create-oke 0.2.8 → 0.3.2

package/examples/skyport/src/flows/bookings/index.ts

@@ -1,73 +0,0 @@
-import { on, flow, gate, http } from "okengine";
-import { eq } from "drizzle-orm";
-import { db } from "../../core";
-import { member, fair } from "../../gates";
-import { orderPlaced, seatFeed } from "./signals";
-import { NewBooking, BookingId, BookingRow, FlightFull } from "./shapes";
-import { bookings, flights } from "../../schema";
-
-export const canBook = gate.policy("booking:create", ({ auth }) =>
-  auth.scopes.has("booking:create"),
-);
-
-export const create = on(
-  http.post("/bookings").gate(member, canBook, fair),
-  flow({
-    slo: { availability: "99.9%", latency: { p99: "200ms" } },
-    in: NewBooking,
-    out: BookingId,
-    errors: { FlightFull },
-    do: async ({ flightId, seats }, fx) => {
-      const [flight] = await fx
-        .store(db)
-        .select()
-        .from(flights)
-        .where(eq(flights.id, flightId))
-        .limit(1);
-      if (!flight || flight.seatsAvailable < seats)
-        return fx.fail("FlightFull", { seatsLeft: flight?.seatsAvailable ?? 0 });
-
-      const id = fx.id();
-      await fx.store(db).insert(bookings).values({
-        id,
-        userId: fx.auth.userId,
-        flightId,
-        seats,
-        status: "pending",
-        createdAt: Date.now(),
-      });
-      await fx.emit(orderPlaced, { orderId: id });
-      await fx.emit(seatFeed, { flightId, left: flight.seatsAvailable - seats });
-      return { id };
-    },
-  }),
-);
-
-export const mine = on(
-  http.get("/bookings").gate(member).live(),
-  flow({
-    out: BookingRow.array(),
-    do: (_, fx) => fx.store(db).select().from(bookings).where(eq(bookings.userId, fx.auth.userId)),
-  }),
-);
-
-export const getBooking = flow({
-  in: BookingId,
-  out: BookingRow,
-  do: async ({ id }, fx) => {
-    const [b] = await fx.store(db).select().from(bookings).where(eq(bookings.id, id)).limit(1);
-    return b;
-  },
-});
-
-// The agent's second tool — refunding is a distinct, gated capability, never the same
-// permission as reading a booking, since the agent's tool list is exactly its authority.
-export const refundBooking = flow({
-  in: BookingId,
-  out: BookingRow,
-  do: async ({ id }, fx) => {
-    await fx.store(db).update(bookings).set({ status: "refunded" }).where(eq(bookings.id, id));
-    const [b] = await fx.store(db).select().from(bookings).where(eq(bookings.id, id)).limit(1);
-    return b;
-  },
-});

package/examples/skyport/src/flows/bookings/shapes.ts

@@ -1,6 +0,0 @@
-import { z } from "zod";
-
-export const NewBooking = z.object({ flightId: z.string(), seats: z.number().min(1).max(9) });
-export const BookingId = z.object({ id: z.string() });
-export const BookingRow = z.object({ id: z.string(), status: z.string(), seats: z.number() });
-export const FlightFull = z.object({ seatsLeft: z.number() });

package/examples/skyport/src/flows/bookings/signals.ts

@@ -1,13 +0,0 @@
-import { signal } from "okengine";
-import { z } from "zod";
-
-export const orderPlaced = signal("order-placed", {
-  schema: z.object({ orderId: z.string() }),
-  delivery: "once",
-  retries: 5,
-  deadLetter: true,
-});
-export const seatFeed = signal("seat-feed", {
-  schema: z.object({ flightId: z.string(), left: z.number() }),
-  delivery: "live",
-});

package/examples/skyport/src/flows/notifications/index.ts

@@ -1,16 +0,0 @@
-import { on, flow } from "okengine";
-import { bookingConfirmed } from "../../channels";
-import { orderPlaced } from "../bookings/signals";
-
-export const send = on(
-  orderPlaced,
-  flow({
-    name: "notifications.send",
-    do: async ({ id }, fx) => {
-      await fx.send(bookingConfirmed, {
-        to: fx.auth.userId ?? "guest",
-        data: { name: "Traveler", bookingId: id },
-      });
-    },
-  }),
-);

