okengine 0.10.3 → 0.11.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "okengine",
-  "version": "0.10.3",
+  "version": "0.11.0",
   "description": "One law. Eight elements. Ten exports. One package. One manifest. Every backend need is derived, never added.",
   "license": "MIT",
   "repository": {
@@ -16,6 +16,7 @@
   ],
   "files": [
     "src",
+    "dist",
     "manifest.v1.schema.json",
     "AGENTS.md",
     "README.md",
@@ -24,7 +25,48 @@
   "type": "module",
   "sideEffects": false,
   "exports": {
-    ".": "./src/index.ts",
+    ".": {
+      "types": "./src/index.ts",
+      "bun": "./src/index.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./http": {
+      "types": "./src/http.ts",
+      "bun": "./src/http.ts",
+      "import": "./dist/http.js",
+      "default": "./dist/http.js"
+    },
+    "./kernel": {
+      "types": "./src/kernel-entry.ts",
+      "bun": "./src/kernel-entry.ts",
+      "import": "./dist/kernel-entry.js",
+      "default": "./dist/kernel-entry.js"
+    },
+    "./full": {
+      "types": "./src/full.ts",
+      "bun": "./src/full.ts",
+      "import": "./dist/full.js",
+      "default": "./dist/full.js"
+    },
+    "./i18n": {
+      "types": "./src/i18n-entry.ts",
+      "bun": "./src/i18n-entry.ts",
+      "import": "./dist/i18n-entry.js",
+      "default": "./dist/i18n-entry.js"
+    },
+    "./compiler": {
+      "types": "./src/compiler-entry.ts",
+      "bun": "./src/compiler-entry.ts",
+      "import": "./dist/compiler-entry.js",
+      "default": "./dist/compiler-entry.js"
+    },
+    "./journal": {
+      "types": "./src/journal-entry.ts",
+      "bun": "./src/journal-entry.ts",
+      "import": "./dist/journal-entry.js",
+      "default": "./dist/journal-entry.js"
+    },
     "./client": "./src/client/index.ts",
     "./client/auth": "./src/client/auth.ts",
     "./client-react": "./src/client-react/index.ts",
@@ -56,7 +98,8 @@
     "test:coverage": "bun test --coverage --pass-with-no-tests",
     "test:console:smoke": "bunx playwright test tests/console/smoke.spec.ts",
     "build": "bunx vite build --config src/console/ui/vite.config.ts",
-    "prepack": "bun run build",
+    "build:lib": "bun src/release/build-lib.ts",
+    "prepack": "bun run build && bun run build:lib",
     "bench": "bun test ./src/runtime/cold-start.bench.ts src/client/budget.test.ts src/console/budget.test.ts src/kernel/budget.test.ts src/kernel/routing-budget.test.ts src/runs/bench.test.ts",
     "budgets": "bun src/release/publish.ts",
     "gate": "PUBLISH_GATE=1 bun test src/cli/doc-staleness.test.ts src/cli/competitor-mention-removal.test.ts src/drivers/vault-driver-removal.test.ts src/kernel/errors.registry.test.ts src/upgrade/codemods.test.ts scripts/publish.gate.test.ts",
@@ -69,11 +112,7 @@
   },
   "dependencies": {
     "@clack/prompts": "^1.7.0",
-    "@duckdb/node-api": "^1.5.5-r.2",
-    "ajv": "^8.20.0",
-    "ajv-formats": "^3.0.1",
     "intl-messageformat": "^11.2.13",
-    "oxc-parser": "^0.142.0",
     "sently": "1.2.1"
   },
   "devDependencies": {
@@ -83,9 +122,9 @@
     "@codemirror/state": "^6.7.1",
     "@codemirror/theme-one-dark": "^6.1.3",
     "@codemirror/view": "^6.43.7",
+    "@duckdb/node-api": "^1.5.5-r.2",
     "@electric-sql/pglite": "^0.5.4",
     "@electric-sql/pglite-pgvector": "^0.0.5",
-    "@libsql/client": "^0.17.4",
     "@oxc-project/types": "^0.142.0",
     "@playwright/test": "^1.62.1",
     "@sinclair/typebox": "^0.34.52",
@@ -96,6 +135,8 @@
     "@types/react": "^19.2.18",
     "@types/react-dom": "^19.2.4",
     "@vitejs/plugin-react": "^6.0.5",
+    "ajv": "^8.20.0",
+    "ajv-formats": "^3.0.1",
     "arktype": "^2.2.3",
     "axe-core": "^4.12.1",
     "clsx": "^2.1.1",
@@ -106,6 +147,7 @@
     "gflows": "^1.2.1",
     "happy-dom": "^20.11.1",
     "mermaid": "^11.16.0",
+    "oxc-parser": "^0.142.0",
     "oxfmt": "^0.61.0",
     "oxlint": "^1.76.0",
     "oxlint-tsgolint": "^7.0.2001",
@@ -119,22 +161,39 @@
     "zod": "^4.4.3"
   },
   "peerDependencies": {
+    "@aws-sdk/client-kms": ">=3.0.0",
+    "@aws-sdk/client-secrets-manager": ">=3.0.0",
+    "@duckdb/node-api": ">=1.5.0",
     "@electric-sql/pglite": ">=0.5.0",
     "@electric-sql/pglite-pgvector": ">=0.0.5",
-    "@libsql/client": ">=0.15.0",
+    "ajv": ">=8.0.0",
+    "ajv-formats": ">=3.0.0",
     "drizzle-kit": ">=1.0.0-rc.0",
     "drizzle-orm": ">=1.0.0-rc.0",
     "drizzle-seed": ">=0.3.0",
+    "oxc-parser": ">=0.140.0",
     "zod": ">=3.23.0"
   },
   "peerDependenciesMeta": {
+    "@aws-sdk/client-kms": {
+      "optional": true
+    },
+    "@aws-sdk/client-secrets-manager": {
+      "optional": true
+    },
+    "@duckdb/node-api": {
+      "optional": true
+    },
     "@electric-sql/pglite": {
       "optional": true
     },
     "@electric-sql/pglite-pgvector": {
       "optional": true
     },
-    "@libsql/client": {
+    "ajv": {
+      "optional": true
+    },
+    "ajv-formats": {
       "optional": true
     },
     "drizzle-kit": {
@@ -146,10 +205,17 @@
     "drizzle-seed": {
       "optional": true
     },
+    "oxc-parser": {
+      "optional": true
+    },
     "zod": {
       "optional": true
     }
   },
+  "optionalDependencies": {
+    "ink": "^6.0.0",
+    "react": "^19.2.8"
+  },
   "engines": {
     "bun": ">=1.3.14"
   }

