okengine 0.10.3 → 0.11.1

package/src/kernel/boot-bind/store.ts

@@ -4,13 +4,11 @@
 
 import { resolveDomainDdlMode, resolveDriverId, type ConfigEnv } from "../../config/index.ts";
 import {
-  dockerFlagDefaults,
   STORE_FILES_DEFAULTS,
   STORE_KV_DEFAULTS,
   STORE_SQL_DEFAULTS,
 } from "../../config/driver-defaults.ts";
 import { fsDriver } from "../../drivers/fs.ts";
-import { libsqlDriver, libsqlIndexDriver } from "../../drivers/libsql.ts";
 import { meilisearchDriver } from "../../drivers/meilisearch.ts";
 import { memoryDrivers } from "../../drivers/memory.ts";
 import { pgliteDriver } from "../../drivers/pglite.ts";
@@ -18,7 +16,6 @@ import { pgvectorDriver } from "../../drivers/pgvector.ts";
 import { postgresDriver } from "../../drivers/postgres.ts";
 import { redisDriver } from "../../drivers/redis.ts";
 import { s3Driver } from "../../drivers/s3.ts";
-import { sqliteDriver } from "../../drivers/sqlite.ts";
 import type { FilesDriver, IndexDriver, KvDriver, SqlDriver } from "../../drivers/types.ts";
 import { createStoreRuntime, type StoreRuntime } from "../../elements/store.ts";
 import type { StoreDecl } from "../../elements/store/declare.ts";
@@ -28,8 +25,8 @@ import type { BootOptions } from "../boot.ts"; // type-only — no cycle at runt
 /**
  * Construct a Store runtime and register facet declarations.
  *
- * In docker mode (`env === "docker"` / `OKE_DOCKER=1`), SQL/KV resolve from the
- * `docker` driver map (falling back to `prod`) and URLs from `docker/.env.docker`.
+ * With compose infra (`OKE_DOCKER=1` / `oke dev`), SQL/KV URLs come from
+ * `docker/.env.docker`. `env: "test"` uses PGLite (`memory://` by default).
  *
  * @param options - Boot options
  * @param env - Active environment
@@ -68,7 +65,7 @@ export function bindStore(
   const filesId = resolveFilesDriverId(options, env, docker);
   const indexId = resolveIndexDriverId(options, env, docker);
   if (filesId === "fs") warnFilesFsMultiInstance();
-  const sqlUrl = sqlUrlFor(sqlId, docker);
+  const sqlUrl = sqlUrlFor(sqlId, docker, env);
   const kvUrl = kvUrlFor(kvId, docker);
   const filesRoot = filesRootFor(filesId);
 
@@ -145,11 +142,7 @@ export function resolveSqlDriverId(options: BootOptions, env: ConfigEnv, docker:
   const fromEnv = process.env.OKE_SQL_DRIVER?.trim();
   if (docker && fromEnv) return fromEnv;
   // Defaults cover every ConfigEnv key, so this is never undefined.
-  return resolveDriverId(
-    options.config?.drivers?.store?.sql,
-    env,
-    dockerFlagDefaults(STORE_SQL_DEFAULTS, docker),
-  )!;
+  return resolveDriverId(options.config?.drivers?.store?.sql, env, STORE_SQL_DEFAULTS)!;
 }
 
 /**
@@ -161,11 +154,7 @@ export function resolveKvDriverId(options: BootOptions, env: ConfigEnv, docker:
   const fromEnv = process.env.OKE_KV_DRIVER?.trim();
   if (docker && fromEnv) return fromEnv;
   // Defaults cover every ConfigEnv key, so this is never undefined.
-  return resolveDriverId(
-    options.config?.drivers?.store?.kv,
-    env,
-    dockerFlagDefaults(STORE_KV_DEFAULTS, docker),
-  )!;
+  return resolveDriverId(options.config?.drivers?.store?.kv, env, STORE_KV_DEFAULTS)!;
 }
 