package/examples/skyport/src/flows/payments/index.ts

@@ -1,14 +0,0 @@
-import { flow } from "okengine";
-import { stripeKey } from "../../vault";
-import { ChargeIn } from "./shapes";
-
-export const chargeBooking = flow({
-  name: "payments.chargeBooking",
-  durable: true,
-  in: ChargeIn,
-  do: async ({ orderId }, fx) => {
-    const intent = await fx.step("create-intent", () => fx.vault(stripeKey));
-    await fx.clock.sleep("verify-window", "2m");
-    return fx.step("confirm", () => ({ orderId, intent }));
-  },
-});

package/examples/skyport/src/flows/payments/shapes.ts

@@ -1,5 +0,0 @@
-import { z } from "zod";
-
-export const ChargeIn = z.object({
-  orderId: z.string(),
-});

package/examples/skyport/src/flows/support/index.ts

@@ -1,50 +0,0 @@
-import { on, flow, http } from "okengine";
-import { z } from "zod";
-import { triage, support, embed, smart, fast } from "../../ai";
-import { member } from "../../gates";
-import { db } from "../../core";
-import { tickets } from "../../schema";
-
-// ① A prompt call with a provider fallback chain and a validated result
-export const createTicket = on(
-  http.post("/tickets").gate(member),
-  flow({
-    in: z.object({ subject: z.string(), body: z.string() }),
-    out: z.object({ id: z.string(), urgency: z.string() }),
-    do: async (input, fx) => {
-      const t = await fx.ask(triage, input, { via: [smart, fast] });
-      const id = fx.id();
-      await fx
-        .store(db)
-        .insert(tickets)
-        .values({ id, ...input, ...t });
-      return { id, urgency: t.urgency };
-    },
-  }),
-);
-// effects → writes[sql:tickets] asks[ticket-triage v3] cost[~$0.01] nondeterministic
-
-// ② RAG — retrieve, then answer with streaming tokens
-export const askDocs = on(
-  http.post("/ask").gate(member).live(),
-  flow({
-    in: z.object({ question: z.string() }),
-    do: async ({ question }, fx) => {
-      const context = await fx.search(embed, question, { topK: 5 });
-      return fx.stream(smart, { prompt: "answer-with-context", data: { question, context } });
-      // streaming reaches the client through the Signal element — no separate socket layer
-    },
-  }),
-);
-
-// ③ A durable, bounded agent
-export const supportAgent = on(
-  http.post("/support").gate(member),
-  flow({
-    durable: true, // nondeterministic calls are ALWAYS journaled
-    in: z.object({ message: z.string() }),
-    do: ({ message }, fx) => fx.run(support, { message }),
-    // the agent can only call getBooking and refundBooking, and only within THIS user's
-    // gates and tenant scope — it cannot exceed what the code declares
-  }),
-);

package/examples/skyport/src/flows/users/elements.ts

@@ -1,2 +0,0 @@
-/** User-unit element stubs (Skyport tree). */
-export const usersUnit = "users";

package/examples/skyport/src/flows/users/index.ts

@@ -1,12 +0,0 @@
-import { on, flow, http } from "okengine";
-import { member } from "../../gates";
-import { UserProfile } from "./shapes";
-
-export const me = on(
-  http.get("/me").gate(member),
-  flow({
-    name: "users.me",
-    out: UserProfile,
-    do: (_input, fx) => ({ id: fx.auth.userId ?? "anon" }),
-  }),
-);

package/examples/skyport/src/flows/users/shapes.ts

@@ -1,6 +0,0 @@
-import { z } from "zod";
-
-export const UserProfile = z.object({
-  id: z.string(),
-  email: z.string().email().optional(),
-});

package/examples/skyport/src/gates.ts

@@ -1,10 +0,0 @@
-import { gate } from "okengine";
-
-export const member = gate.policy("member", ({ auth }) => !!auth?.verified);
-
-export const fair = gate.rate({
-  strategy: "sliding-window-counter",
-  max: 300,
-  per: "1m",
-  keyBy: "user",
-});

