okengine 0.11.1 → 0.11.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "okengine",
-  "version": "0.11.1",
+  "version": "0.11.2",
   "description": "One law. Eight elements. Ten exports. One package. One manifest. Every backend need is derived, never added.",
   "license": "MIT",
   "repository": {

package/site/content/docs/elements/ai.mdx

@@ -86,7 +86,28 @@ export const triage = smart.prompt("ticket-triage", {
 | `in` / `out` | zod / Standard Schema | Input and output contracts — responses validated against `out` |
 | `version`    | number                | Artifact version — diffs and regressions tracked per version   |
 | `evals`      | string                | Path to a `.jsonl` eval set, regression-gated via `oke eval`   |
-| `budget`     | object                | `maxCostPerCall` — cost is a first-class dimension             |
+| `budget`     | object                | `maxCostPerCall` / `maxCostPerRun` — cost, not time            |
+| `via`        | `string[]`            | Ordered recovery chain of logical model names for this prompt  |
+| `timeout`    | `string \| number`    | Deadline — clock duration (`"30s"`) or milliseconds            |
+
+## Recovery chain + per-command timeout
+
+Fallback is **recovery**, not a fixed cloud→local doctrine. Declare the chain and deadline on the prompt; the call site stays thin:
+
+```typescript
+export const summarizeNote = smart.prompt("summarize-note", {
+  via: ["smart", "local"],
+  timeout: "30s",
+});
+
+// in a flow
+const out = await fx.ask(summarizeNote, { title, body });
+// out.via is the logical model that answered
+```
+
+Resolution: `fx.ask(…, { via })` overrides `prompt.via`, else the prompt’s bound model. On each model the runtime retries **once** for retryable failures (timeout / 429 / 5xx / network), then advances. Permanent failures (401 / other 4xx / schema invalid) stop the chain. When every eligible attempt fails, `fx.ask` throws — map that to a typed error in the flow (no silent text excerpt).
+
+`timeout` uses the same duration vocabulary as Clock (`"30s"`, `"2m"`, or a millisecond number). Ask-time `fx.ask(…, { timeout: "10s" })` overrides the prompt. Omit = no artificial cap. Cost caps stay on `budget`.
 
 ## Declared guardrails
 

package/site/content/docs/elements/store.mdx

@@ -234,7 +234,9 @@ export const relations = store.schema.relations({ links, daily }, (r) => ({
 
 `oke dev` auto-pushes when you save a schema _input_ (`schema.decl.ts`,
 hand-written `schema.ts`, `app.ts` for plugin tables, or `drizzle.config.ts`) —
-not when emit rewrites `schema.drizzle.ts`.
+not when emit rewrites `schema.drizzle.ts`. A definition error in
+`schema.decl.ts` prints `schema.decl.ts has an error — …` (red ●) and keeps the
+session running — it is not framed as a quiet skip.
 
 Opt out with `--no-db-push` or `db: { autoPush: false }`. `prod` **never**
 auto-applies DDL; a missing table fails as **OKE1101** (`oke db migrate`).

package/site/content/docs/elements/vault.mdx

@@ -154,22 +154,30 @@ VaultBootError: 1 secret(s) missing:
 
 ## Setting and rotating values
 
-| Command                                            | What it does                                                         |
-| -------------------------------------------------- | -------------------------------------------------------------------- |
-| `oke vault set NAME value`                         | Write a value to the env file (`.env.local` by default)              |
-| `oke vault list`                                   | List names present in the active store                               |
-| `oke vault import <file>`                          | Bulk-import names from a dotenv file                                 |
-| `oke vault init`                                   | Initialize the built-in encrypted store (prints the master key once) |
-| `oke vault status` / `seal` / `unseal`             | Built-in seal lifecycle                                              |
-| `oke vault rotate <path>` / `rotate-master`        | Re-encrypt a secret, or rewrap every DEK under a new master          |
-| `oke vault audit` / `audit verify` / `audit purge` | Hash-chained audit (no secret values)                                |
-| `oke vault purge-expired [--dry-run] [--before]`   | Hard-delete secret rows past `expires_at` (operator cleanup)         |
-| `oke vault backup` / `restore`                     | Encrypted backup under a separate backup KEK                         |
+| Command                                            | What it does                                                                  |
+| -------------------------------------------------- | ----------------------------------------------------------------------------- |
+| `oke vault set NAME value`                         | Write a value to the env file (`.env.local` by default)                       |
+| `oke vault list`                                   | List names present in the active store                                        |
+| `oke vault import <file>`                          | Bulk-import names from a dotenv file                                          |
+| `oke vault init`                                   | Initialize the built-in encrypted store (prints the master key once)          |
+| `oke vault status` / `seal` / `unseal`             | Built-in seal lifecycle                                                       |
+| `oke vault rotate <path>` / `rotate-master`        | Re-encrypt a secret, or rewrap every DEK under a new master (exclusive lease) |
+| `oke vault audit` / `audit verify` / `audit purge` | Hash-chained audit (serialized appends; no secret values)                     |
+| `oke vault purge-expired [--dry-run] [--before]`   | Hard-delete secret rows past `expires_at` (operator cleanup)                  |
+| `oke vault backup` / `restore`                     | Encrypted backup (atomic write + end marker; separate backup KEK)             |
 