 /**
@@ -181,17 +170,13 @@ export function resolveFilesDriverId(
   const fromEnv = process.env.OKE_FILES_DRIVER?.trim();
   if (docker && fromEnv) return fromEnv;
   // Defaults cover every ConfigEnv key, so this is never undefined.
-  return resolveDriverId(
-    options.config?.drivers?.store?.files,
-    env,
-    dockerFlagDefaults(STORE_FILES_DEFAULTS, docker),
-  )!;
+  return resolveDriverId(options.config?.drivers?.store?.files, env, STORE_FILES_DEFAULTS)!;
 }
 
 /**
  * Index driver — same resolution chain as sql/kv/files. Defaults to `memory`;
- * a configured `pgvector` / `libsql` is honoured at real boot (and fails loud
- * if its SQL engine or peer is missing — never silently back to memory).
+ * a configured `pgvector` is honoured at real boot (and fails loud if its
+ * SQL engine or peer is missing — never silently back to memory).
  *
  * @param options - Boot options
  * @param env - Active env
@@ -213,10 +198,6 @@ function sqlDriverFor(id: string): SqlDriver {
   switch (id) {
     case "postgres":
       return postgresDriver;
-    case "sqlite":
-      return sqliteDriver;
-    case "libsql":
-      return libsqlDriver;
     case "pglite":
       return pgliteDriver;
     case "memory":
@@ -260,8 +241,6 @@ export function indexDriverFor(id: string): IndexDriver {
       return memoryDrivers.index;
     case "pgvector":
       return pgvectorDriver;
-    case "libsql":
-      return libsqlIndexDriver;
     case "meilisearch":
       return meilisearchDriver;
     default:
@@ -269,28 +248,24 @@ export function indexDriverFor(id: string): IndexDriver {
   }
 }
 
-function sqlUrlFor(sqlId: string, docker: boolean): string {
+function sqlUrlFor(sqlId: string, docker: boolean, env: ConfigEnv): string {
   if (sqlId === "postgres") {
     const url = process.env.DATABASE_URL ?? process.env.OKE_STORE_SQL_URL ?? undefined;
     if (!url) {
       throw new Error(
         docker
-          ? "oke boot: postgres driver needs DATABASE_URL (did `oke dev -d` write docker/.env.docker?)"
+          ? "oke boot: postgres driver needs DATABASE_URL (did `oke dev` write docker/.env.docker?)"
           : "oke boot: postgres driver needs DATABASE_URL",
       );
     }
     return url;
   }
-  if (sqlId === "sqlite") {
-    return process.env.OKE_SQLITE_URL ?? ".oke/app.sqlite";
-  }
-  if (sqlId === "libsql") {
-    return process.env.OKE_LIBSQL_URL ?? ".oke/app.libsql";
-  }
   if (sqlId === "pglite") {
-    return process.env.OKE_PGLITE_URL ?? ".oke/pgdata";
+    return process.env.OKE_PGLITE_URL ?? (env === "test" ? "memory://" : ".oke/pgdata");
   }
-  return ":memory:";
+  // In-process `memory` SQL driver ignores URL; keep a non-path token so a
+  // mis-wired pglite connect never creates a literal `./:memory:` datadir.
+  return "memory://";
 }
 
 function kvUrlFor(kvId: string, docker: boolean): string | undefined {
@@ -299,7 +274,7 @@ function kvUrlFor(kvId: string, docker: boolean): string | undefined {
   if (!url) {
     throw new Error(
       docker
-        ? "oke boot: redis driver needs REDIS_URL (did `oke dev -d` write docker/.env.docker?)"
+        ? "oke boot: redis driver needs REDIS_URL (did `oke dev` write docker/.env.docker?)"
         : "oke boot: redis driver needs REDIS_URL",
     );
   }
@@ -317,7 +292,7 @@ function indexUrlFor(docker: boolean): string {
   if (!url) {
     throw new Error(
       docker
-        ? "oke boot: meilisearch index needs OKE_STORE_INDEX_URL (did `oke dev -d` write docker/.env.docker?)"
+        ? "oke boot: meilisearch index needs OKE_STORE_INDEX_URL (did `oke dev` write docker/.env.docker?)"
         : "oke boot: meilisearch index needs OKE_STORE_INDEX_URL",
     );
   }

package/src/kernel/boot-bind/vault.ts

@@ -4,7 +4,13 @@
 
 import { resolveDriverId, type ConfigEnv } from "../../config/index.ts";
 import { VAULT_DEFAULTS } from "../../config/driver-defaults.ts";
-import { createVaultRuntime, type VaultRuntime } from "../../elements/vault.ts";
+import {
+  createVaultRuntime,
+  listRequiredEnvNames,
+  requiredEnvGaps,
+  VaultBootError,
+  type VaultRuntime,
+} from "../../elements/vault.ts";
 import { buildVaultBootChain, normalizeVaultDriverId } from "../../elements/vault/boot-chain.ts";
 import type { BootOptions } from "../boot.ts";
 