package/site/content/docs/deployment/docker-swarm.mdx

@@ -1,13 +1,13 @@
 ---
 title: Docker Swarm
-description: Deploy the generated compose stack with docker stack deploy — PgDog, HEALTHCHECK readiness, graceful SIGTERM, known multi-instance limits, and optional Caddy or Traefik.
+description: Deploy with docker stack deploy — docker-stack.yml, PgDog, HEALTHCHECK readiness, graceful SIGTERM, known multi-instance limits, and optional Caddy or Traefik.
 icon: Ship
 source: README.md
 ---
 
-Swarm consumes the same files `oke docker --prod` already writes. It adds
-built-in orchestration (scale, rolling updates, routing mesh) with a lower
-learning curve than Kubernetes. Scale replaceable replicas; share durable drivers.
+Swarm consumes the stack file `oke docker --stack` writes. It adds built-in
+orchestration (scale, rolling updates, routing mesh) with a lower learning
+curve than Kubernetes. Scale replaceable replicas; share durable drivers.
 
 <Callout title="The one rule">
   Deploy with `docker stack deploy`. Docker’s single `HEALTHCHECK` targets `GET /_/ready`. Treat
@@ -20,34 +20,35 @@ learning curve than Kubernetes. Scale replaceable replicas; share durable driver
 <Steps>
 
 <Step>
-### Derive the prod compose layers
+### Derive the Swarm stack file
 
 ```bash
-oke docker --prod
+oke docker --stack
 ```
 
-Emits `Dockerfile`, per-role layers, `compose.prod.yml` (`HEALTHCHECK` →
-`/_/ready`, `deploy.*`, `stop_grace_period: 30s`), and **`compose.all.yml`**
-(layers 1–3 merged). `compose.override.yml` is yours (never written by oke).
+Emits `Dockerfile` + **`docker-stack.yml`** (overlay network, `HEALTHCHECK` →
+`/_/ready`, `deploy.*`, `stop_grace_period: 30s`, resource limits from the
+default **4 CPU / 8 GiB** budget — override with `--cpus` / `--memory`).
+
+Prefer `--stack` over composing many `-c` files. The default `oke docker`
+(single `docker-compose.yml`) stays for plain Compose hosts.
 
 </Step>
 
 <Step>
 ### Build the app image, init Swarm, deploy
 
-`docker stack deploy` ignores `build` — tag first (name matches `compose.yml`).
-Prefer the single merged file:
+`docker stack deploy` ignores `build` — tag first (name matches the stack file).
 
 ```bash
 docker build -t oke-<app>:latest -f docker/Dockerfile .
 docker swarm init
 cd docker
-docker stack deploy -c compose.all.yml myapp
+docker stack deploy -c docker-stack.yml myapp
 ```
 
-Optional: `-c compose.override.yml` after that for local tweaks. Create
-`secrets:` names via `docker secret create`, or drop those keys in
-`compose.override.yml` while using `.env.docker`.
+Create `secrets:` names via `docker secret create` when you use secret refs,
+or keep credentials in `.env.docker` for single-node labs.
 