 Flows can write too, through the same capability gate as reads: `fx.vault.set(path, value, { ttlMs?, metadata? })`, `fx.vault.rotate(path, value)`, `fx.vault.delete(path)`, plus `fx.vault.list(prefix?)` and `fx.vault.status()`. These need the encrypted-at-rest backend (`drivers.vault = "vault"`) and throw without it; `fx.vault.get` works on every app.
 
 The **Console** (`:6533`) can also set and rotate values, but it is **write-only**: it shows a salted fingerprint (`sha256:…`) per secret, never the cleartext. When you rotate a key there, the panel shows the **blast radius** — which in-flight durable runs will wake up with the new value.
 
+<Callout title="Builtin concurrency (rotate / audit / backup)">
+  `rotate-master` uses the same SKIP LOCKED + lease-expiry physics as Clock and Signal: one holder
+  at a time; a crashed holder is reclaimed after the lease TTL. Audit rows append under a
+  transactional row lock so the hash chain stays verifiable under concurrent writers. Backups are
+  written via temp → fsync → rename and carry an end marker + checksum — restore rejects incomplete
+  files before decrypt.
+</Callout>
+
 <Callout title="Builtin master keys and expired rows">
   Resolve the master key with `--key -` (stdin), `OKE_VAULT_MASTER_KEY`, or a hidden TTY prompt —
   never put keys on argv in shared shells (history risk). Expired rows stay until `oke vault

package/site/content/docs/get-started/installation.mdx

@@ -67,7 +67,8 @@ Both are Docker-first (`dev`/`prod` share production protocols; `test` uses PGLi
 memory). Both ship a minimal GitHub Actions workflow (typecheck + `bun test`).
 
 On a TTY: pick a template, then **recommended defaults**, **customize**, or
-**reuse** matching saved settings (`~/.oke/create-defaults.json`).
+**reuse** matching saved settings (`~/.oke/create-defaults.json`). Extra locales
+and PgDog answers are saved into that file on every TTY run (not only customize).
 
 Customize walks Docker-first facets (including `store.index` with `none`), then
 **AI setup** (Recommended / Customize / Off). Project name rejects a non-empty
@@ -107,6 +108,11 @@ configured.**
 stays in sync. Opt out with `oke dev --no-db-push` or
 `db: { autoPush: false }` in `oke.config.ts`.
 
+A broken `schema.decl.ts` (bad table / relation definition) prints a red ●
+`schema.decl.ts has an error — …` line and keeps the session up — it is never
+framed as a quiet `skipped`. Environmental gaps (no `oke.config.ts` / no
+images yet) still soft-skip.
+
 For production, generate and apply migrations deliberately — never automatic on
 boot:
 

