }

package/src/agents-md.ts

@@ -90,7 +90,7 @@ App \`:6530\` · Console \`:6533\` · MCP \`:6535\`. Vite web is \`bun run web\`
 - ❌ Inventing a ninth “element” or a parallel handler stack beside Flows
 - ✅ New capability = new **driver** on an existing element, or a new Flow
 - ❌ Untyped HTTP handlers that skip \`on\` / \`flow\` / contracts
-- ✅ \`on(http.get("/…"), flow(name, { in, out, do }))\`
+- ✅ \`on(http.get(), flow({ in, out, do }))\` — or \`http.get("/…")\` / \`flow("unit.export", {…})\` when the folder is not the URL
 - ❌ Returning \`{ items, count }\` from a list \`do\` (nests the pager inside \`data\`)
 - ✅ \`out: z.array(Item)\` + \`fx.json.withQuery(rows, input)\` — or any other \`out\` you declare
 

package/src/ai-setup/apply.ts

@@ -241,7 +241,9 @@ export function renderAiTs(input: AiSetupApplyInput): string {
 }
 
 /**
- * Write AI model declarations into `src/core.ts` (preferred) or legacy `src/core/ai.ts`.
+ * Write AI model declarations into `src/core/ai.ts` when that split exists
+ * (so a thin `src/core.ts` barrel stays a re-export), else `src/core.ts`,
+ * else legacy `src/core/index.ts` + sidecar.
  *
  * @param cwd - Project root
  * @param input - Setup choices
@@ -249,9 +251,25 @@ export function renderAiTs(input: AiSetupApplyInput): string {
  */
 function writeAiModels(cwd: string, input: AiSetupApplyInput): string {
   const rendered = renderAiTs(input);
+  const coreAiPath = join(cwd, "src", "core", "ai.ts");
   const coreTsPath = join(cwd, "src", "core.ts");
   const legacyIndex = join(cwd, "src", "core", "index.ts");
 
+  if (existsSync(coreAiPath)) {
+    const existing = readFileSync(coreAiPath, "utf8");
+    if (hasAiModels(existing)) {
+      const withPrompt = ensureSummarizeNotePrompt(existing);
+      if (withPrompt !== existing) {
+        writeFileSync(coreAiPath, withPrompt, "utf8");
+      }
+    } else {
+      writeFileSync(coreAiPath, mergeAiIntoCore(existing, rendered), "utf8");
+    }
+    ensureCoreBarrelExportsAi(cwd);
+    ensureCoreImported(cwd);
+    return coreAiPath;
+  }
+
   // Folder layout still in the wild — keep writing a sidecar.
   if (!existsSync(coreTsPath) && existsSync(legacyIndex)) {
     const aiTsPath = join(cwd, "src", "core", "ai.ts");
@@ -361,6 +379,19 @@ export function ensureNamedOkengineImport(source: string, name: string): string
   return source.replace(re, `import { ${sorted.join(", ")} } from "okengine";`);
 }
 
+/**
+ * Keep a `src/core.ts` barrel re-exporting `./core/ai.ts` after a split write.
+ *
+ * @param cwd - Project root
+ */
+function ensureCoreBarrelExportsAi(cwd: string): void {
+  const coreTsPath = join(cwd, "src", "core.ts");
+  if (!existsSync(coreTsPath)) return;
+  const src = readFileSync(coreTsPath, "utf8");
+  if (/from\s+["']\.\/core\/ai/.test(src)) return;
+  writeFileSync(coreTsPath, `${src.trimEnd()}\nexport * from "./core/ai.ts";\n`, "utf8");
+}
+
 /**
  * Ensure `src/app.ts` loads `@/core` / `./core` so merged AI registers.
  *

package/src/cli.test.ts

@@ -319,7 +319,7 @@ describe("interactive branches", () => {
       expect(config).not.toMatch(/^\s*sql:\s*\{/m);
       expect(existsSync(join(dir, ".oke", "mode"))).toBe(false);
       expect(existsSync(join(dir, "docker", "docker-compose.yml"))).toBe(true);
-      expect(existsSync(join(dir, "src", "flows", "notes", "index.ts"))).toBe(true);
+      expect(existsSync(join(dir, "src", "flows", "notes", "create.ts"))).toBe(true);
     } finally {
       rmSync(dir, { recursive: true, force: true });
     }
@@ -336,9 +336,12 @@ describe("interactive branches", () => {
       });
       expect(code).toBe(0);
       expect(existsSync(join(dir, ".oke", "mode"))).toBe(false);
-      const notes = readFileSync(join(dir, "src", "flows", "notes", "index.ts"), "utf8");
-      expect(notes).toContain('flow("notes.digest"');
-      expect(notes).toContain('flow("notes.attach"');
+      expect(existsSync(join(dir, "src", "flows", "notes", "digest.ts"))).toBe(true);
+      expect(existsSync(join(dir, "src", "flows", "notes", "[id]", "attach.ts"))).toBe(true);
+      const digest = readFileSync(join(dir, "src", "flows", "notes", "digest.ts"), "utf8");
+      expect(digest).toContain('every("1d")');
+      const attach = readFileSync(join(dir, "src", "flows", "notes", "[id]", "attach.ts"), "utf8");
+      expect(attach).toContain("export const attach");
       expect(readFileSync(join(dir, "oke.config.ts"), "utf8")).toMatch(
         /index:\s*\{\s*test:\s*"memory",\s*prod:\s*"meilisearch"/,
       );
@@ -668,7 +671,8 @@ describe("scaffold structure", () => {
         "src/locales/index.ts",
         "src/flows/main/shapes.ts",
         "src/flows/main/signals.ts",
-        "src/flows/notes/index.ts",
+        "src/flows/notes/create.ts",
+        "src/flows/notes/[id]/get.ts",
         "src/db/schema.decl.ts",
         "src/db/seed/index.ts",
         "src/app.ts",
@@ -676,10 +680,11 @@ describe("scaffold structure", () => {
       ]) {
         expect(result.files).toContain(path);
       }
-      const notes = readFileSync(join(result.targetDir, "src/flows/notes/index.ts"), "utf8");
-      expect(notes).toContain('flow("notes.create"');
-      expect(notes).toContain("fx.json.withQuery");
-      expect(notes).not.toContain('flow("notes.digest"');
+      const create = readFileSync(join(result.targetDir, "src/flows/notes/create.ts"), "utf8");
+      const list = readFileSync(join(result.targetDir, "src/flows/notes/list.ts"), "utf8");
+      expect(create).toContain("export const create");
+      expect(list).toContain("fx.json.withQuery");
+      expect(existsSync(join(result.targetDir, "src/flows/notes/digest.ts"))).toBe(false);
       expect(existsSync(join(result.targetDir, "src/locales/ar.ts"))).toBe(false);
       expect(readFileSync(join(result.targetDir, "oke.config.ts"), "utf8")).toContain(
         'locales: ["en"]',