 </Step>
 
@@ -59,9 +60,8 @@ docker service scale myapp_app=3
 docker service update --image oke-<app>:latest myapp_app
 ```
 
-Prod overlay: `update_config` (`parallelism: 1`, `order: start-first`,
+Prod deploy block: `update_config` (`parallelism: 1`, `order: start-first`,
 `failure_action: rollback`) and `restart_policy.condition: on-failure`.
-Tweak in `compose.override.yml`.
 
 </Step>
 
@@ -69,7 +69,7 @@ Tweak in `compose.override.yml`.
 
 ## Share backing services
 
-Pin docker/prod drivers to shared stores:
+Pin `dev`/`prod` drivers to shared stores:
 
 | Concern                       | Driver                       | Shared backend                                    |
 | ----------------------------- | ---------------------------- | ------------------------------------------------- |
@@ -83,9 +83,10 @@ Pin docker/prod drivers to shared stores:
 Bun.SQL defaults to **10** connections per process — fine for one replica.
 Scale the Swarm service and `N × pool` can exceed Postgres `max_connections`.
 
-When both `store.sql` and `pgdog` are pinned (docker/prod default in templates),
+When both `store.sql` and `pgdog` are pinned (`dev`/`prod` default in templates),
 `DATABASE_URL` points at PgDog on port `6432` — transaction pooling, wire-protocol
-transparent to Bun.SQL / Drizzle. No app code changes.
+transparent to Bun.SQL / Drizzle. No app code changes. Configs:
+`docker/pgdog/pgdog.toml` + `docker/pgdog/users.toml`.
 
 **Why PgDog.** Transaction pooling fixes the connection math. Naive poolers can
 leak session state (`SET`, RLS vars, `LISTEN`/`NOTIFY`) across clients; PgDog
@@ -100,129 +101,65 @@ not configured in the generated stack yet.
 the same way — driver id stays `redis`, same `REDIS_URL`. Image table + one-line
 licenses: [Store · KV](/docs/elements/store#kv).
 
-## HEALTHCHECK (not two probes)
-
-Swarm has one Docker `HEALTHCHECK` — no separate readiness/liveness.
-
-| Endpoint       | Role in OKE                                            | Swarm                                                                                |
-| -------------- | ------------------------------------------------------ | ------------------------------------------------------------------------------------ |
-| `GET /_/ready` | Kernel readiness (`booting` → `orphan_scan` → `ready`) | **Use this** — mesh + rolling updates wait; `start_period: 60s` covers orphan resume |
-| `GET /health`  | App liveness (create-oke)                              | External monitors only — not a second native probe                                   |
+## Readiness and liveness
 
-`/_/ready` returns `200 { ready: true }` only after boot and the durable orphan
-scan finish. While booting or scanning it returns
-`503 { ready: false, reason: "booting" | "orphan_scan" }`.
-
-**Consequence:** orphan scan delays “healthy” (and traffic) on purpose. After
-`start_period`, failing `/_/ready` can mark the task unhealthy and hit
-`restart_policy` — Swarm cannot drain traffic without also counting toward restart.
+| Endpoint       | Role                                                   | On Swarm                                              |
+| -------------- | ------------------------------------------------------ | ----------------------------------------------------- |
+| `GET /_/ready` | Kernel readiness (`booting` → `orphan_scan` → `ready`) | Single Docker `HEALTHCHECK` — routing mesh waits here |
+| `GET /health`  | App liveness                                           | External monitors only                                |
 
 ## Graceful shutdown
 
-On `SIGTERM` / `SIGINT`, `installGracefulShutdown` (wired by `oke dev`’s app
-runner; call it next to `createBunRuntime().serve` in custom entries):
-
-1. Stops accepting new connections