package/site/content/docs/recipes/llama-cpp.mdx

@@ -45,8 +45,9 @@ OKE_AI_MODEL=granite3.3:2b
 ```
 
 `OKE_AI_MODEL` is a Docker Hub `ai/<id>` model. The recipe writes
-`docker/llama-entrypoint.py`, which Hub-pulls into the cache volume, then starts
-`llama-server -m <gguf> --alias <id>` (single-model).
+`.oke/llama-entrypoint.py` (generated, gitignored — not app source), which
+Hub-pulls into the cache volume, then starts `llama-server -m <gguf> --alias <id>`
+(single-model).
 
 Never set `LLAMA_ARG_MODELS_PRESET` / `LLAMA_ARG_DOCKER_REPO` — those hang on
 b10290+. `oke dev` shows the model id and polls `/v1/models` until `ready`
@@ -93,13 +94,13 @@ Postgres/Redis, stricter on the published interface because of GGUF CVE risk.
 
 ## What the recipe configures
 
-| Field          | Value                                                           |
-| -------------- | --------------------------------------------------------------- |
-| Container port | `8080`                                                          |
-| Host publish   | `127.0.0.1:8080:8080`                                           |
-| Healthcheck    | `GET /health`, every 5s, 24 retries, 900s start                 |
-| Connection URL | `http://host:8080/v1`                                           |
-| Model load     | `llama-entrypoint.py` → Hub pull (incl. CNCF weights) then `-m` |
+| Field          | Value                                                        |
+| -------------- | ------------------------------------------------------------ |
+| Container port | `8080`                                                       |
+| Host publish   | `127.0.0.1:8080:8080`                                        |
+| Healthcheck    | `GET /health`, every 5s, 24 retries, 900s start              |
+| Connection URL | `http://host:8080/v1`                                        |
+| Model load     | `.oke/llama-entrypoint.py` → Hub pull (incl. CNCF) then `-m` |
 
 ## When to choose something else
 

package/site/content/docs/reference/cli.md

@@ -85,7 +85,10 @@ prints immediately (wordmark + Starting + profile), then streams background work
 yellow pending/loading · red error · dim idle. Compose health keeps polling
 (`docker compose ps -a`); AI ● tracks model phase while the AI container is up.
 Boot does not wait for the model to become ready. A successful session writes
-`.oke/dev.json` (pid · ports · startedAt) and clears it on stop.
+`.oke/dev.json` (pid · ports · startedAt) and clears it on stop. Durable local
+markers live in `.oke/state.json` (e.g. `seededAt` after the one-shot seed
+prompt) — not in the session lock. Console session signing uses
+`.oke/console.secret` (or `OKE_CONSOLE_SECRET`); that is not a Vault secret.
 
 On a TTY, Ink keyboard controls stay active after boot (`useInput` — same
 shortcuts as before). Press `r` to clear the log pane and reprint the latest
@@ -122,7 +125,8 @@ On a TTY: pick **standard** or **advanced**, then recommended defaults or
 customize. Customize walks **Docker-first** facets once (including `store.index`
 with a `none` opt-out), then **AI setup**: Recommended (llama.cpp) · Customize ·
 Off. Writes user-global `~/.oke/create-defaults.json` (reuse only when `template`
-matches). Non-TTY / `--yes` / explicit `--template` never prompt.
+matches). Extra locales and PgDog answers are persisted on every TTY run — not
+only after customize. Non-TTY / `--yes` / explicit `--template` never prompt.
 
 ### Additional commands
 

package/site/content/docs/reference/environment-variables.mdx

@@ -128,15 +128,15 @@ provider's real credentials — credentials alone never send.
 
 ## Framework behavior
 
-| Variable              | Used for                                                                                   |
-| --------------------- | ------------------------------------------------------------------------------------------ |
-| `OKE_DOCKER`          | `"1"` marks Compose / `oke dev` posture (set by the CLI)                                   |
-| `OKE_DB_AUTO_PUSH`    | Overrides `db.autoPush` at boot                                                            |
-| `OKE_DRIZZLE_DIALECT` | `"postgresql"` for drizzle-kit overlays (templates hardcode it)                            |
