okengine 0.18.4 → 0.19.0

package/src/cli/dev.ts

@@ -48,7 +48,6 @@ import {
 } from "../term.ts";
 import { clientAdd } from "./client-add.ts";
 import { resolveDriverId } from "../config/index.ts";
-import type { DevComposeControlAction } from "./dev-controls.ts";
 import {
   createDebouncedRunner,
   isDomainSchemaWatchPath,
@@ -498,10 +497,12 @@ export async function runDev(options: DevOptions = {}): Promise<DevResult> {
   let pendingAiModelWatch: {
     readonly url: string;
     readonly model: string;
-    readonly kind: "openai-compatible" | "ollama";
+    readonly kind: "openai-compatible";
   } | null = null;
   /** Hero AI status dot (yellow while model loads). */
   let heroAiStatus: DevStatus | undefined;
+  /** Compose AI service name when `images.ai` is pinned — undefined for cloud AI. */
+  let stackAiServiceName: string | undefined;
   let loadedConfig: Awaited<ReturnType<typeof loadOkeConfig>>["config"] | null = null;
   try {
     loadedConfig = (await loadOkeConfig(cwd)).config;
@@ -628,24 +629,42 @@ export async function runDev(options: DevOptions = {}): Promise<DevResult> {
         const up =
           options.composeUp ??
           (async (files, dir) => {
-            const args = ["compose", ...files.flatMap((f) => ["-f", f]), "up", "-d"];
-            const proc = Bun.spawn(["docker", ...args], {
+            const {
+              runComposeUp,
+              formatComposeUpEventMessage,
+              composeUpPhaseStatus,
+              shortenComposeTarget,
+            } = await import("../docker/compose-up.ts");
+            await runComposeUp({
+              files,
               cwd: dir,
-              stdout: "pipe",
-              stderr: "pipe",
-              env: { ...process.env, ...stackEnv! },
+              env: stackEnv!,
+              onEvent: (event) => {
+                const message = formatComposeUpEventMessage(event);
+                if (!message) return;
+                const status = event.phase
+                  ? composeUpPhaseStatus(event.phase)
+                  : ("pending" as const);
+                const perService =
+                  event.target &&
+                  event.phase &&
+                  event.phase !== "other" &&
+                  (event.kind === undefined ||
+                    event.kind === "container" ||
+                    event.kind === "image" ||
+                    event.kind === "service");
+                if (perService && event.target) {
+                  const key = `compose:${shortenComposeTarget(event.target)}`;
+                  bootProgress.set(key, formatStatusLine(message, undefined, status));
+                  return;
+                }
+                // Download / network / misc — one activity row so pulls never look frozen.
+                bootProgress.set(
+                  "compose:activity",
+                  formatStatusLine(message, undefined, status === "error" ? "error" : "pending"),
+                );
+              },
             });
-            const [stdout, stderr, code] = await Promise.all([
-              new Response(proc.stdout).text(),
-              new Response(proc.stderr).text(),
-              proc.exited,
-            ]);
-            if (code !== 0) {
-              const detail = [stdout.trim(), stderr.trim()].filter(Boolean).join("\n");
-              throw new Error(
-                `oke dev: docker compose exited ${code}` + (detail ? `\n${detail}` : ""),
-              );
-            }
           });
         bootProgress.set("compose", formatStatusLine("docker compose up…", undefined, "pending"));
         // Compose files live under docker/; cwd for compose is that directory.
@@ -661,6 +680,7 @@ export async function runDev(options: DevOptions = {}): Promise<DevResult> {
 
         // Stream compose health until infra is up (AI may stay pending — model load).
         const aiServiceName = derived.specs.find((s) => s.role === "ai")?.serviceName;
+        stackAiServiceName = aiServiceName;
         const labelForService = (serviceName: string): string => {
           const spec = derived.specs.find((s) => s.serviceName === serviceName);
           return spec ? roleLabel(spec.role) : serviceName;
@@ -689,9 +709,10 @@ export async function runDev(options: DevOptions = {}): Promise<DevResult> {
               cwd: dockerOut,
               env: dockerStarted.env,
               run: composeHealthRun,
-              timeoutMs: 20_000,
+              // Postgres init + PgDog health can exceed 20s on a cold volume.
+              timeoutMs: 90_000,
               isDone: (map) => {
-                // Empty ps (compose just-created / injectable gap): do not spin 20s.
+                // Empty ps (compose just-created / injectable gap): do not spin forever.
                 if (map.size === 0) return true;
                 return [...map.entries()].every(
                   ([name, s]) => name === aiServiceName || s === "ready" || s === "error",
@@ -712,73 +733,8 @@ export async function runDev(options: DevOptions = {}): Promise<DevResult> {
           };
         }
 