package/src/local-okengine.test.ts

@@ -37,8 +37,8 @@ describe("materializeLocalOkengineDependency", () => {
       expect(pkg.peerDependencies).toBeUndefined();
       expect(pkg.dependencies?.["oxc-parser"]).toBeDefined();
       // Peers folded into dependencies so the out-of-tree stage can resolve them.
-      expect(pkg.dependencies?.["drizzle-orm"]).toBe("1.0.0-rc.4");
-      expect(pkg.dependencies?.["drizzle-kit"]).toBe("1.0.0-rc.4");
+      expect(pkg.dependencies?.["drizzle-orm"]).toBe("1.0.0-rc.5-169397b");
+      expect(pkg.dependencies?.["drizzle-kit"]).toBe("1.0.0-rc.5-ab785fc");
       expect(pkg.dependencies?.["zod"]).toBeDefined();
       expect(pkg.exports?.["./config"]).toBe("./src/config/index.ts");
       expect(pkg.trustedDependencies).toContain("@duckdb/node-api");

package/src/local-okengine.ts

@@ -2,9 +2,7 @@
  * Consumer-facing `file:` package for local / monorepo create-oke.
  *
  * Linking the monorepo root pulls `workspaces` + `devDependencies` into the
- * scaffold (Console UI, drizzle-zod, …). Bun then warns that RC
- * `drizzle-orm` fails drizzle-zod’s `>=0.36` peer. Stage a publish-shaped
- * tree instead:
+ * scaffold (Console UI, …). Stage a publish-shaped tree instead:
  *
  * 1. Copy `files` (Bun’s `file:` install drops directory symlinks).
  * 2. Install dependencies **in the stage** — Bun keeps `package.json` as a

package/src/transform.ts

@@ -59,8 +59,8 @@ export type ScaffoldPackageJson = {
  * Resolve the `okengine` dependency string written into the scaffolded package.json.
  *
  * - Monorepo / local: staged publish-shaped `file:` package (no workspaces /
- *   no monorepo `devDependencies` — those pull drizzle-zod and trip Bun’s RC
- *   peer check)
+ *   no monorepo `devDependencies` — those pull Console UI and other
+ *   workspace-only packages into the scaffold)
  * - Published create-oke: the version of this package (kept in lockstep with okengine)
  *
  * @param localOkengineRoot - Absolute path when available

package/templates/advanced/.github/workflows/ci.yml

@@ -15,7 +15,7 @@ jobs:
       - uses: actions/checkout@v6
       - uses: oven-sh/setup-bun@v2.2.0
         with:
-          bun-version: latest
+          bun-version: "1.4.0"
       - name: Install
         run: bun install
       - name: Typecheck

package/templates/advanced/drizzle.config.ts

@@ -16,7 +16,8 @@ export default defineConfig({
   dialect: "postgresql",
   schema: "./src/db/schema.drizzle.ts",
   out: "./src/db/migrations",
-  // Core runtime tables (oke_crons, …) are created by drivers — not domain schema.
+  // Domain tables live in public. Schema `oke` (RLS) and `oke_console` are engine-owned.
+  schemaFilter: ["public"],
   tablesFilter: ["!oke_*"],
   dbCredentials: {
     url: process.env.DATABASE_URL ?? process.env.OKE_STORE_SQL_URL!,

package/templates/advanced/package.json

@@ -6,7 +6,7 @@
   "dependencies": {
     "okengine": "file:../../../..",
     "@duckdb/node-api": "^1.5.5-r.2",
-    "drizzle-orm": "1.0.0-rc.4",
+    "drizzle-orm": "1.0.0-rc.5-169397b",
     "react": "^19.2.8",
     "react-dom": "^19.2.8",
     "zod": "^4.4.3"
@@ -18,7 +18,7 @@
     "@types/react": "^19.2.18",
     "@types/react-dom": "^19.2.4",
     "@vitejs/plugin-react": "^6.0.5",
-    "drizzle-kit": "1.0.0-rc.4",
+    "drizzle-kit": "1.0.0-rc.5-ab785fc",
     "typescript": "^7.0.2",
     "vite": "^8.2.0"
   },

package/templates/advanced/src/app.ts

@@ -1,9 +1,8 @@
 import "@/core";
-import { notesMutate } from "@/core";
+import "@/flows/generated";
 
 import { oke } from "okengine/http";
-import * as routes from "@/flows/generated";
 