-| `OKE_DEV_REQUEST_LOG` | `"1"` logs requests during `oke dev` (set by the CLI)                                      |
-| `OKE_CONSOLE_SECRET`  | Console session signing secret — set explicitly in production (else `.oke/console.secret`) |
-| `PORT`                | App port in production containers (default `6530`)                                         |
-| `NODE_ENV`            | `"production"` switches the Console to its production posture                              |
+| Variable              | Used for                                                                                                              |
+| --------------------- | --------------------------------------------------------------------------------------------------------------------- |
+| `OKE_DOCKER`          | `"1"` marks Compose / `oke dev` posture (set by the CLI)                                                              |
+| `OKE_DB_AUTO_PUSH`    | Overrides `db.autoPush` at boot                                                                                       |
+| `OKE_DRIZZLE_DIALECT` | `"postgresql"` for drizzle-kit overlays (templates hardcode it)                                                       |
+| `OKE_DEV_REQUEST_LOG` | `"1"` logs requests during `oke dev` (set by the CLI)                                                                 |
+| `OKE_CONSOLE_SECRET`  | Console operator-session signing secret (HMAC) — set in production; else `.oke/console.secret`. Not a Vault contract. |
+| `PORT`                | App port in production containers (default `6530`)                                                                    |
+| `NODE_ENV`            | `"production"` switches the Console to its production posture                                                         |
 
 Console operator rows are **not** stored in `.oke/console.sqlite`. With `DATABASE_URL` (or
 `OKE_STORE_SQL_URL`) they live in Postgres schema `oke_console`. Without a Postgres URL,

package/src/cli/ai-setup/ai-setup.test.ts

@@ -90,7 +90,7 @@ describe("apply", () => {
     expect(upsertEnv(env, "OPENAI_API_KEY", "sk-test")).toContain("OPENAI_API_KEY=sk-test");
   });
 
-  test("renderAiTs includes vision + embed", () => {
+  test("renderAiTs includes vision + embed + summarize-note + local", () => {
     const ts = renderAiTs({
       driver: "ollama",
       chatModel: "gemma4:e4b",
@@ -98,8 +98,10 @@ describe("apply", () => {
       embedModel: "nomic-embed-text",
     });
     expect(ts).toContain('ai.model("smart"');
+    expect(ts).toContain('ai.model("local"');
     expect(ts).toContain('ai.model("vision"');
     expect(ts).toContain("docsEmbed");
+    expect(ts).toContain('smart.prompt("summarize-note"');
   });
 
   test("applyAiSetup writes config, env, AI models in core.ts", () => {

package/src/cli/ai-setup/apply.ts

@@ -208,9 +208,27 @@ export function renderAiTs(input: AiSetupApplyInput): string {
   const lines = [
     `import { ai } from "okengine";`,
     ``,
+    `/** Cloud OpenAI-compatible binding (OpenAI / Groq / OpenRouter / …). */`,
     `export const smart = ai.model("smart", {`,
     `  provider: "${provider}",`,
-    `  model: process.env.OKE_AI_MODEL ?? "${chat}",`,
+    `  model: process.env.OKE_AI_CLOUD_MODEL ?? process.env.OKE_AI_MODEL ?? "${chat}",`,
+    `  baseUrl: process.env.OPENAI_BASE_URL?.trim() || "https://api.openai.com/v1",`,
+    `  ...(process.env.OPENAI_API_KEY?.trim()`,
+    `    ? { apiKey: process.env.OPENAI_API_KEY.trim() }`,
+    `    : {}),`,
+    `});`,
+    ``,
+    `/** Local inference binding (docker llama.cpp / Ollama via \`OKE_AI_URL\`). */`,
+    `export const local = ai.model("local", {`,
+    `  provider: "${provider === "ollama" ? "ollama" : "openai-compatible"}",`,
+    `  model: process.env.OKE_AI_LOCAL_MODEL ?? "${chat}",`,
+    `  ...(process.env.OKE_AI_URL?.trim() ? { baseUrl: process.env.OKE_AI_URL.trim() } : {}),`,
+    `});`,
+    ``,
+    `/** Advanced Notes summarize — used by \`notes.summarize\` via \`fx.ask\`. */`,
+    `export const summarizeNote = smart.prompt("summarize-note", {`,
+    `  via: ["smart", "local"],`,
+    `  timeout: "30s",`,
     `});`,
   ];
 
@@ -265,6 +283,10 @@ function writeAiModels(cwd: string, input: AiSetupApplyInput): string {
   if (existsSync(coreTsPath)) {