package/examples/skyport/src/journeys.ts

@@ -1,9 +0,0 @@
-import { journey } from "okengine";
-import { create } from "./flows/bookings";
-import { chargeBooking } from "./flows/payments";
-import { send } from "./flows/notifications";
-
-journey("book-a-flight", {
-  path: [create, chargeBooking, send],
-  slo: { availability: "99.5%" },
-});

package/examples/skyport/src/locales/ar.ts

@@ -1,4 +0,0 @@
-export default {
-  "booking.confirmed": "تم تأكيد حجزك",
-  "support.ticket": "تم استلام تذكرة الدعم",
-} as const;

package/examples/skyport/src/locales/en.ts

@@ -1,4 +0,0 @@
-export default {
-  "booking.confirmed": "Your booking is confirmed",
-  "support.ticket": "Support ticket received",
-} as const;

package/examples/skyport/src/plugins/audit-schema.ts

@@ -1,7 +0,0 @@
-import { sqliteTable, text, integer } from "drizzle-orm/sqlite-core";
-
-export const auditLog = sqliteTable("audit_log", {
-  id: text("id").primaryKey(),
-  at: integer("at").notNull(),
-  payload: text("payload"),
-});

package/examples/skyport/src/plugins/audit.ts

@@ -1,14 +0,0 @@
-import { plugin, store } from "okengine";
-import { z } from "zod";
-
-export const audit = plugin("audit", { version: "1.0.0" })
-  .config(z.object({ retain: z.string().default("2y") }))
-  .element(store.sql("audit", { schema: () => import("./audit-schema") }))
-  .needs("store.kv")
-  .decorate("audit", { enabled: true })
-  .hook("afterHandle", async (ctx, fx) => {
-    if (ctx.trigger.meta?.audit) await fx.store("audit").log(ctx);
-  })
-  .errors({ AuditWriteFailed: z.object({ reason: z.string() }) })
-  .consolePanel({ id: "audit", title: "Audit Trail", entry: "./panel.tsx" })
-  .cli("audit:export", ({ fx }) => fx.store("audit").exportCsv());

package/examples/skyport/src/plugins/panel.tsx

@@ -1,4 +0,0 @@
-/** Audit Console panel stub (Skyport tree). */
-export default function AuditPanel() {
-  return null;
-}

package/examples/skyport/src/schema.ts

@@ -1,25 +0,0 @@
-import { sqliteTable, text, integer } from "drizzle-orm/sqlite-core";
-import { id } from "okengine/store";
-
-export const bookings = sqliteTable("bookings", {
-  id: text("id").primaryKey().$defaultFn(id),
-  userId: text("user_id").notNull(),
-  flightId: text("flight_id").notNull(),
-  seats: integer("seats").notNull(),
-  status: text("status").notNull().default("pending"),
-  createdAt: integer("created_at").notNull(),
-});
-
-export const flights = sqliteTable("flights", {
-  id: text("id").primaryKey(),
-  seatsAvailable: integer("seats_available").notNull(),
-});
-
-export const tickets = sqliteTable("tickets", {
-  id: text("id").primaryKey(),
-  subject: text("subject").notNull(),
-  body: text("body").notNull(),
-  urgency: text("urgency"),
-  team: text("team"),
-  summary: text("summary"),
-});

package/examples/skyport/src/vault.ts

@@ -1,24 +0,0 @@
-import { vault } from "okengine";
-import { z } from "zod";
-
-export const dbUrl = vault.secret("DATABASE_URL", {
-  schema: z.string().url(),
-  dev: vault.fromDocker("store.sql"),
-});
-
-export const dbReplica1 = vault.secret("DATABASE_REPLICA_1", {
-  schema: z.string().url(),
-  dev: "postgres://localhost/oke-replica",
-});
-
-export const anthropicKey = vault.secret("ANTHROPIC_KEY", {
-  schema: z.string().min(1),
-  dev: "sk-ant-test",
-});
-
-export const stripeKey = vault.secret("STRIPE_KEY", {
-  schema: z.string().startsWith("sk_"),
-  description: "Payments gateway key",
-  rotate: "90d",
-  dev: "sk_test_local",
-});