-export const app = oke({ name: "notes", gate: { policies: [notesMutate] } }).adopt(routes);
+export const app = oke({ name: "notes" });
 
 export type App = typeof app;

package/templates/advanced/src/flows/generated.ts

@@ -1,4 +1,39 @@
 // AUTO-GENERATED by `oke dev` / `oke build` — do not edit by hand.
-// Regenerated from every `src/flows/<unit>/index.ts` unit folder.
-export * as main from "./main/index.ts";
-export * as notes from "./notes/index.ts";
+// Regenerated from every `src/flows/<unit>/` folder (barrel or file tree).
+import { registerFlowUnits, stampFlowName, stampHttpPath } from "okengine";
+import * as main_health from "./main/health.ts";
+import * as main_route from "./main/route.ts";
+
+const main = {
+  health: stampHttpPath(stampFlowName(main_health.health, "main.health"), "/health"),
+  root: stampHttpPath(stampFlowName(main_route.root, "main.root"), "/"),
+};
+export { main };
+
+import * as notes_$id$_archive from "./notes/[id]/archive.ts";
+import * as notes_$id$_attach from "./notes/[id]/attach.ts";
+import * as notes_$id$_get from "./notes/[id]/get.ts";
+import * as notes_$id$_summarize from "./notes/[id]/summarize.ts";
+import * as notes_create from "./notes/create.ts";
+import * as notes_digest from "./notes/digest.ts";
+import * as notes_list from "./notes/list.ts";
+import * as notes_on_created from "./notes/on-created.ts";
+
+const notes = {
+  archive: stampHttpPath(stampFlowName(notes_$id$_archive.archive, "notes.archive"), "/notes/:id/archive"),
+  attach: stampHttpPath(stampFlowName(notes_$id$_attach.attach, "notes.attach"), "/notes/:id/attach"),
+  get: stampHttpPath(stampFlowName(notes_$id$_get.get, "notes.get"), "/notes/:id"),
+  summarize: stampHttpPath(stampFlowName(notes_$id$_summarize.summarize, "notes.summarize"), "/notes/:id/summarize"),
+  create: stampHttpPath(stampFlowName(notes_create.create, "notes.create"), "/notes"),
+  digest: stampHttpPath(stampFlowName(notes_digest.digest, "notes.digest"), "/notes/digest"),
+  list: stampHttpPath(stampFlowName(notes_list.list, "notes.list"), "/notes"),
+  onCreated: stampHttpPath(stampFlowName(notes_on_created.onCreated, "notes.onCreated"), "/notes/on-created"),
+};
+export { notes };
+registerFlowUnits({ main, notes });
+declare module "okengine" {
+  interface RegisteredFlowUnits {
+    readonly main: typeof main;
+    readonly notes: typeof notes;
+  }
+}

package/templates/advanced/src/flows/main/health.ts

@@ -0,0 +1,11 @@
+import { on, flow, http } from "okengine";
+import { z } from "zod";
+
+/** Liveness for probes and `bun test`. */
+export const health = on(
+  http.get().public(),
+  flow({
+    out: z.object({ ok: z.literal(true) }),
+    do: () => ({ ok: true as const }),
+  }),
+);

package/templates/advanced/src/flows/main/{index.ts → route.ts}

@@ -3,8 +3,8 @@ import { z } from "zod";
 
 /** First-run welcome — visit :6530/ after `oke dev` (browser code block; curl stays JSON). */
 export const root = on(
-  http.get("/").gate.public,
-  flow("main.root", {
+  http.get().public(),
+  flow({
     out: z.object({
       ok: z.literal(true),
       app: z.string(),
@@ -19,12 +19,3 @@ export const root = on(
     }),
   }),
 );
-
-/** Liveness for probes and `bun test`. */
-export const health = on(
-  http.get("/health").gate.public,
-  flow("main.health", {
-    out: z.object({ ok: z.literal(true) }),
-    do: () => ({ ok: true as const }),
-  }),
-);

package/templates/advanced/src/flows/notes/[id]/archive.ts

@@ -0,0 +1,29 @@
+import { on, flow, http, fail } from "okengine";
+import { eq } from "drizzle-orm";
+
+import { db, notesMutate } from "@/core";
+import { notes } from "@/db/schema.decl";
+import { NoteIdIn, NoteOut, NotFound } from "../shapes";
+
+/** Soft-archive a note. */
+export const archive = on(
+  http.post().gate(notesMutate),
+  flow({
+    in: NoteIdIn,
+    out: NoteOut,
+    errors: { NotFound },
+    do: async (input, fx) => {
+      const row = await fx.store(db).findById(notes, input.id);
+      if (!row) return fail("NotFound", { id: input.id });
+      const archivedAt = fx.clock.now();
+      await fx.store(db).update(notes).set({ archivedAt }).where(eq(notes.id, input.id));
+      return {
+        id: String(row.id),
+        title: String(row.title),
+        body: String(row.body),
+        archivedAt,
+        createdAt: Number(row.createdAt),
+      };
+    },
+  }),
+);

package/templates/advanced/src/flows/notes/[id]/attach.ts

@@ -0,0 +1,22 @@
+import { on, flow, http, fail } from "okengine";
+
+import { db, files, notesMutate } from "@/core";
+import { notes } from "@/db/schema.decl";
+import { NoteAttachIn, NoteAttachOut, NotFound } from "../shapes";
+
+/** Store a text attachment next to a note (`files:uploads`). */
+export const attach = on(
+  http.post().gate(notesMutate),
+  flow({
+    in: NoteAttachIn,
+    out: NoteAttachOut,
+    errors: { NotFound },
+    do: async (input, fx) => {
+      const row = await fx.store(db).findById(notes, input.id);
+      if (!row) return fail("NotFound", { id: input.id });
+      const key = `notes/${input.id}/attachment.txt`;
+      await fx.store(files).put(key, input.text);
+      return { key, bytes: new TextEncoder().encode(input.text).byteLength };
+    },
+  }),
+);