     const existing = readFileSync(coreTsPath, "utf8");
     if (hasAiModels(existing)) {
+      const withPrompt = ensureSummarizeNotePrompt(existing);
+      if (withPrompt !== existing) {
+        writeFileSync(coreTsPath, withPrompt, "utf8");
+      }
       return coreTsPath;
     }
     writeFileSync(coreTsPath, mergeAiIntoCore(existing, rendered), "utf8");
@@ -286,6 +308,44 @@ function hasAiModels(source: string): boolean {
   );
 }
 
+/**
+ * Append the advanced Notes `summarize-note` prompt when a `smart` model
+ * exists but the prompt was never declared (common after older `--ai` runs).
+ *
+ * @param source - Existing `src/core.ts` (or AI sidecar) source
+ */
+export function ensureSummarizeNotePrompt(source: string): string {
+  let next = source;
+  if (
+    !/\bai\.model\s*\(\s*["']local["']/.test(next) &&
+    /\bai\.model\s*\(\s*["']smart["']/.test(next)
+  ) {
+    next = `${next.trimEnd()}
+
+/** Local inference binding (docker llama.cpp / Ollama via \`OKE_AI_URL\`). */
+export const local = ai.model("local", {
+  provider: "openai-compatible",
+  model: process.env.OKE_AI_LOCAL_MODEL ?? "granite3.3:2b",
+  ...(process.env.OKE_AI_URL?.trim() ? { baseUrl: process.env.OKE_AI_URL.trim() } : {}),
+});
+`;
+  }
+  if (/summarize-note/.test(next) || /summarizeNote/.test(next)) {
+    return next;
+  }
+  if (!/\bai\.model\s*\(\s*["']smart["']/.test(next)) {
+    return next;
+  }
+  const prompt = `
+/** Advanced Notes summarize — used by \`notes.summarize\` via \`fx.ask\`. */
+export const summarizeNote = smart.prompt("summarize-note", {
+  via: ["smart", "local"],
+  timeout: "30s",
+});
+`;
+  return `${next.trimEnd()}\n${prompt}\n`;
+}
+
 /**
  * Merge rendered AI module into an existing `src/core.ts`.
  *

package/src/cli/ask-seed.test.ts

@@ -6,7 +6,8 @@ import { mkdtempSync, mkdirSync, writeFileSync, rmSync, existsSync } from "node:
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { describe, expect, test } from "bun:test";
-import { maybeAskSeed, SEEDED_MARKER } from "./ask-seed.ts";
+import { maybeAskSeed } from "./ask-seed.ts";
+import { PROJECT_STATE_REL } from "./project-state.ts";
 
 describe("maybeAskSeed", () => {
   test("skips when non-TTY", async () => {
@@ -31,7 +32,7 @@ describe("maybeAskSeed", () => {
     }
   });
 
-  test("asks once then writes marker", async () => {
+  test("asks once then writes .oke/state.json seededAt", async () => {
     const dir = mkdtempSync(join(tmpdir(), "ask-seed-"));
     try {
       mkdirSync(join(dir, "src", "db", "seed"), { recursive: true });
@@ -48,7 +49,7 @@ describe("maybeAskSeed", () => {
         },
       });
       expect(calls).toBe(1);
-      expect(existsSync(join(dir, SEEDED_MARKER))).toBe(true);
+      expect(existsSync(join(dir, PROJECT_STATE_REL))).toBe(true);
 
       await maybeAskSeed({
         cwd: dir,

package/src/cli/ask-seed.ts

@@ -3,13 +3,13 @@
  */
 
 import { confirm, isCancel } from "@clack/prompts";
-import { resolve } from "node:path";
 import type { ConfigEnv } from "../config/index.ts";
 import { formatCliChrome } from "../term.ts";
 import { resolveSeedModulePath, runSeed } from "./db-seed.ts";
+import { isProjectSeeded, markProjectSeeded } from "./project-state.ts";
 
-/** Marker written after a successful prompted seed (skip re-ask). */
-export const SEEDED_MARKER = ".oke/seeded";
+/** @deprecated Use `.oke/state.json` `seededAt` via {@link isProjectSeeded}. */
+export { LEGACY_SEEDED_MARKER as SEEDED_MARKER } from "./project-state.ts";
 
 /** Options for {@link maybeAskSeed}. */
 export interface AskSeedOptions {
@@ -37,8 +37,7 @@ export async function maybeAskSeed(options: AskSeedOptions): Promise<void> {
   if (!tty) return;
 
   const cwd = options.cwd;
-  const marker = resolve(cwd, SEEDED_MARKER);
-  if (await Bun.file(marker).exists()) return;
+  if (await isProjectSeeded(cwd)) return;
 
   const seedPath = await resolveSeedModulePath(cwd);
   if (!(await Bun.file(seedPath).exists())) return;
@@ -74,6 +73,6 @@ export async function maybeAskSeed(options: AskSeedOptions): Promise<void> {
       }));
   const code = await seed(cwd, options.env);
   if (code === 0) {
-    await Bun.write(marker, `${new Date().toISOString()}\n`);
+    await markProjectSeeded(cwd);
   }
 }

package/src/cli/client-add.test.ts

@@ -96,6 +96,7 @@ void seats;