-        // AI model: Ollama pulls via HTTP (blocking with progress). OpenAI-compatible
-        // servers (llama.cpp / vLLM / SGLang) load in-container — poll readiness in
-        // the background. Never treat compose "healthy" as model-ready.
-        const aiSpec = derived.specs.find((s) => s.role === "ai");
-        if (aiSpec) {
-          const { recipeFor } = await import("../docker/recipes/index.ts");
-          const recipeId = recipeFor(aiSpec.image).id;
-          const model =
-            stackEnv!.OKE_AI_MODEL?.trim() ||
-            process.env.OKE_AI_MODEL?.trim() ||
-            (recipeId === "ollama" ? "qwen3.5:9b" : "granite3.3:2b");
-          const url = `http://127.0.0.1:${aiSpec.hostPort}`;
-          const paintAi = (status: DevStatus, detail?: string) => {
-            heroAiStatus = status;
-            if (!pendingStackSummary) return;
-            pendingStackSummary = {
-              ...pendingStackSummary,
-              services: pendingStackSummary.services.map((svc) =>
-                svc.serviceName === aiSpec.serviceName
-                  ? {
-                      ...svc,
-                      status,
-                      detail: detail ?? svc.detail,
-                    }
-                  : svc,
-              ),
-            };
-          };
-          if (recipeId === "ollama") {
-            bootProgress.set(
-              "ai-model",
-              formatStatusLine(`AI ${model} — ensuring…`, undefined, "pending"),
-            );
-            const { ensureOllamaModel } = await import("../docker/ollama-pull.ts");
-            await ensureOllamaModel({
-              url,
-              model,
-              onStatus: (line) =>
-                bootProgress.set("ai-model", formatStatusLine(line, undefined, "pending")),
-            });
-            pendingAiModelWatch = { url, model, kind: "ollama" };
-            paintAi("ready", model);
-          } else if (recipeId === "llama-cpp" || recipeId === "vllm" || recipeId === "sglang") {
-            pendingAiModelWatch = {
-              url: `${url}/v1`,
-              model,
-              kind: "openai-compatible",
-            };
-            bootProgress.set(
-              "ai-model",
-              formatStatusLine(`AI ${model} — probing…`, undefined, "pending"),
-            );
-            const { probeAiModelStatus, formatAiModelStatusMessage } =
-              await import("../docker/ai-model-status.ts");
-            const snap = await probeAiModelStatus({
-              url: `${url}/v1`,
-              model,
-              kind: "openai-compatible",
-            });
-            const status = devStatusFromAiPhase(snap.phase);
-            paintAi(status, snap.phase === "ready" ? model : `${model} · ${snap.phase}`);
-            bootProgress.set(
-              "ai-model",
-              formatStatusLine(formatAiModelStatusMessage(snap), undefined, status),
-            );
-          }
-        }
+        // Compose no longer ships local AI recipes — BYO `OKE_AI_URL` watch
+        // is armed below after stackEnv / process.env are known.
       } catch (err) {
         const msg = err instanceof Error ? err.message : String(err);
         console.error(msg);
@@ -802,6 +758,19 @@ export async function runDev(options: DevOptions = {}): Promise<DevResult> {
 