package/templates/advanced/src/flows/notes/[id]/get.ts

@@ -0,0 +1,26 @@
+import { on, flow, http, fail } from "okengine";
+
+import { db } from "@/core";
+import { notes } from "@/db/schema.decl";
+import { NoteIdIn, NoteOut, NotFound } from "../shapes";
+
+/** Fetch one note by id. */
+export const get = on(
+  http.get().public(),
+  flow({
+    in: NoteIdIn,
+    out: NoteOut,
+    errors: { NotFound },
+    do: async (input, fx) => {
+      const row = await fx.store(db).findById(notes, input.id);
+      if (!row) return fail("NotFound", { id: input.id });
+      return {
+        id: String(row.id),
+        title: String(row.title),
+        body: String(row.body),
+        archivedAt: row.archivedAt == null ? null : Number(row.archivedAt),
+        createdAt: Number(row.createdAt),
+      };
+    },
+  }),
+);

package/templates/advanced/src/flows/notes/[id]/summarize.ts

@@ -0,0 +1,83 @@
+import { on, flow, http, fail } from "okengine";
+
+import { db, notesMutate } from "@/core";
+import { notes } from "@/db/schema.decl";
+import { NoteSummarizeIn, NoteSummarizeOut, NotFound, Unavailable } from "../shapes";
+
+/**
+ * Pull a usable summary string from an `fx.ask` payload.
+ *
+ * @param out - Model output object
+ */
+function extractSummary(out: unknown): string {
+  if (typeof out === "string") return unwrapSummaryText(out);
+  if (!out || typeof out !== "object") return "";
+  const record = out as Record<string, unknown>;
+  if (typeof record.summary === "string") return record.summary.trim();
+  if (typeof record.text === "string") return unwrapSummaryText(record.text);
+  return "";
+}
+
+/**
+ * Local models sometimes return over-escaped JSON (`{\\"summary\\":...}`).
+ * Peel one or two JSON layers, then fall back to the raw text.
+ *
+ * @param text - Model text payload
+ */
+function unwrapSummaryText(text: string): string {
+  let current = text.trim();
+  for (let i = 0; i < 2; i++) {
+    if (!(current.startsWith("{") || current.startsWith('"'))) break;
+    try {
+      const parsed = JSON.parse(current) as unknown;
+      if (typeof parsed === "string") {
+        current = parsed.trim();
+        continue;
+      }
+      if (parsed && typeof parsed === "object" && "summary" in parsed) {
+        return String((parsed as { summary: unknown }).summary).trim();
+      }
+      break;
+    } catch {
+      break;
+    }
+  }
+  return current;
+}
+
+/**
+ * Summarize a note via the prompt's declared recovery chain.
+ * Exhausted / failed asks surface as Unavailable — never a body excerpt.
+ */
+export const summarize = on(
+  http.post().gate(notesMutate),
+  flow({
+    in: NoteSummarizeIn,
+    out: NoteSummarizeOut,
+    errors: { NotFound, Unavailable },
+    do: async (input, fx) => {
+      const row = await fx.store(db).findById(notes, input.id);
+      if (!row) return fail("NotFound", { id: input.id });
+      try {
+        const out = await fx.ask("summarize-note", {
+          instruction:
+            'Summarize this note in one or two sentences. Reply with JSON only: {"summary":"..."}',
+          title: String(row.title),
+          body: String(row.body),
+        });
+        const summary = extractSummary(out);
+        const via = typeof out.via === "string" ? out.via.trim() : "";
+        if (!summary || !via) {
+          return fail("Unavailable", {
+            message: "AI service unavailable. Try again later.",
+          });
+        }
+        return { id: input.id, summary, via };
+      } catch {
+        return fail("Unavailable", {
+          message: "AI service unavailable. Try again later.",
+        });
+      }
+    },
+  }),
+);

package/templates/advanced/src/flows/notes/create.ts

@@ -0,0 +1,35 @@
+import { on, flow, http } from "okengine";
+
+import { db, notesMutate, webhookSecret } from "@/core";
+import { notes } from "@/db/schema.decl";
+import { NoteCreateIn, NoteOut } from "./shapes";
+import { noteCreated } from "./signals";
+
+/** Create a note, emit `note-created`, touch vault. */
+export const create = on(
+  http.post().gate(notesMutate),
+  flow({
+    in: NoteCreateIn,
+    out: NoteOut,
+    do: async (input, fx) => {
+      await fx.vault.get(webhookSecret);
+      const id = fx.id();
+      const createdAt = fx.clock.now();
+      await fx.store(db).insert(notes).values({
+        id,
+        title: input.title,
+        body: input.body,
+        archivedAt: null,
+        createdAt,
+      });
+      await fx.emit(noteCreated, { id, title: input.title }, { key: id });
+      return {
+        id,
+        title: input.title,
+        body: input.body,
+        archivedAt: null,
+        createdAt,
+      };
+    },
+  }),
+);

package/templates/advanced/src/flows/notes/digest.ts

@@ -0,0 +1,18 @@
+import { on, flow, every } from "okengine";
+import { isNull } from "drizzle-orm";
+
+import { db } from "@/core";
+import { notes } from "@/db/schema.decl";
+import { NoteDigestOut } from "./shapes";
+
+/** Daily count of active notes (frozen under test drivers). */
+export const digest = on(
+  every("1d"),
+  flow({
+    out: NoteDigestOut,
+    do: async (_input, fx) => {
+      const rows = await fx.store(db).select().from(notes).where(isNull(notes.archivedAt));
+      return { active: rows.length, at: fx.clock.now() };
+    },
+  }),
+);