-2. Releases **Clock** cron leases and **Journal** run leases held by this instance
-3. Closes element runtimes and exits
-
-Swarm sends SIGTERM on service update and scale-down the same way.
-
-Signal message leases have no proactive release today — survivors reclaim after
-the visibility TTL (default 30s). `compose.prod.yml` sets `stop_grace_period: 30s`
-(peer of K8s `terminationGracePeriodSeconds`) so release can finish.
+`stop_grace_period: 30s` gives `installGracefulShutdown` time to release Clock /
+Journal leases before the task is killed. Signal message leases reclaim after
+visibility TTL on survivors.
 
 ## Reverse proxy
 
-Swarm's routing mesh reaches tasks; it does **not** issue TLS certificates.
-For HTTPS on the same files, opt in to `images.proxy`:
-
-| Choice                       | Best for                                   | How routing works                                                  |
-| ---------------------------- | ------------------------------------------ | ------------------------------------------------------------------ |
-| **Caddy** (`caddy:2-alpine`) | Single instance, simplest automatic HTTPS  | Generated `Caddyfile` → `reverse_proxy app:6530`                   |
-| **Traefik** (`traefik:v3.3`) | Horizontally scaled compose / Swarm stacks | Docker labels on `app`; replicas auto-discovered and load-balanced |
-
-```typescript title="oke.config.ts"
-images: {
-  // …
-  proxy: "caddy:2-alpine", // or "traefik:v3.3"
-},
-```
-
-```bash title="docker/.env.docker"
-OKE_PROXY_HOST=app.example.com
-OKE_PROXY_ACME_EMAIL=admin@example.com
-```
-
-Include `compose.proxy.yml` in the `-c` list. Edge publishes `80`/`443`.
-Set `allowedHosts` to your public hostname ([Security](/docs/reference/security)).
-
-Traefik never mounts raw `docker.sock` — only a filtered
-`tecnativa/docker-socket-proxy` on the internal network. Full custom-domain,
-Let's Encrypt, and socket-proxy rationale → [Reverse proxy](/docs/deployment/reverse-proxy).
+Same opt-in `images.proxy` pins as plain Compose — Caddy or Traefik. Re-run
+`oke docker --stack` after pinning. Details:
+[Reverse proxy](/docs/deployment/reverse-proxy).
 
 ## Known multi-instance limits
 
-| Surface                                  | Multi-instance today                                                                                       |
-| ---------------------------------------- | ---------------------------------------------------------------------------------------------------------- |
-| Clock (`postgres` / shared `file`)       | Shared leader election                                                                                     |
-| Journal (`postgres` / shared `file`)     | Shared durable runs + orphan resume                                                                        |
-| Gate rates (`drivers.store.kv: redis`)   | Shared counters                                                                                            |
-| Store SQL / KV redis / files `s3`        | Shared                                                                                                     |
-| Store files `fs`                         | **Per-instance filesystem** — boot warns; use `s3` when scaled                                             |
-| Signal `redis`                           | Emit relays to Redis; **consume / `live` / `drain` are process-local outbox** until Streams consume ships  |
-| Channel suppression / consent / receipts | **Default stores are process-local** — opt-out on replica A is invisible to B until a durable driver ships |
+Same table as [Docker](/docs/deployment/docker#known-multi-instance-limits) —
+Clock / Journal / Gate redis / Store shared; Signal consume and Channel consent