   const heroAiModel =
     stackEnv?.OKE_AI_MODEL?.trim() || process.env.OKE_AI_MODEL?.trim() || undefined;
+  // BYO OpenAI-compatible server (LM Studio, llama.cpp, …) — poll readiness
+  // without blocking boot. Registry cloud (OpenRouter) has no OKE_AI_URL.
+  if (!pendingAiModelWatch) {
+    const byoUrl = stackEnv?.OKE_AI_URL?.trim() || process.env.OKE_AI_URL?.trim() || undefined;
+    const byoModel = heroAiModel;
+    if (byoUrl && byoModel) {
+      pendingAiModelWatch = {
+        url: byoUrl,
+        model: byoModel,
+        kind: "openai-compatible",
+      };
+    }
+  }
   // OpenAI-compatible model load can outlive compose health — default AI ● to pending.
   if (pendingAiModelWatch && heroAiStatus === undefined) {
     heroAiStatus = "pending";
@@ -840,7 +809,10 @@ export async function runDev(options: DevOptions = {}): Promise<DevResult> {
     const one = (name: string) => h.get(name);
     switch (element) {
       case "ai": {
-        const container = one("ai");
+        // Cloud / host AI has no compose service — ignore orphaned exited
+        // containers left over after `images.ai` was removed.
+        if (!stackAiServiceName) return aiStatus;
+        const container = one(stackAiServiceName);
         if (container === "error") return "error";
         return aiStatus ?? container;
       }
@@ -883,7 +855,7 @@ export async function runDev(options: DevOptions = {}): Promise<DevResult> {
           st === "ready" || st === "idle"
             ? null
             : st === "error"
-              ? liveComposeHealth.get("ai") === "error"
+              ? stackAiServiceName && liveComposeHealth.get(stackAiServiceName) === "error"
                 ? "stopped"
                 : "error"
               : "loading";
@@ -901,7 +873,7 @@ export async function runDev(options: DevOptions = {}): Promise<DevResult> {
             const fromHealth = svc.serviceName ? liveComposeHealth.get(svc.serviceName) : undefined;
             let status = fromHealth ?? svc.status ?? "pending";
             let detail = svc.detail;
-            if (svc.serviceName === "ai") {
+            if (stackAiServiceName && svc.serviceName === stackAiServiceName) {
               if (fromHealth === "error") {
                 status = "error";
                 detail = heroAiModel ? `${heroAiModel} · stopped` : "stopped";
@@ -941,9 +913,7 @@ export async function runDev(options: DevOptions = {}): Promise<DevResult> {
     return { code: 0, plan };
   }
 
-  let boardPaused = false;
   const repaintBoard = (aiStatus?: DevStatus): void => {
-    if (boardPaused) return;
     bootBoard.paint(paintBootBoard(aiStatus ?? heroAiStatus));
   };
 
@@ -963,7 +933,7 @@ export async function runDev(options: DevOptions = {}): Promise<DevResult> {
       onStatus: (_line, status) => {
         const st = devStatusFromAiPhase(status.phase);
         // Container stopped wins over model-phase "loading".
-        if (liveComposeHealth.get("ai") === "error") {
+        if (stackAiServiceName && liveComposeHealth.get(stackAiServiceName) === "error") {
           heroAiStatus = "error";
           repaintBoard("error");
           if (!sawAiPaint) {
@@ -1012,6 +982,7 @@ export async function runDev(options: DevOptions = {}): Promise<DevResult> {
 
   // One-shot schema sync for the compose (`dev`) profile: emits
   // schema.drizzle.ts for the active dialect, then pushes via drizzle-kit.
+  let schemaPushOk = options.noDbPush === true;
   if (!options.noDbPush) {
     const { syncDevSchema } = await import("./dev-schema-sync.ts");
     const configEnv = "dev" as const;
@@ -1027,11 +998,40 @@ export async function runDev(options: DevOptions = {}): Promise<DevResult> {
           `oke db push (dev · ${result.dialect}) ${result.code === 0 ? "ok" : "failed"}`,
         ),
       );
+      schemaPushOk = result.code === 0;
     } catch (err) {
       write(await formatDevSchemaSyncFailure(cwd, err, "boot"));
     }
   }
 
+  // Vault gaps before seed / app — missing contracts (e.g. OPENROUTER_API_KEY).
+  {
+    const { maybeAskVaultGaps } = await import("./ask-vault-gaps.ts");
+    const vaultCode = await maybeAskVaultGaps({
+      cwd,
+      entry,
+      write,
+      stdinIsTTY: options.stdinIsTTY ?? process.stdin.isTTY,
+    });
+    if (vaultCode !== 0) {
+      bootBoard.stop();
+      restoreProcessEnv();
+      restoreWarn();
+      return { code: vaultCode };
+    }
+  }
+
+  // First-time seed ask only after a successful push (needs live schema).
+  if (schemaPushOk && !options.noDbPush) {
+    const { maybeAskSeed } = await import("./ask-seed.ts");
+    await maybeAskSeed({
+      cwd,
+      env: "dev",
+      write,
+      stdinIsTTY: options.stdinIsTTY ?? process.stdin.isTTY,
+    });
+  }
+
   const autoPushEnabled = resolveDevAutoPush({
     noDbPush: options.noDbPush,
     docker: Boolean(stackEnv),
@@ -1208,23 +1208,20 @@ export async function runDev(options: DevOptions = {}): Promise<DevResult> {
     env[RUNS_INGEST_SECRET_ENV] = ingestSecret;
   }
 