package/templates/advanced/src/flows/notes/list.ts

@@ -0,0 +1,27 @@
+import { on, flow, http } from "okengine";
+import { isNull } from "drizzle-orm";
+
+import { db } from "@/core";
+import { notes } from "@/db/schema.decl";
+import { NoteListOut } from "./shapes";
+
+/** List active (non-archived) notes, newest first. */
+export const list = on(
+  http.get().public(),
+  flow({
+    out: NoteListOut,
+    do: async (input, fx) => {
+      const rows = await fx.store(db).select().from(notes).where(isNull(notes.archivedAt));
+      const data = [...rows]
+        .sort((a, b) => Number(b.createdAt) - Number(a.createdAt))
+        .map((r) => ({
+          id: String(r.id),
+          title: String(r.title),
+          body: String(r.body),
+          archivedAt: r.archivedAt == null ? null : Number(r.archivedAt),
+          createdAt: Number(r.createdAt),
+        }));
+      return fx.json.withQuery(data, input);
+    },
+  }),
+);

package/templates/advanced/src/flows/notes/on-created.ts

@@ -0,0 +1,17 @@
+import { on, flow } from "okengine";
+
+import { noteCreatedMail } from "@/core";
+import { noteCreated } from "./signals";
+
+/** On create → send the note-created email template. */
+export const onCreated = on(
+  noteCreated,
+  flow({
+    do: async (payload, fx) => {
+      await fx.send(noteCreatedMail, {
+        to: "you@localhost",
+        data: { id: payload.id, title: payload.title },
+      });
+    },
+  }),
+);

package/templates/standard/.github/workflows/ci.yml

@@ -15,7 +15,7 @@ jobs:
       - uses: actions/checkout@v6
       - uses: oven-sh/setup-bun@v2.2.0
         with:
-          bun-version: latest
+          bun-version: "1.4.0"
       - name: Install
         run: bun install
       - name: Typecheck

package/templates/standard/drizzle.config.ts

@@ -16,7 +16,8 @@ export default defineConfig({
   dialect: "postgresql",
   schema: "./src/db/schema.drizzle.ts",
   out: "./src/db/migrations",
-  // Core runtime tables (oke_crons, …) are created by drivers — not domain schema.
+  // Domain tables live in public. Schema `oke` (RLS) and `oke_console` are engine-owned.
+  schemaFilter: ["public"],
   tablesFilter: ["!oke_*"],
   dbCredentials: {
     url: process.env.DATABASE_URL ?? process.env.OKE_STORE_SQL_URL!,

package/templates/standard/package.json

@@ -6,7 +6,7 @@
   "dependencies": {
     "okengine": "file:../../../..",
     "@duckdb/node-api": "^1.5.5-r.2",
-    "drizzle-orm": "1.0.0-rc.4",
+    "drizzle-orm": "1.0.0-rc.5-169397b",
     "react": "^19.2.8",
     "react-dom": "^19.2.8",
     "zod": "^4.4.3"
@@ -18,7 +18,7 @@
     "@types/react": "^19.2.18",
     "@types/react-dom": "^19.2.4",
     "@vitejs/plugin-react": "^6.0.5",
-    "drizzle-kit": "1.0.0-rc.4",
+    "drizzle-kit": "1.0.0-rc.5-ab785fc",
     "typescript": "^7.0.2",
     "vite": "^8.2.0"
   },

package/templates/standard/src/app.ts

@@ -1,9 +1,8 @@
 import "@/core";
-import { notesMutate } from "@/core";
+import "@/flows/generated";
 
 import { oke } from "okengine/http";
-import * as routes from "@/flows/generated";
 
-export const app = oke({ name: "notes", gate: { policies: [notesMutate] } }).adopt(routes);
+export const app = oke({ name: "notes" });
 
 export type App = typeof app;

package/templates/standard/src/flows/generated.ts

@@ -1,4 +1,33 @@
 // AUTO-GENERATED by `oke dev` / `oke build` — do not edit by hand.
-// Regenerated from every `src/flows/<unit>/index.ts` unit folder.
-export * as main from "./main/index.ts";
-export * as notes from "./notes/index.ts";
+// Regenerated from every `src/flows/<unit>/` folder (barrel or file tree).
+import { registerFlowUnits, stampFlowName, stampHttpPath } from "okengine";
+import * as main_health from "./main/health.ts";
+import * as main_route from "./main/route.ts";
+
+const main = {
+  health: stampHttpPath(stampFlowName(main_health.health, "main.health"), "/health"),
+  root: stampHttpPath(stampFlowName(main_route.root, "main.root"), "/"),
+};
+export { main };
+
+import * as notes_$id$_archive from "./notes/[id]/archive.ts";
+import * as notes_$id$_get from "./notes/[id]/get.ts";
+import * as notes_create from "./notes/create.ts";
+import * as notes_list from "./notes/list.ts";
+import * as notes_on_created from "./notes/on-created.ts";
+
+const notes = {
+  archive: stampHttpPath(stampFlowName(notes_$id$_archive.archive, "notes.archive"), "/notes/:id/archive"),
+  get: stampHttpPath(stampFlowName(notes_$id$_get.get, "notes.get"), "/notes/:id"),
+  create: stampHttpPath(stampFlowName(notes_create.create, "notes.create"), "/notes"),
+  list: stampHttpPath(stampFlowName(notes_list.list, "notes.list"), "/notes"),
+  onCreated: stampHttpPath(stampFlowName(notes_on_created.onCreated, "notes.onCreated"), "/notes/on-created"),
+};
+export { notes };
+registerFlowUnits({ main, notes });
+declare module "okengine" {
+  interface RegisteredFlowUnits {
+    readonly main: typeof main;
+    readonly notes: typeof notes;
+  }
+}

package/templates/standard/src/flows/main/health.ts

@@ -0,0 +1,11 @@
+import { on, flow, http } from "okengine";
+import { z } from "zod";
+
+/** Liveness for probes and `bun test`. */
+export const health = on(
+  http.get().public(),
+  flow({
+    out: z.object({ ok: z.literal(true) }),
+    do: () => ({ ok: true as const }),
+  }),
+);

package/templates/standard/src/flows/main/{index.ts → route.ts}

@@ -3,8 +3,8 @@ import { z } from "zod";
 