package/examples/skyport/tests/support.test.ts

@@ -1,16 +0,0 @@
-import { test, expect } from "bun:test";
-import { createTestApp } from "okengine/test";
-import { app } from "../src/app";
-import { triage } from "../src/ai";
-
-test("AI triage is mockable and cost-bounded", async () => {
-  const t = await createTestApp(app);
-  t.ai.mock(triage, { urgency: "high", team: "ops", summary: "seat dispute" });
-
-  const u = await t.auth.loginAs({});
-  const { data } = await t.api.support.createTicket({ subject: "…", body: "…" }, { as: u });
-
-  expect(data!.urgency).toBe("high");
-  expect(t.ai.cost()).toBeLessThan(0.02); // budgets are assertable
-  await t.close();
-});

package/src/sync-templates.ts

@@ -1,77 +0,0 @@
-#!/usr/bin/env bun
-/**
- * prepack: copy repo-root `templates/` and `examples/` into this package so the
- * published npm package can scaffold without the monorepo checkout.
- *
- * Applies the same skip rules as runtime scaffold (no node_modules, no
- * monorepo-only docker.test.ts).
- */
-
-import { cpSync, existsSync, mkdirSync, readdirSync, rmSync, statSync } from "node:fs";
-import { join, relative, resolve } from "node:path";
-import { EXAMPLES, packageRoot, TEMPLATES } from "./templates.ts";
-import { shouldSkipTemplatePath } from "./transform.ts";
-
-const pkg = packageRoot();
-const templatesRoot = resolve(pkg, "../../templates");
-const examplesRoot = resolve(pkg, "../../examples");
-const outTemplates = join(pkg, "templates");
-const outExamples = join(pkg, "examples");
-
-if (!existsSync(templatesRoot)) {
-  console.error(`create-oke prepack: templates/ not found at ${templatesRoot}`);
-  process.exit(1);
-}
-if (!existsSync(examplesRoot)) {
-  console.error(`create-oke prepack: examples/ not found at ${examplesRoot}`);
-  process.exit(1);
-}
-
-rmSync(outTemplates, { recursive: true, force: true });
-rmSync(outExamples, { recursive: true, force: true });
-mkdirSync(outTemplates, { recursive: true });
-mkdirSync(outExamples, { recursive: true });
-
-for (const id of TEMPLATES) {
-  const src = join(templatesRoot, id);
-  const dst = join(outTemplates, id);
-  if (!existsSync(src)) {
-    console.error(`create-oke prepack: missing template ${src}`);
-    process.exit(1);
-  }
-  copyFiltered(src, dst, src);
-  console.log(`create-oke prepack: template ${id}`);
-}
-
-for (const id of EXAMPLES) {
-  const src = join(examplesRoot, id);
-  const dst = join(outExamples, id);
-  if (!existsSync(src)) {
-    console.error(`create-oke prepack: missing example ${src}`);
-    process.exit(1);
-  }
-  copyFiltered(src, dst, src);
-  console.log(`create-oke prepack: example ${id}`);
-}
-
-/**
- * @param src - Source file or directory
- * @param dst - Destination path
- * @param root - Template root for relative skip paths
- */
-function copyFiltered(src: string, dst: string, root: string): void {
-  const st = statSync(src);
-  const rel = relative(root, src).split(/[/\\]/).join("/");
-  if (rel && shouldSkipTemplatePath(rel)) return;
-  if (st.isDirectory()) {
-    mkdirSync(dst, { recursive: true });
-    for (const entry of readdirSync(src)) {
-      copyFiltered(join(src, entry), join(dst, entry), root);
-    }
-    return;
-  }
-  if (st.isFile()) {
-    mkdirSync(join(dst, ".."), { recursive: true });
-    cpSync(src, dst);
-  }
-}