-  const app = await startApp(plan.entry, env);
-  const boundAppPort = app.port ?? appPort;
+  let app: DevAppHandle | null = await startApp(plan.entry, env);
+  let boundAppPort = app.port ?? appPort;
+  env.PORT = String(boundAppPort);
 
   let mcpServer: DevMcpHandle | null = null;
   let secret: string | null = null;
   let sessions: SessionStore | null = null;
   let attachedHost: { readonly stop: () => Promise<void> } | null = null;
 
-  if (consoleServer.console) {
-    const state = consoleServer.console.state;
-    consoleState = state;
-    try {
-      const { attachHostToConsole } = await import("./attach-host-console.ts");
-      attachedHost = await attachHostToConsole({
+  const attachHostOpts = consoleServer.console
+    ? {
         entry: plan.entry,
         cwd,
-        state,
+        state: consoleServer.console.state,
         ...(ingestSecret
           ? {
               runsBridge: {
@@ -1233,7 +1230,15 @@ export async function runDev(options: DevOptions = {}): Promise<DevResult> {
               },
             }
           : {}),
-      });
+      }
+    : null;
+
+  if (consoleServer.console && attachHostOpts) {
+    const state = consoleServer.console.state;
+    consoleState = state;
+    try {
+      const { attachHostToConsole } = await import("./attach-host-console.ts");
+      attachedHost = await attachHostToConsole(attachHostOpts);
     } catch (err) {
       write(
         formatStatusLine(
@@ -1269,7 +1274,7 @@ export async function runDev(options: DevOptions = {}): Promise<DevResult> {
   const boundDocsMcpPort = docsMcpServer?.port ?? docsMcpPort;
   const docsMcpUrl = docsMcpServer?.url ?? null;
 
-  const appUrl = app.url?.origin ?? `http://127.0.0.1:${boundAppPort}`;
+  const appUrl = app?.url?.origin ?? `http://127.0.0.1:${boundAppPort}`;
   await regen(appUrl);
 
   const dbPush =
@@ -1365,15 +1370,11 @@ export async function runDev(options: DevOptions = {}): Promise<DevResult> {
     }
   });
 
-  let stopDevControls: (() => void) | null = null;
-
   let stopped = false;
   const stop = () => {
     if (stopped) return;
     stopped = true;
     restoreWarn();
-    stopDevControls?.();
-    stopDevControls = null;
     stopAiModelWatch?.();
     stopAiModelWatch = null;
     stopComposeHealthWatch?.();
@@ -1384,7 +1385,15 @@ export async function runDev(options: DevOptions = {}): Promise<DevResult> {
     const host = attachedHost;
     attachedHost = null;
     void host?.stop();
-    void Promise.resolve(app.stop());
+    const appHandle = app;
+    app = null;
+    void Promise.resolve(appHandle?.stop());
+    void import("../drivers/postgres.ts")
+      .then(async ({ pauseSharedPostgresClients, resumeSharedPostgresClients }) => {
+        await pauseSharedPostgresClients();
+        resumeSharedPostgresClients();
+      })
+      .catch(() => {});
     consoleServer.stop();
     mcpServer?.stop();
     docsMcpServer?.stop();
@@ -1467,112 +1476,11 @@ export async function runDev(options: DevOptions = {}): Promise<DevResult> {
 
   if (options.onReady) await options.onReady(session);
 