 /** First-run welcome — visit :6530/ after `oke dev` (browser code block; curl stays JSON). */
 export const root = on(
-  http.get("/").gate.public,
-  flow("main.root", {
+  http.get().public(),
+  flow({
     out: z.object({
       ok: z.literal(true),
       app: z.string(),
@@ -19,12 +19,3 @@ export const root = on(
     }),
   }),
 );
-
-/** Liveness for probes and `bun test`. */
-export const health = on(
-  http.get("/health").gate.public,
-  flow("main.health", {
-    out: z.object({ ok: z.literal(true) }),
-    do: () => ({ ok: true as const }),
-  }),
-);

package/templates/standard/src/flows/notes/[id]/archive.ts

@@ -0,0 +1,29 @@
+import { on, flow, http, fail } from "okengine";
+import { eq } from "drizzle-orm";
+
+import { db, notesMutate } from "@/core";
+import { notes } from "@/db/schema.decl";
+import { NoteIdIn, NoteOut, NotFound } from "../shapes";
+
+/** Soft-archive a note. */
+export const archive = on(
+  http.post().gate(notesMutate),
+  flow({
+    in: NoteIdIn,
+    out: NoteOut,
+    errors: { NotFound },
+    do: async (input, fx) => {
+      const row = await fx.store(db).findById(notes, input.id);
+      if (!row) return fail("NotFound", { id: input.id });
+      const archivedAt = fx.clock.now();
+      await fx.store(db).update(notes).set({ archivedAt }).where(eq(notes.id, input.id));
+      return {
+        id: String(row.id),
+        title: String(row.title),
+        body: String(row.body),
+        archivedAt,
+        createdAt: Number(row.createdAt),
+      };
+    },
+  }),
+);

package/templates/standard/src/flows/notes/[id]/get.ts

@@ -0,0 +1,26 @@
+import { on, flow, http, fail } from "okengine";
+
+import { db } from "@/core";
+import { notes } from "@/db/schema.decl";
+import { NoteIdIn, NoteOut, NotFound } from "../shapes";
+
+/** Fetch one note by id. */
+export const get = on(
+  http.get().public(),
+  flow({
+    in: NoteIdIn,
+    out: NoteOut,
+    errors: { NotFound },
+    do: async (input, fx) => {
+      const row = await fx.store(db).findById(notes, input.id);
+      if (!row) return fail("NotFound", { id: input.id });
+      return {
+        id: String(row.id),
+        title: String(row.title),
+        body: String(row.body),
+        archivedAt: row.archivedAt == null ? null : Number(row.archivedAt),
+        createdAt: Number(row.createdAt),
+      };
+    },
+  }),
+);

package/templates/standard/src/flows/notes/create.ts

@@ -0,0 +1,35 @@
+import { on, flow, http } from "okengine";
+
+import { db, notesMutate, webhookSecret } from "@/core";
+import { notes } from "@/db/schema.decl";
+import { NoteCreateIn, NoteOut } from "./shapes";
+import { noteCreated } from "./signals";
+
+/** Create a note, emit `note-created`, touch vault. */
+export const create = on(
+  http.post().gate(notesMutate),
+  flow({
+    in: NoteCreateIn,
+    out: NoteOut,
+    do: async (input, fx) => {
+      await fx.vault.get(webhookSecret);
+      const id = fx.id();
+      const createdAt = fx.clock.now();
+      await fx.store(db).insert(notes).values({
+        id,
+        title: input.title,
+        body: input.body,
+        archivedAt: null,
+        createdAt,
+      });
+      await fx.emit(noteCreated, { id, title: input.title }, { key: id });
+      return {
+        id,
+        title: input.title,
+        body: input.body,
+        archivedAt: null,
+        createdAt,
+      };
+    },
+  }),
+);

package/templates/standard/src/flows/notes/list.ts

@@ -0,0 +1,27 @@
+import { on, flow, http } from "okengine";
+import { isNull } from "drizzle-orm";
+
+import { db } from "@/core";
+import { notes } from "@/db/schema.decl";
+import { NoteListOut } from "./shapes";
+
+/** List active (non-archived) notes, newest first. */
+export const list = on(
+  http.get().public(),
+  flow({
+    out: NoteListOut,
+    do: async (input, fx) => {
+      const rows = await fx.store(db).select().from(notes).where(isNull(notes.archivedAt));
+      const data = [...rows]
+        .sort((a, b) => Number(b.createdAt) - Number(a.createdAt))
+        .map((r) => ({
+          id: String(r.id),
+          title: String(r.title),
+          body: String(r.body),
+          archivedAt: r.archivedAt == null ? null : Number(r.archivedAt),
+          createdAt: Number(r.createdAt),
+        }));
+      return fx.json.withQuery(data, input);
+    },
+  }),
+);

package/templates/standard/src/flows/notes/on-created.ts

@@ -0,0 +1,17 @@
+import { on, flow } from "okengine";
+
+import { noteCreatedMail } from "@/core";
+import { noteCreated } from "./signals";
+
+/** On create → send the note-created email template. */
+export const onCreated = on(
+  noteCreated,
+  flow({
+    do: async (payload, fx) => {
+      await fx.send(noteCreatedMail, {
+        to: "you@localhost",
+        data: { id: payload.id, title: payload.title },
+      });
+    },
+  }),
+);