package/templates/full/.env.example

@@ -1,24 +0,0 @@
-# Environment template — copy to `.env.local` for local overrides.
-# create-oke copies this file to `.env.local` when you scaffold a new project.
-#
-# Resolution order (first hit wins):
-#   process.env → .env.local → docker/.env.docker → vault driver → dev fallback
-#
-# --- Vault (app secrets) ---
-
-# APP_SECRET — signs sessions and internal tokens; generate with `openssl rand -hex 32`
-# Local scaffold default (also set as vault `dev:` fallback in src/vault.ts).
-APP_SECRET=dev-only-secret
-
-# --- Infrastructure (optional) ---
-# Commented — this app pins postgres, redis, and smtp (Mailpit) in oke.config.ts.
-# Run `oke dev --docker` to write role-accurate keys into `docker/.env.docker`.
-
-# DATABASE_URL — primary Postgres connection; from your host or `docker/.env.docker` after `oke dev --docker`
-# DATABASE_URL=postgres://user:password@127.0.0.1:5432/oke
-
-# REDIS_URL — Redis/Valkey connection for store.kv; from your host or `docker/.env.docker` after `oke dev --docker`
-# REDIS_URL=redis://:password@127.0.0.1:6379
-
-# SMTP_URL — outbound email (Mailpit in docker dev); from your provider or `docker/.env.docker` after `oke dev --docker`
-# SMTP_URL=smtp://127.0.0.1:1025

package/templates/full/README.md

@@ -1,65 +0,0 @@
-# full
-
-**Every element present and wired** — no business logic. Use when you want the
-complete surface ready to fill in.
-
-## Run
-
-```bash
-bun install
-oke dev          # app :6530 · Console :6533 · MCP :6535
-# or: oke mode docker && oke dev   # postgres · redis · Mailpit · RustFS · sops
-```
-
-Local `oke dev` auto-runs `oke db push` when `schema.ts` changes (opt out:
-`--no-db-push`). Docker/prod never auto-apply DDL — use `oke db migrate`.
-
-| Port    | Try                       |
-| ------- | ------------------------- |
-| `:6530` | `GET /` · `GET /health`   |
-| `:6533` | Console                   |
-| `:6535` | MCP                       |
-
-## What’s in this template
-
-```text
-full/
-├── .env.example               # copied to .env.local by create-oke
-├── drizzle.config.ts          # oke db push|generate|migrate
-├── oke.config.ts              # local: sqlite · docker/prod: postgres
-├── src/
-│   ├── app.ts                 # gates, secrets, signals, stores, channel, ai
-│   ├── core.ts / schema.ts    # Store
-│   ├── gates.ts               # open gate (used on HTTP)
-│   ├── vault.ts               # appSecret
-│   ├── channels.ts            # welcome template
-│   ├── ai.ts                  # stub model + echo prompt
-│   ├── locales/en.ts · ar.ts
-│   └── flows/main/
-│       ├── index.ts           # GET / · GET /health · every("1d")
-│       ├── shapes.ts
-│       └── signals.ts         # pinged
-└── tests/full.test.ts
-```
-
-- **Elements wired:** Flow · Store · Signal · Clock (`every`) · Gate · Vault · Channel · AI
-- **Unit:** `main`
-- **App `$options`:** `gates`, `secrets`, `signals`, `stores`, `channel`, `ai`
-- **Flows:** `root`, `health` (emits `pinged`), plus a trivial daily cron
-
-Replace stubs with real models, prompts, channels, and domain flows. Prefer
-`standard` if you do not need AI / clock / vault on day one.
-
-## Docker mode (`oke dev --docker`)
-
-Closest to production protocols: Postgres, Redis, SMTP (Mailpit), S3 (RustFS),
-vault `sops`/age. Compose credentials land in `docker/.env.docker`.
-
-| Surface        | URL                                              |
-| -------------- | ------------------------------------------------ |
-| Mailpit UI     | [http://127.0.0.1:8025](http://127.0.0.1:8025)   |
-| RustFS console | [http://127.0.0.1:9001](http://127.0.0.1:9001)   |
-
-## Agent contract
-
-See [`AGENTS.md`](./AGENTS.md). Handbook: [okengine.vercel.app/docs](https://okengine.vercel.app/docs)