@@ -30,6 +36,14 @@ export function resolveVaultDriverId(options: BootOptions, env: ConfigEnv): stri
  */
 export async function bindVault(options: BootOptions, env: ConfigEnv): Promise<VaultRuntime> {
   const vaultSecrets = options.vault?.secrets ?? options.secrets ?? [];
+  const requiredEnv = options.vault?.requiredEnv ?? listRequiredEnvNames();
+  // Fail before the chain is built: the builtin `vault` driver opens SQL at
+  // `open()`, and a boot that is already doomed by a missing env var should
+  // never pay for (or leak) a database connection first.
+  const envGaps = requiredEnvGaps(requiredEnv, new Set(vaultSecrets.map((s) => s.name)));
+  if (envGaps.length > 0) {
+    throw new VaultBootError(envGaps);
+  }
   const chain =
     options.vault?.chain ??
     buildVaultBootChain({
@@ -40,6 +54,7 @@ export async function bindVault(options: BootOptions, env: ConfigEnv): Promise<V
     });
   const vault = createVaultRuntime({
     secrets: vaultSecrets,
+    requiredEnv,
     chain,
     allowDevFallbacks: options.vault?.allowDevFallbacks ?? env !== "prod",
     now: options.vault?.now,

package/src/kernel/boot.test.ts

@@ -79,7 +79,7 @@ describe("boot — lazy element needs", () => {
     expect(needs.signal).toBe(false);
   });
 
-  test("oke() Store-only graph stays under the prior 54.3 kB baseline", async () => {
+  test("oke() Store-only graph stays under the prior 39 kB baseline", async () => {
     const dir = await mkdtemp(join(tmpdir(), "oke-store-only-"));
     const entry = join(dir, "entry.ts");
     const appPath = join(import.meta.dir, "app.ts");
@@ -116,22 +116,9 @@ describe("boot — lazy element needs", () => {
         if (raw.byteLength === 0) continue;
         total += Bun.gzipSync(new Uint8Array(raw)).byteLength;
       }
-      // Rebased after fx.sendOtp/verifyOtp on the shared fx surface (~50.1 kB
-      // gzip), durable-journal lease surface (~51.2 kB), fx.deliverOtp +
-      // unified otp() (~50.9 kB → 53 kB), then fx.runs / SLO window on the
-      // shared surface (~53.3 kB → 54 kB cap). Clock/channel/journal drivers
-      // stay lazy-bound; far below eager bind. Rebased again for the
-      // store/vault/signal/channel auto-registry drain (`element-registries.ts`
-      // + the `oke()` merge/dedup logic) — every app now carries this
-      // regardless of which elements it uses, since the drain must run
-      // synchronously at construction (same isolation guarantee as the
-      // `on()` binding registry) and can't be deferred behind a lazy import
-      // (~54.0 kB → 54.3 kB cap). Rebased again for `assertAdoptBarrelFresh`
-      // + `tryListFlowsUnits` in `boot.ts` (`.adopt()` barrel staleness
-      // check, OKE1009) — part of the already-lazily-loaded boot graph, not
-      // the `oke()` construction path, but `Bun.build` still traces and
-      // sums the dynamic-import chunk (~54.3 kB → 54.7 kB cap).
-      expect(total).toBeLessThan(54_700);
+      // Rebased after lazy `gate.auth` / auth-config chunks + `gate.public`
+      // decoupling from kv-lua strategies (~38.9 kB gzip with export externals).
+      expect(total).toBeLessThan(40_000);
     } finally {
       await rm(dir, { recursive: true, force: true });
     }
@@ -273,11 +260,18 @@ describe("boot — cron autostart via real timer loop", () => {
       }),
     );
 