package/templates/advanced/src/flows/notes/index.ts

@@ -1,241 +0,0 @@
-import { on, flow, http, every, fail } from "okengine";
-import { eq, isNull } from "drizzle-orm";
-
-import { db, files, noteCreatedMail, notesMutate, webhookSecret } from "@/core";
-import { notes } from "@/db/schema.decl";
-import {
-  NoteAttachIn,
-  NoteAttachOut,
-  NoteCreateIn,
-  NoteDigestOut,
-  NoteIdIn,
-  NoteListOut,
-  NoteOut,
-  NoteSummarizeIn,
-  NoteSummarizeOut,
-  NotFound,
-  Unavailable,
-} from "./shapes";
-import { noteCreated } from "./signals";
-
-import "./shapes";
-import "./signals";
-
-/**
- * Pull a usable summary string from an `fx.ask` payload.
- *
- * @param out - Model output object
- */
-function extractSummary(out: unknown): string {
-  if (typeof out === "string") return unwrapSummaryText(out);
-  if (!out || typeof out !== "object") return "";
-  const record = out as Record<string, unknown>;
-  if (typeof record.summary === "string") return record.summary.trim();
-  if (typeof record.text === "string") return unwrapSummaryText(record.text);
-  return "";
-}
-
-/**
- * Local models sometimes return over-escaped JSON (`{\\"summary\\":...}`).
- * Peel one or two JSON layers, then fall back to the raw text.
- *
- * @param text - Model text payload
- */
-function unwrapSummaryText(text: string): string {
-  let current = text.trim();
-  for (let i = 0; i < 2; i++) {
-    if (!(current.startsWith("{") || current.startsWith('"'))) break;
-    try {
-      const parsed = JSON.parse(current) as unknown;
-      if (typeof parsed === "string") {
-        current = parsed.trim();
-        continue;
-      }
-      if (parsed && typeof parsed === "object" && "summary" in parsed) {
-        return String((parsed as { summary: unknown }).summary).trim();
-      }
-      break;
-    } catch {
-      break;
-    }
-  }
-  return current;
-}
-
-/** List active (non-archived) notes, newest first. */
-export const list = on(
-  http.get("/notes").gate.public,
-  flow("notes.list", {
-    out: NoteListOut,
-    do: async (input, fx) => {
-      const rows = await fx.store(db).select().from(notes).where(isNull(notes.archivedAt));
-      const data = [...rows]
-        .sort((a, b) => Number(b.createdAt) - Number(a.createdAt))
-        .map((r) => ({
-          id: String(r.id),
-          title: String(r.title),
-          body: String(r.body),
-          archivedAt: r.archivedAt == null ? null : Number(r.archivedAt),
-          createdAt: Number(r.createdAt),
-        }));
-      return fx.json.withQuery(data, input);
-    },
-  }),
-);
-
-/** Create a note, emit `note-created`, touch vault. */
-export const create = on(
-  http.post("/notes").gate(notesMutate),
-  flow("notes.create", {
-    in: NoteCreateIn,
-    out: NoteOut,
-    do: async (input, fx) => {
-      // Prove Vault is wired (local: env/dev fallback).
-      await fx.vault.get(webhookSecret);
-      const id = fx.id();
-      const createdAt = fx.clock.now();
-      await fx.store(db).insert(notes).values({
-        id,
-        title: input.title,
-        body: input.body,
-        archivedAt: null,
-        createdAt,
-      });
-      await fx.emit(noteCreated, { id, title: input.title }, { key: id });
-      return {
-        id,
-        title: input.title,
-        body: input.body,
-        archivedAt: null,
-        createdAt,
-      };
-    },
-  }),
-);
-
-/** Fetch one note by id. */
-export const get = on(
-  http.get("/notes/:id").gate.public,
-  flow("notes.get", {
-    in: NoteIdIn,
-    out: NoteOut,
-    errors: { NotFound },
-    do: async (input, fx) => {
-      const row = await fx.store(db).findById(notes, input.id);
-      if (!row) return fail("NotFound", { id: input.id });
-      return {
-        id: String(row.id),
-        title: String(row.title),
-        body: String(row.body),
-        archivedAt: row.archivedAt == null ? null : Number(row.archivedAt),
-        createdAt: Number(row.createdAt),
-      };
-    },
-  }),
-);
-
-/** Soft-archive a note. */
-export const archive = on(
-  http.post("/notes/:id/archive").gate(notesMutate),
-  flow("notes.archive", {
-    in: NoteIdIn,
-    out: NoteOut,
-    errors: { NotFound },
-    do: async (input, fx) => {
-      const row = await fx.store(db).findById(notes, input.id);
-      if (!row) return fail("NotFound", { id: input.id });
-      const archivedAt = fx.clock.now();
-      await fx
-        .store(db)
-        .update(notes)
-        .set({ archivedAt })
-        .where(eq(notes.id, input.id));
-      return {
-        id: String(row.id),
-        title: String(row.title),
-        body: String(row.body),
-        archivedAt,
-        createdAt: Number(row.createdAt),
-      };
-    },
-  }),
-);
-
-/** On create → send the note-created email template. */
-export const onCreated = on(
-  noteCreated,
-  flow("notes.onCreated", {
-    do: async (payload, fx) => {
-      await fx.send(noteCreatedMail, {
-        to: "you@localhost",
-        data: { id: payload.id, title: payload.title },
-      });
-    },
-  }),
-);
-
-/** Store a text attachment next to a note (`files:uploads`). */
-export const attach = on(
-  http.post("/notes/:id/attach").gate(notesMutate),
-  flow("notes.attach", {
-    in: NoteAttachIn,
-    out: NoteAttachOut,
-    errors: { NotFound },
-    do: async (input, fx) => {
-      const row = await fx.store(db).findById(notes, input.id);
-      if (!row) return fail("NotFound", { id: input.id });
-      const key = `notes/${input.id}/attachment.txt`;
-      await fx.store(files).put(key, input.text);
-      return { key, bytes: new TextEncoder().encode(input.text).byteLength };
-    },
-  }),
-);
-
-/** Daily count of active notes (frozen under test drivers). */
-export const digest = on(
-  every("1d"),
-  flow("notes.digest", {
-    out: NoteDigestOut,
-    do: async (_input, fx) => {
-      const rows = await fx.store(db).select().from(notes).where(isNull(notes.archivedAt));
-      return { active: rows.length, at: fx.clock.now() };
-    },
-  }),
-);
-
-/**
- * Summarize a note via the prompt's declared recovery chain.
- * Exhausted / failed asks surface as Unavailable — never a body excerpt.
- */
-export const summarize = on(
-  http.post("/notes/:id/summarize").gate(notesMutate),
-  flow("notes.summarize", {
-    in: NoteSummarizeIn,
-    out: NoteSummarizeOut,
-    errors: { NotFound, Unavailable },
-    do: async (input, fx) => {
-      const row = await fx.store(db).findById(notes, input.id);
-      if (!row) return fail("NotFound", { id: input.id });
-      try {
-        const out = await fx.ask("summarize-note", {
-          instruction:
-            'Summarize this note in one or two sentences. Reply with JSON only: {"summary":"..."}',
-          title: String(row.title),
-          body: String(row.body),
-        });
-        const summary = extractSummary(out);
-        const via = typeof out.via === "string" ? out.via.trim() : "";
-        if (!summary || !via) {
-          return fail("Unavailable", {
-            message: "AI service unavailable. Try again later.",
-          });
-        }
-        return { id: input.id, summary, via };
-      } catch {
-        return fail("Unavailable", {
-          message: "AI service unavailable. Try again later.",
-        });
-      }
-    },
-  }),
-);