package/templates/full/drizzle.config.ts

@@ -1,14 +0,0 @@
-import { defineConfig } from "drizzle-kit";
-
-/**
- * Domain schema sync for `oke db push|generate|migrate`.
- * Versioned prod migrations land in `./drizzle` — never mix with `.oke/`.
- */
-export default defineConfig({
-  dialect: "sqlite",
-  schema: "./src/schema.ts",
-  out: "./drizzle",
-  dbCredentials: {
-    url: process.env.OKE_SQLITE_URL ?? "file:.oke/app.sqlite",
-  },
-});

package/templates/full/package.json

@@ -1,18 +0,0 @@
-{
-  "name": "@oke/template-full",
-  "version": "0.0.1",
-  "private": true,
-  "type": "module",
-  "dependencies": {
-    "okengine": "file:../..",
-    "drizzle-orm": "^1.0.0-rc.4",
-    "zod": "^4.4.3"
-  },
-  "devDependencies": {
-    "drizzle-kit": "^1.0.0-rc.4"
-  },
-  "scripts": {
-    "test": "bun test",
-    "dev": "oke dev"
-  }
-}

package/templates/full/src/ai.ts

@@ -1,11 +0,0 @@
-import { ai } from "okengine";
-import { z } from "zod";
-
-export const stub = ai.model("stub", { provider: "anthropic", tier: "haiku" });
-
-/** Stub prompt — replace with real versioned prompts. */
-export const echo = stub.prompt("echo", {
-  in: z.object({ text: z.string() }),
-  out: z.object({ text: z.string() }),
-  version: 1,
-});

package/templates/full/src/app.ts

@@ -1,34 +0,0 @@
-import { db } from "./core";
-import { open } from "./gates";
-import { appSecret } from "./vault";
-import { welcome } from "./channels";
-import { stub, echo } from "./ai";
-import { pinged } from "./flows/main/signals";
-import "./channels";
-import "./gates";
-import "./ai";
-import "./locales/en";
-import "./locales/ar";
-
-import { oke } from "okengine";
-import * as main from "./flows/main";
-
-export const app = oke({ name: "full" }).adopt({ main });
-
-export type App = typeof app;
-
-Object.assign(app.$options, {
-  env: "test",
-  gates: [open],
-  secrets: [appSecret],
-  signals: [pinged],
-  stores: [db],
-  channel: {
-    templates: [welcome],
-    defaultLocale: "en",
-  },
-  ai: {
-    models: [stub],
-    prompts: [echo],
-  },
-});

package/templates/full/src/channels.ts

@@ -1,9 +0,0 @@
-import { channel } from "okengine";
-import { z } from "zod";
-
-export const mail = channel.email({ from: "App <no-reply@example.com>" });
-
-/** Stub channel template — replace with real copy. */
-export const welcome = mail.template("welcome", {
-  schema: z.object({ name: z.string() }),
-});

package/templates/full/src/core.ts

@@ -1,4 +0,0 @@
-import { store } from "okengine";
-import * as schema from "./schema";
-
-export const db = store.sql("app", { schema });

package/templates/full/src/flows/main/index.ts

@@ -1,45 +0,0 @@
-import { on, flow, http, every } from "okengine";
-import { z } from "zod";
-import { open } from "../../gates";
-import { Health } from "./shapes";
-import { pinged } from "./signals";
-
-/** First-run welcome — visit :6530/ after `oke dev`. */
-export const root = on(
-  http.get("/").gate(open),
-  flow({
-    out: z.object({
-      ok: z.literal(true),
-      console: z.string(),
-      try: z.string(),
-    }),
-    do: () => ({
-      ok: true as const,
-      console: "http://127.0.0.1:6533",
-      try: "/health",
-    }),
-  }),
-);
-
-export const health = on(
-  http.get("/health").gate(open),
-  flow({
-    out: Health,
-    do: async (_input, fx) => {
-      await fx.emit(pinged, { at: Date.now() });
-      return { ok: true as const };
-    },
-  }),
-);
-
-on(pinged, flow({
-  do: async () => {},
-}));
-
-/** Trivial cron — replace with real schedules. */
-on(
-  every("1d"),
-  flow({
-    do: async () => {},
-  }),
-);

package/templates/full/src/flows/main/shapes.ts

@@ -1,3 +0,0 @@
-import { z } from "zod";
-
-export const Health = z.object({ ok: z.literal(true) });