-    // env: "local" → startScheduler defaults ON. No createTestApp / advance.
+    // Non-test env → startScheduler defaults ON. No createTestApp / advance.
     const app = oke({
       name: "cron-autostart",
-      env: "local",
+      env: "dev",
       schedulerIntervalMs: 1000,
+      config: {
+        drivers: {
+          clock: { dev: "memory" },
+          store: { sql: { dev: "memory" }, kv: { dev: "memory" } },
+          channel: { email: { dev: "console" } },
+        },
+      },
     });
     await app.boot();
 

package/src/kernel/boot.ts

@@ -216,7 +216,9 @@ export interface ElementNeeds {
 export function resolveElementNeeds(options: BootOptions): ElementNeeds {
   const pre = options.elements ?? {};
   let vault =
-    pre.vault !== undefined || (options.vault?.secrets ?? options.secrets ?? []).length > 0;
+    pre.vault !== undefined ||
+    (options.vault?.secrets ?? options.secrets ?? []).length > 0 ||
+    (options.vault?.requiredEnv?.length ?? 0) > 0;
   let store = pre.store !== undefined || (options.stores?.length ?? 0) > 0;
   let signal = pre.signal !== undefined || (options.signals?.length ?? 0) > 0;
   let clock = pre.clock !== undefined || (options.clocks?.length ?? 0) > 0;
@@ -283,9 +285,10 @@ async function loadBind<T>(name: string): Promise<T> {
 export async function bootApplication(input: BootOptions = {}): Promise<BootResult> {
   const docker =
     input.docker === true || (input.docker !== false && process.env.OKE_DOCKER === "1");
-  // `-d` always selects the `docker` driver profile — not a mix of local/test +
-  // prod store overrides when `$options.env` is unset.
-  const env: ConfigEnv = input.env ?? (docker ? "docker" : "local");
+  // Three targets: `prod` when NODE_ENV=production; `dev` when compose infra
+  // is up (`oke dev` / `OKE_DOCKER=1`); otherwise `test` (PGLite / memory).
+  const env: ConfigEnv =
+    input.env ?? (process.env.NODE_ENV === "production" ? "prod" : docker ? "dev" : "test");
   let config = input.config;
   if (config === undefined) {
     try {
@@ -482,12 +485,13 @@ export async function bootApplication(input: BootOptions = {}): Promise<BootResu
   const capabilities = await mintCapabilities(options.flows ?? [], env, {
     manifest: options.manifest,
     rootDir: options.rootDir,
+    docker,
   });
 
   // 9. `.adopt()` barrel freshness — opt-in only (same `rootDir` gate as
   // capability minting above; never a filesystem read the kernel performs
   // on its own).
-  await assertAdoptBarrelFresh(options.flows ?? [], env, options.rootDir);
+  await assertAdoptBarrelFresh(options.flows ?? [], env, options.rootDir, docker);
 
   return {
     vault,
@@ -556,10 +560,9 @@ async function tryAutoExtractManifest(rootDir: string): Promise<Manifest | undef
  * an explicit {@link BootOptions.manifest}, or a lazy AoT extract from
  * {@link BootOptions.rootDir} / `OKE_ROOT_DIR`.
  *
- * When neither is available: `local` / `test` stay open (today's dev-loop
- * behavior, unbroken) with a once-per-process `oke boot:` warning; `docker`
- * / `prod` fail loud (`OKE1008`) — docker mirrors prod's posture, never a
- * silent open door in a deploy-shaped environment.
+ * When neither is available: `test` stays open with a once-per-process
+ * `oke boot:` warning; `dev` with compose infra and `prod` fail loud
+ * (`OKE1008`) — never a silent open door in a deploy-shaped environment.
  *
  * @param flows - Adopted flows
  * @param env - Resolved {@link ConfigEnv}
@@ -567,8 +570,12 @@ async function tryAutoExtractManifest(rootDir: string): Promise<Manifest | undef
  */
 export async function mintCapabilities(
   flows: readonly AnyFlowDef[],
-  env: ConfigEnv = "local",
-  options: { readonly manifest?: Manifest; readonly rootDir?: string } = {},
+  env: ConfigEnv = "test",
+  options: {
+    readonly manifest?: Manifest;
+    readonly rootDir?: string;
+    readonly docker?: boolean;
+  } = {},
 ): Promise<Map<string, CapabilityToken>> {
   const map = new Map<string, CapabilityToken>();
 