package/templates/standard/src/flows/notes/index.ts

@@ -1,122 +0,0 @@
-import { on, flow, http, fail } from "okengine";
-import { eq, isNull } from "drizzle-orm";
-
-import { db, noteCreatedMail, notesMutate, webhookSecret } from "@/core";
-import { notes } from "@/db/schema.decl";
-import { NoteCreateIn, NoteIdIn, NoteListOut, NoteOut, NotFound } from "./shapes";
-import { noteCreated } from "./signals";
-
-import "./shapes";
-import "./signals";
-
-/** List active (non-archived) notes, newest first. */
-export const list = on(
-  http.get("/notes").gate.public,
-  flow("notes.list", {
-    out: NoteListOut,
-    do: async (input, fx) => {
-      const rows = await fx.store(db).select().from(notes).where(isNull(notes.archivedAt));
-      const data = [...rows]
-        .sort((a, b) => Number(b.createdAt) - Number(a.createdAt))
-        .map((r) => ({
-          id: String(r.id),
-          title: String(r.title),
-          body: String(r.body),
-          archivedAt: r.archivedAt == null ? null : Number(r.archivedAt),
-          createdAt: Number(r.createdAt),
-        }));
-      return fx.json.withQuery(data, input);
-    },
-  }),
-);
-
-/** Create a note, emit `note-created`, touch vault. */
-export const create = on(
-  http.post("/notes").gate(notesMutate),
-  flow("notes.create", {
-    in: NoteCreateIn,
-    out: NoteOut,
-    do: async (input, fx) => {
-      // Prove Vault is wired (local: env/dev fallback).
-      await fx.vault.get(webhookSecret);
-      const id = fx.id();
-      const createdAt = fx.clock.now();
-      await fx.store(db).insert(notes).values({
-        id,
-        title: input.title,
-        body: input.body,
-        archivedAt: null,
-        createdAt,
-      });
-      await fx.emit(noteCreated, { id, title: input.title }, { key: id });
-      return {
-        id,
-        title: input.title,
-        body: input.body,
-        archivedAt: null,
-        createdAt,
-      };
-    },
-  }),
-);
-
-/** Fetch one note by id. */
-export const get = on(
-  http.get("/notes/:id").gate.public,
-  flow("notes.get", {
-    in: NoteIdIn,
-    out: NoteOut,
-    errors: { NotFound },
-    do: async (input, fx) => {
-      const row = await fx.store(db).findById(notes, input.id);
-      if (!row) return fail("NotFound", { id: input.id });
-      return {
-        id: String(row.id),
-        title: String(row.title),
-        body: String(row.body),
-        archivedAt: row.archivedAt == null ? null : Number(row.archivedAt),
-        createdAt: Number(row.createdAt),
-      };
-    },
-  }),
-);
-
-/** Soft-archive a note. */
-export const archive = on(
-  http.post("/notes/:id/archive").gate(notesMutate),
-  flow("notes.archive", {
-    in: NoteIdIn,
-    out: NoteOut,
-    errors: { NotFound },
-    do: async (input, fx) => {
-      const row = await fx.store(db).findById(notes, input.id);
-      if (!row) return fail("NotFound", { id: input.id });
-      const archivedAt = fx.clock.now();
-      await fx
-        .store(db)
-        .update(notes)
-        .set({ archivedAt })
-        .where(eq(notes.id, input.id));
-      return {
-        id: String(row.id),
-        title: String(row.title),
-        body: String(row.body),
-        archivedAt,
-        createdAt: Number(row.createdAt),
-      };
-    },
-  }),
-);
-
-/** On create → send the note-created email template. */
-export const onCreated = on(
-  noteCreated,
-  flow("notes.onCreated", {
-    do: async (payload, fx) => {
-      await fx.send(noteCreatedMail, {
-        to: "you@localhost",
-        data: { id: payload.id, title: payload.title },
-      });
-    },
-  }),
-);