       }),
     );
 
+    // `bunx tsc` under full-suite contention can exceed the default 5s budget.
     const proc = Bun.spawn(["bunx", "tsc", "--project", tsconfig], {
       cwd: dir,
       stdout: "pipe",
@@ -110,7 +111,7 @@ void seats;
     if (code !== 0) {
       throw new Error(`tsc failed (${code})\n${stdout}\n${stderr}\n--- d.ts ---\n${result.source}`);
     }
-  });
+  }, 15_000);
 
   test("fetches /_oke/client.json from url", async () => {
     const dir = await mkdtemp(join(tmpdir(), "oke-client-add-"));

package/src/cli/dev.test.ts

@@ -872,3 +872,119 @@ describe("oke dev Docker-first", () => {
     }
   });
 });
+
+describe("oke dev schema.decl sync framing", () => {
+  let session: DevSession | undefined;
+
+  afterEach(() => {
+    session?.stop();
+    session = undefined;
+  });
+
+  test("schema-definition error is a loud failure line, not a benign skip", async () => {
+    const dir = await mkdtemp(join(tmpdir(), "oke-dev-schema-decl-err-"));
+    await mkdir(join(dir, "src/db"), { recursive: true });
+    await Bun.write(
+      join(dir, "oke.config.ts"),
+      `export default {
+  name: "schema-decl-err",
+  images: {
+    "store.sql": "postgres:16-alpine",
+    "store.kv": "redis:7-alpine",
+  },
+  drivers: {
+    store: { sql: { dev: "postgres", test: "pglite", prod: "postgres" } },
+  },
+};
+`,
+    );
+    await Bun.write(join(dir, "src/app.ts"), "export {}\n");
+    // Genuine definition error: `.references()` target is undefined → emit throws.
+    await Bun.write(
+      join(dir, "src/db/schema.decl.ts"),
+      `import { store, field } from ${JSON.stringify(OKE_INDEX)};
+
+export const authors = store.schema.table("authors", {
+  id: field.text().primaryKey(),
+});
+
+export const posts = store.schema.table("posts", {
+  id: field.text().primaryKey(),
+  authorId: field.text().notNull().references(() => (authors as { missingColumn: never }).missingColumn),
+});
+`,
+    );
+
+    const writes: string[] = [];
+    const result = await runDev({
+      stdinIsTTY: false,
+      cwd: dir,
+      silentClaim: true,
+      keepAlive: false,
+      appPort: 0,
+      consolePort: 0,
+      mcpPort: 0,
+      docsMcpPort: 0,
+      ...stubCompose({ noDbPush: false }),
+      startApp: async () => ({ stop() {} }),
+      regenClient: async () => {},
+      write: (t) => {
+        writes.push(t);
+      },
+      serveConsole: async () => ({ stop() {} }),
+      serveMcp: async () => ({ stop() {} }),
+      serveDocsMcp: async () => ({
+        stop() {},
+        port: 1,
+        url: new URL("http://127.0.0.1:1"),
+      }),
+    });
+
+    expect(result.code).toBe(0);
+    session = result.session;
+
+    const plain = writes.join("").replace(/\x1b\[[0-9;]*m/g, "");
+    expect(plain).toContain("schema.decl.ts has an error");
+    expect(plain).toMatch(/●\s*schema\.decl\.ts has an error/);
+    expect(plain).not.toContain("oke db push (dev) skipped");
+  }, 60_000);
+
+  test("benign environmental sync gap still uses skip framing", async () => {
+    const dir = await mkdtemp(join(tmpdir(), "oke-dev-schema-skip-"));
+    await mkdir(join(dir, "src"), { recursive: true });
+    // No oke.config.ts — syncDevSchema(env=dev) throws the known docker-mode skip.
+    await Bun.write(join(dir, "src/app.ts"), "export {}\n");
+
+    const writes: string[] = [];
+    const result = await runDev({
+      stdinIsTTY: false,
+      cwd: dir,
+      silentClaim: true,
+      keepAlive: false,
+      appPort: 0,
+      consolePort: 0,
+      mcpPort: 0,
+      docsMcpPort: 0,
+      ...stubCompose({ noDbPush: false }),
+      startApp: async () => ({ stop() {} }),
+      regenClient: async () => {},
+      write: (t) => {
+        writes.push(t);
+      },
+      serveConsole: async () => ({ stop() {} }),
+      serveMcp: async () => ({ stop() {} }),
+      serveDocsMcp: async () => ({
+        stop() {},
+        port: 1,
+        url: new URL("http://127.0.0.1:1"),
+      }),
+    });
+
+    expect(result.code).toBe(0);
+    session = result.session;
+
+    const plain = writes.join("").replace(/\x1b\[[0-9;]*m/g, "");
+    expect(plain).toContain("oke db push (dev) skipped — docker mode: oke.config.ts not found");
+    expect(plain).not.toContain("schema.decl.ts has an error");
+  }, 60_000);
+});