-  // Keyboard controls (docker + TTY): Ink replaces raw-mode stdin.
-  if (keepAlive && dockerStarted && (options.stdinIsTTY ?? process.stdin.isTTY)) {
-    const started = dockerStarted;
-    const syncComposeBoard = async (): Promise<void> => {
-      const { readComposeHealth } = await import("../docker/compose-health.ts");
-      liveComposeHealth = await readComposeHealth({
-        files: started.files,
-        cwd: started.cwd,
-        env: started.env,
-        run: composeHealthRun,
-      });
-      if (liveComposeHealth.get("ai") === "error") heroAiStatus = "error";
-      repaintBoard();
-    };
-    const refreshChrome = async (): Promise<void> => {
-      await syncComposeBoard();
-      paintReadyChrome();
-    };
-    const waitComposeReady = async (): Promise<void> => {
-      const { watchComposeHealth } = await import("../docker/compose-health.ts");
-      const aiServiceName = started.aiServiceName;
-      liveComposeHealth = await watchComposeHealth({
-        files: started.files,
-        cwd: started.cwd,
-        env: started.env,
-        run: composeHealthRun,
-        timeoutMs: 20_000,
-        isDone: (map) => {
-          if (map.size === 0) return true;
-          return [...map.entries()].every(
-            ([name, s]) => name === aiServiceName || s === "ready" || s === "error",
-          );
-        },
-      });
-      if (liveComposeHealth.get("ai") === "error") heroAiStatus = "error";
-    };
-
-    const composeAction = async (action: DevComposeControlAction): Promise<void> => {
-      const files = started.files;
-      const finalArgs =
-        action === "up"
-          ? ["compose", ...files.flatMap((f) => ["-f", f]), "up", "-d"]
-          : ["compose", ...files.flatMap((f) => ["-f", f]), action];
-      const proc = Bun.spawn(["docker", ...finalArgs], {
-        cwd: started.cwd,
-        stdout: "pipe",
-        stderr: "pipe",
-        env: { ...process.env, ...started.env },
-      });
-      const [stdout, stderr, code] = await Promise.all([
-        new Response(proc.stdout).text(),
-        new Response(proc.stderr).text(),
-        proc.exited,
-      ]);
-      if (code !== 0) {
-        const detail = [stdout.trim(), stderr.trim()].filter(Boolean).join("\n");
-        throw new Error(`docker compose ${action} exited ${code}` + (detail ? `\n${detail}` : ""));
-      }
-      if (action === "up") await waitComposeReady();
-      await syncComposeBoard();
-    };
-
-    try {
-      const { launchDevLiveControls } = await import("./tui/DevLive.tsx");
-      await launchDevLiveControls({
-        onRefresh: () => refreshChrome(),
-        onSeed: async () => {
-          const { runSlashCli } = await import("./tui/slash-run.ts");
-          boardPaused = true;
-          const lines: string[] = [];
-          try {
-            const code = await runSlashCli(cwd, ["db", "seed", "--force"], (line) => {
-              lines.push(line);
-              write(line);
-            });
-            if (code === 0) return;
-            const last = [...lines]
-              .reverse()
-              .map((line) => line.trim())
-              .find((line) => line.length > 0 && !line.startsWith("✗") && !line.startsWith("$"));
-            throw new Error(last || "oke db seed failed");
-          } finally {
-            boardPaused = false;
-          }
-        },
-        onComposeUp: () => composeAction("up"),
-        onComposeStop: () => composeAction("stop"),
-        onQuit: () => {
-          stop();
-          process.exit(0);
-        },
-      });
-      // Esc / unmount without q — still tear down.
-      stop();
-    } catch {
-      // Inconsequential: Ink/TUI is optional chrome — fall back to keep-alive without keyboard.
-      await new Promise(() => {});
-    }
-    return { code: 0, plan: session.plan, session };
-  }
-
   if (!keepAlive) {
     return { code: 0, plan: session.plan, session };
   }
 
-  // Keep the process alive.
+  // Keep the process alive (Ctrl+C / SIGTERM → session.stop).
   await new Promise(() => {});
   return { code: 0, plan: session.plan, session };
 }

package/src/cli/docker-clean.ts

@@ -326,7 +326,7 @@ async function askIncludeOthersPrompt(): Promise<boolean | null> {
     initialValue: false,
   });
   if (isCancel(value)) return null;
-  return value;
+  return Boolean(value);
 }
 
 /**
@@ -356,7 +356,7 @@ async function pickProjectKeys(options: {
     required: false,
   });
   if (isCancel(value)) return null;
-  return value;
+  return Array.isArray(value) ? value : null;
 }
 