+stores stay process-local until durable drivers ship.
 
 ## Troubleshooting
 
 <Accordions>
-<Accordion title="Stack deploy ignores my Dockerfile build">
-
-Build and tag first (`docker build -t oke-<app>:latest …`). Swarm runs the
-`image:` tag only — never compose `build:`.
-
-</Accordion>
-<Accordion title="New replica gets traffic before orphan scan finishes">
-
-Confirm `compose.prod.yml` is in the `-c` list and the task health-checks
-`/_/ready`. Without that HEALTHCHECK, Swarm treats “container started” as ready.
-
-</Accordion>
-<Accordion title="Rate limits look twice as high after scaling to 2">
+<Accordion title="stack deploy ignores build">
 
-`drivers.store.kv` must be `redis` with `REDIS_URL` set. A missing URL **fails
-boot** (no silent memory fallback). Declaring `memory` for local is fine;
-docker/prod should stay on redis.
+Build and tag `oke-<app>:latest` first (`docker build -f docker/Dockerfile .`).
+Swarm never runs Compose `build:`.
 
 </Accordion>
-<Accordion title="Files uploaded on task A are missing on task B">
+<Accordion title="New task gets traffic before orphan scan finishes">
 
-`drivers.store.files: "fs"` is single-host. Switch docker/prod to `s3`
-(create-oke templates already do).
+Confirm `HEALTHCHECK` targets `/_/ready` in `docker-stack.yml`. Without it,
+Swarm treats “container started” as ready.
 
 </Accordion>
-<Accordion title="Multi-node workers cannot reach store-sql">
+<Accordion title="Overlay networking / multi-node volumes">
 
-Generated `networks.oke.driver` is `bridge` (fine for single-node `swarm init`).
-Multi-node: set `driver: overlay` in `compose.override.yml`.
+Multi-node needs shared Postgres / Redis / S3 — do not rely on local named
+volumes for durable state across nodes.
 
 </Accordion>
 </Accordions>
 
 ## Learn more
 
-- [Deployment](/docs/deployment) — choose compose, Swarm, or Kubernetes
-- [Docker](/docs/deployment/docker) — plain compose without Swarm
-- [Reverse proxy](/docs/deployment/reverse-proxy) — Caddy / Traefik in full
+- [Docker](/docs/deployment/docker) — plain compose default
+- [Reverse proxy](/docs/deployment/reverse-proxy) — Caddy / Traefik
 - [Kubernetes](/docs/deployment/kubernetes) — Deployment, probes, Ingress
-- [CLI](/docs/reference/cli) — `oke docker --prod`, `oke start`
-- [Store](/docs/elements/store) — PgDog and facets
-- [Flow](/docs/elements/flow) — durable journal
+- [CLI](/docs/reference/cli) — `oke docker --stack`
 
 ## Next
 
 <Cards>
-  <Card title="Deployment" href="/docs/deployment" />
   <Card title="Docker" href="/docs/deployment/docker" />
+  <Card title="Reverse proxy" href="/docs/deployment/reverse-proxy" />
   <Card title="Kubernetes" href="/docs/deployment/kubernetes" />
 </Cards>

package/site/content/docs/deployment/docker.mdx

@@ -1,13 +1,13 @@
 ---
 title: Docker
-description: Deploy with plain docker compose — shared drivers, PgDog, readiness, graceful SIGTERM, and opt-in Caddy or Traefik when you need TLS without an orchestrator.
+description: Deploy with plain docker compose — single production-grade docker-compose.yml, shared drivers, PgDog, readiness, graceful SIGTERM, and opt-in Caddy or Traefik when you need TLS without an orchestrator.
 icon: Package
 source: README.md
 ---
 
 Plain `docker compose` is the simplest production shape: single or few app
 instances on one host (or a small set you manage yourself). Derive with
-`oke docker --prod`; opt into a proxy only when you need HTTPS at the edge.
+`oke docker`; opt into a proxy only when you need HTTPS at the edge.
 
 <Callout title="The one rule">
   Treat every app container as replaceable. Put durable state in Postgres / Redis / S3, wait on `GET
@@ -23,11 +23,21 @@ instances on one host (or a small set you manage yourself). Derive with
 ### Derive compose
 