@@ -591,7 +598,8 @@ export async function mintCapabilities(
       continue;
     }
 
-    if (env === "docker" || env === "prod") {
+    const strict = env === "prod" || (env === "dev" && options.docker === true);
+    if (strict) {
       throwOke("NO_EFFECTS_DECLARED", { flow: f.name });
     }
     if (!noEffectsWarned) {
@@ -600,7 +608,7 @@ export async function mintCapabilities(
         `oke boot: flow "${f.name}" (and possibly others) has no declared effects and no ` +
           "Manifest-derived effects — running with an OPEN capability token (every access " +
           "allowed, ledgered but not gated). Run `oke build`, or boot with `manifest` / " +
-          "`rootDir`, before deploying — docker/prod refuse to boot this way.",
+          "`rootDir`, before deploying — dev+compose/prod refuse to boot this way.",
       );
     }
     map.set(f.name, createCapabilityToken(f.name, undefined));
@@ -645,18 +653,21 @@ async function tryListFlowsUnits(rootDir: string): Promise<readonly string[] | u
  *
  * Opt-in only via {@link BootOptions.rootDir} / `OKE_ROOT_DIR` (same gate as
  * {@link mintCapabilities}'s Manifest fallback) — never a filesystem read
- * the kernel performs on its own. `local` / `test` warn once per process;
- * `docker` / `prod` fail loud (`OKE1009`) — same class as `NO_EFFECTS_DECLARED`,
- * never a silently-incomplete route table in a deploy-shaped environment.
+ * the kernel performs on its own. `test` warns once per process; `prod`
+ * (and `dev` with compose) fail loud (`OKE1009`) — same class as
+ * `NO_EFFECTS_DECLARED`, never a silently-incomplete route table in a
+ * deploy-shaped environment.
  *
  * @param flows - Adopted flows
  * @param env - Resolved {@link ConfigEnv}
  * @param rootDir - Explicit project root (falls back to `OKE_ROOT_DIR`)
+ * @param docker - Compose infra active (`oke dev`)
  */
 export async function assertAdoptBarrelFresh(
   flows: readonly AnyFlowDef[],
-  env: ConfigEnv = "local",
+  env: ConfigEnv = "test",
   rootDir?: string,
+  docker = false,
 ): Promise<void> {
   const dir = rootDir ?? process.env["OKE_ROOT_DIR"];
   if (!dir) return;
@@ -670,7 +681,8 @@ export async function assertAdoptBarrelFresh(
   const missing = diskUnits.filter((u) => !adoptedUnits.has(u));
   if (missing.length === 0) return;
 
-  if (env === "docker" || env === "prod") {
+  const strict = env === "prod" || (env === "dev" && docker);
+  if (strict) {
     throwOke("ADOPT_BARREL_STALE", { unit: missing[0]! });
   }
   if (!staleAdoptBarrelWarned) {
@@ -678,7 +690,7 @@ export async function assertAdoptBarrelFresh(
     emitBootWarn(
       `oke boot: src/flows/${missing[0]} exists on disk but adopted no flows — the ` +
         '.adopt() barrel ("src/flows/generated.ts") is stale. Run `oke dev` or `oke build` ' +
-        "to regenerate it — docker/prod refuse to boot this way.",
+        "to regenerate it — dev+compose/prod refuse to boot this way.",
     );
   }
 }

package/src/kernel/budget-entry.ts

@@ -14,7 +14,7 @@ import { flow } from "./flow.ts";
 import { createFx } from "./fx.ts";
 import { mergeHooks, runPipeline } from "./hooks.ts";
 import { on, resetBindings } from "./on.ts";
-import { createRouter } from "./router.ts";
+import { createEdgeRouter as createRouter } from "./router/create-edge.ts";
 import { http } from "./triggers.ts";
 
 /**