 ```bash
-oke docker --prod
+oke docker
 ```
 
-Writes `Dockerfile`, `compose.yml`, per-role layers, and `compose.prod.yml`.
-Also emits **`compose.all.yml`** (same layers merged) — optional single file.
+Writes `Dockerfile` + production-grade **`docker-compose.yml`** under `docker/`
+(readiness HEALTHCHECK on `/_/ready`, deploy policy, resource limits).
+Default host budget is **4 CPU / 8 GiB** — override with `--cpus` / `--memory`.
+
+Other layouts when you ask for them:
+
+| Flag        | Output                                                    |
+| ----------- | --------------------------------------------------------- |
+| _(default)_ | `docker-compose.yml`                                      |
+| `--split`   | `compose.yml` + `compose.<role>.yml` + `compose.prod.yml` |
+| `--stack`   | `docker-stack.yml` for Swarm (`docker stack deploy -c`)   |
+
 Without a proxy, the app still publishes port `6530`.
 
 </Step>
@@ -35,33 +45,28 @@ Without a proxy, the app still publishes port `6530`.
 <Step>
 ### Share backing services
 
-Pin docker/prod drivers to shared stores (create-oke templates already do):
+Pin `dev`/`prod` drivers to shared stores (create-oke templates already do —
+same protocols locally via `oke dev` and in production):
 
-| Concern                       | Driver                       | Shared backend                                    |
-| ----------------------------- | ---------------------------- | ------------------------------------------------- |
-| SQL / durable journal / clock | `postgres`                   | Postgres (optionally via PgDog)                   |
-| Gate rate counters            | `redis` (`drivers.store.kv`) | Redis / Valkey / Dragonfly (`images["store.kv"]`) |
-| Files                         | `s3`                         | S3-compatible object store                        |
-| Signal                        | see known limits below       | —                                                 |
+| Concern                       | Driver                       | Shared backend                                 |
+| ----------------------------- | ---------------------------- | ---------------------------------------------- |
+| SQL / durable journal / clock | `postgres`                   | Postgres (optionally via PgDog)                |
+| Gate rate counters            | `redis` (`drivers.store.kv`) | Redis / Valkey / Dragonfly (`images.store.kv`) |
+| Files                         | `s3`                         | S3-compatible object store                     |
+| Signal                        | see known limits below       | —                                              |
 
 </Step>
 
 <Step>
 ### Bring the stack up
 
-Default — organized per-role files (`oke docker` prints the `-f` order):
-
 ```bash
 cd docker
-docker compose -f compose.yml -f compose.store.sql.yml \
-  -f compose.pgdog.yml -f compose.prod.yml up -d
+docker compose -f docker-compose.yml up -d
 ```
 
-Pass every `-f` file listed. For TLS at the edge, see
-[Reverse proxy](#reverse-proxy), then include `compose.proxy.yml`.
-
-Single-file alternative: `docker compose -f compose.all.yml up -d`
-(add `-f compose.override.yml` if you use one).
+Add `-f docker-compose.override.yml` if you keep local tweaks (oke never writes
+that file). With `--split`, pass every `-f` file `oke docker` prints.
 
 </Step>
 
@@ -72,9 +77,10 @@ Single-file alternative: `docker compose -f compose.all.yml up -d`
 Bun.SQL defaults to **10** connections per process — fine for one instance.
 Scale out and `N × pool` can exceed Postgres `max_connections`.
 
-When both `store.sql` and `pgdog` are pinned (docker/prod default in templates),
+When both `store.sql` and `pgdog` are pinned (dev/prod default in templates),
 `DATABASE_URL` points at PgDog on port `6432` — transaction pooling, wire-protocol
-transparent to Bun.SQL / Drizzle. No app code changes.
+transparent to Bun.SQL / Drizzle. No app code changes. Configs land in
+`docker/pgdog/pgdog.toml` and `docker/pgdog/users.toml`.
 
 **Why PgDog.** Transaction pooling fixes the connection math. Naive poolers can
 leak session state (`SET`, RLS vars, `LISTEN`/`NOTIFY`) across clients; PgDog
@@ -91,10 +97,10 @@ licenses: [Store · KV](/docs/elements/store#kv).
 
 ## Readiness and liveness
 
-| Endpoint       | Role                                                        | On plain compose                                           |
-| -------------- | ----------------------------------------------------------- | ---------------------------------------------------------- |
-| `GET /_/ready` | Kernel readiness (`booting` → `orphan_scan` → `ready`)      | `compose.prod.yml` HEALTHCHECK; load balancers should wait |
-| `GET /health`  | App liveness (create-oke ships one) — cheap “process alive” | External monitors only — not orphan-scan aware             |
+| Endpoint       | Role                                                        | On plain compose                                     |
+| -------------- | ----------------------------------------------------------- | ---------------------------------------------------- |
+| `GET /_/ready` | Kernel readiness (`booting` → `orphan_scan` → `ready`)      | HEALTHCHECK in `docker-compose.yml`; LBs should wait |
+| `GET /health`  | App liveness (create-oke ships one) — cheap “process alive” | External monitors only — not orphan-scan aware       |
 
 `/_/ready` returns `200 { ready: true }` only after boot and the durable orphan
 scan finish. While booting or scanning it returns
@@ -113,7 +119,7 @@ runner; call it next to `createBunRuntime().serve` in custom entries):
 3. Closes element runtimes and exits
 
 Signal message leases have no proactive release today — survivors reclaim after
-the visibility TTL (default 30s). `compose.prod.yml` sets `stop_grace_period: 30s`
+the visibility TTL (default 30s). Generated compose sets `stop_grace_period: 30s`
 so the release path can finish (≥ typical Clock / Journal / Signal lease TTL).
 
 ## Reverse proxy
@@ -138,7 +144,7 @@ OKE_PROXY_HOST=app.example.com
 OKE_PROXY_ACME_EMAIL=admin@example.com
 ```
 
-Re-run `oke docker --prod`. Edge publishes `80`/`443`; `app` stays internal.
+Re-run `oke docker`. Edge publishes `80`/`443`; `app` stays internal.
 Set `allowedHosts` to your public hostname ([Security](/docs/reference/security)).
 
 Traefik never mounts raw `docker.sock` — only a filtered
@@ -163,25 +169,26 @@ Let's Encrypt, and socket-proxy rationale → [Reverse proxy](/docs/deployment/r
 <Accordion title="compose up --scale app=N fails with port already allocated">
 
 You still have `6530:6530` on `app`. Confirm `images.proxy` is set and
-`compose.proxy.yml` is in the `-f` list so derivation omitted the host bind.
+re-derived so the host bind was omitted.
 
 </Accordion>
 <Accordion title="New replica gets traffic before orphan scan finishes">
 
-Confirm `compose.prod.yml` is in the `-f` list and the healthcheck hits
-`/_/ready`. Without it, compose treats “container started” as ready.
+Confirm the healthcheck hits `/_/ready` (default `oke docker` output). Without
+it, compose treats “container started” as ready. Pass `--no-prod` only when you
+intentionally want a bare derive.
 
 </Accordion>
 <Accordion title="Rate limits look twice as high after scaling to 2">
 
 `drivers.store.kv` must be `redis` with `REDIS_URL` set. A missing URL **fails
 boot** (no silent memory fallback). Declaring `memory` for local is fine;
-docker/prod should stay on redis.
+`dev`/`prod` should stay on redis.
 
 </Accordion>
 <Accordion title="Files uploaded on instance A are missing on B">
 
-`drivers.store.files: "fs"` is single-host. Switch docker/prod to `s3`
+`drivers.store.files: "fs"` is single-host. Switch `dev`/`prod` to `s3`
 (create-oke templates already do).
 
 </Accordion>
@@ -197,9 +204,9 @@ Serve validates `Host`. Add your public hostname to `allowedHosts`
 
 - [Deployment](/docs/deployment) — choose compose, Swarm, or Kubernetes
 - [Reverse proxy](/docs/deployment/reverse-proxy) — Caddy / Traefik in full
-- [Docker Swarm](/docs/deployment/docker-swarm) — `docker stack deploy` on the same files
+- [Docker Swarm](/docs/deployment/docker-swarm) — `docker stack deploy`
 - [Kubernetes](/docs/deployment/kubernetes) — Deployment, probes, Ingress
-- [CLI](/docs/reference/cli) — `oke docker`, `oke docker --prod`
+- [CLI](/docs/reference/cli) — `oke docker`, layouts, budget flags
 - [Store](/docs/elements/store) — PgDog and facets
 - [Security](/docs/reference/security) — `allowedHosts`
 

package/site/content/docs/deployment/index.mdx

@@ -30,14 +30,14 @@ on every path — shared Postgres/Redis/S3, not sticky pod identity.
 
 These already ship. Each path page explains them in full in that page's words:
 
-| Capability                        | What it guarantees                                                                     | Deep dive                                        |
-| --------------------------------- | -------------------------------------------------------------------------------------- | ------------------------------------------------ |
-| **PgDog pooling**                 | docker/prod SQL goes through transaction pooler (`DATABASE_URL` → `:6432`) when pinned | Path pages · [Store](/docs/elements/store)       |
-| **Graceful SIGTERM**              | `installGracefulShutdown` releases Clock + Journal leases, then drains                 | Path pages                                       |
-| **Readiness vs liveness**         | `GET /_/ready` (kernel) vs app `GET /health`                                           | Path pages                                       |
-| **Horizontal proof**              | Two-process integration test against live Postgres + Redis                             | Changelog / CI (`OKE_TEST_POSTGRES_URL` + Redis) |
-| **Reverse proxy (compose/Swarm)** | Opt-in Caddy or Traefik (`images.proxy`)                                               | [Reverse proxy](/docs/deployment/reverse-proxy)  |
-| **Ingress (Kubernetes)**          | Cluster-native Ingress / Gateway API                                                   | [Kubernetes](/docs/deployment/kubernetes)        |
+| Capability                        | What it guarantees                                                                      | Deep dive                                        |
+| --------------------------------- | --------------------------------------------------------------------------------------- | ------------------------------------------------ |
+| **PgDog pooling**                 | `dev`/`prod` SQL goes through transaction pooler (`DATABASE_URL` → `:6432`) when pinned | Path pages · [Store](/docs/elements/store)       |
+| **Graceful SIGTERM**              | `installGracefulShutdown` releases Clock + Journal leases, then drains                  | Path pages                                       |
+| **Readiness vs liveness**         | `GET /_/ready` (kernel) vs app `GET /health`                                            | Path pages                                       |
+| **Horizontal proof**              | Two-process integration test against live Postgres + Redis                              | Changelog / CI (`OKE_TEST_POSTGRES_URL` + Redis) |
+| **Reverse proxy (compose/Swarm)** | Opt-in Caddy or Traefik (`images.proxy`)                                                | [Reverse proxy](/docs/deployment/reverse-proxy)  |
+| **Ingress (Kubernetes)**          | Cluster-native Ingress / Gateway API                                                    | [Kubernetes](/docs/deployment/kubernetes)        |
 
 Honesty notes (Signal consume / Channel suppression still process-local) live
 on each path page — not papered over here.
@@ -69,7 +69,7 @@ on each path page — not papered over here.
 
 ## Learn more
 
-- [Installation](/docs/get-started/installation) — scaffold and `oke dev --docker`
+- [Installation](/docs/get-started/installation) — scaffold and `oke dev`
 - [CLI](/docs/reference/cli) — `oke docker --prod`, `oke start`
 - [Configuration](/docs/reference/configuration) — `images` and drivers
 - [Store](/docs/elements/store) — PgDog and facets