 /**

package/src/cli/docker-cli.test.ts

@@ -72,7 +72,7 @@ describe("oke stack", () => {
     const code = await runStackPreview({
       cwd: dir,
       images: {
-        "channel.email": "axllent/mailpit:v1.30.7",
+        "channel.email": "axllent/mailpit:v1.31.1",
       },
       write: (t) => {
         out += t;

package/src/cli/doctor-diff.ts

@@ -81,7 +81,9 @@ export async function runDoctorDiff(options: DoctorDiffOptions = {}): Promise<Do
   for (const c of undeclared) {
     write(`  [contract-breaking] ${c.path}: ${c.summary}\n`);
   }
-  write("Acknowledge intentional breaks with `breaking: true` on the owning flow.\n");
+  write(
+    "Acknowledge intentional breaks with `breaking: true` on the HTTP / call / MCP / resource contract bag.\n",
+  );
   return { code: EXIT_RUNTIME, undeclared, allChanges: all };
 }
 
@@ -223,7 +225,7 @@ export async function doctorDiffCli(args: readonly string[]): Promise<number> {
 
 CI gate: fail on undeclared contract-breaking Manifest changes.
 Default: git merge-base (main/master) vs working-tree manifest.
-Acknowledge intentional breaks with breaking: true on the flow.
+Acknowledge intentional breaks with breaking: true on the HTTP / call / MCP / resource contract bag.
 `);
       return EXIT_OK;
     }

package/src/cli/doctor-pii.test.ts

@@ -87,7 +87,7 @@ describe("doctor-pii", () => {
         db: { facet: "sql", classifications: { email: { pii: true } } },
       },
       ai: {
-        models: { m: { provider: "openai-compatible" } },
+        models: { m: { provider: "anthropic" } },
         prompts: { summarize: { model: "m" } },
       },
     });

package/src/cli/doctor.ts

@@ -102,7 +102,8 @@ export interface DoctorFinding {
     | "cdc_outbox_backlog"
     | "cdc_outbox_retention"
     | "live_subscriber_pressure"
-    | "live_fanout_queue_saturated";
+    | "live_fanout_queue_saturated"
+    | "search_backfill_required";
   readonly severity: "error" | "warn";
   readonly message: string;
 }
@@ -414,6 +415,18 @@ export async function runDoctor(options: DoctorOptions = {}): Promise<{
   }
 
   if (manifest) {
+    for (const store of Object.values(manifest.stores ?? {})) {
+      if (store.facet !== "sql" || !store.tables) continue;
+      for (const [tableName, table] of Object.entries(store.tables)) {
+        if (table.search?.backfillRequired === true) {
+          findings.push({
+            code: "search_backfill_required",
+            severity: "warn",
+            message: `table "${tableName}" has searchable/embed columns on existing data — run \`oke db search-backfill ${tableName}\` (never auto on push)`,
+          });
+        }
+      }
+    }
     findings.push(...checkManifestPiiAsks(manifest));
   }
 

package/src/cli/hero-meta.test.ts

@@ -114,9 +114,11 @@ describe("hero-meta", () => {
           ai: { dev: "openai-compatible", test: "mock", prod: "openai-compatible" },
         },
       },
-      { docker: true, sqlDriver: "postgres", kvDriver: "redis", aiModel: "granite3.3:2b" },
+      { docker: true, sqlDriver: "postgres", kvDriver: "redis", aiModel: "openrouter/free" },
+    );
+    expect(rows.find((r) => r.element === "ai")?.detail).toBe(
+      "openai-compatible · openrouter/free",
     );
-    expect(rows.find((r) => r.element === "ai")?.detail).toBe("openai-compatible · granite3.3:2b");
     expect(rows.find((r) => r.element === "ai")?.status).not.toBe("idle");
   });
 

package/src/cli/load-config.images.test.ts

@@ -20,9 +20,8 @@ describe("flattenImagesConfig", () => {
           files: "rustfs/rustfs:1.0.0",
           index: "getmeili/meilisearch:v1.53",
         },
-        channel: { email: "axllent/mailpit:v1.30.7" },
-        ai: "ollama/ollama:0.32.13",
-        pgdog: "ghcr.io/pgdogdev/pgdog:v0.1.53",
+        channel: { email: "axllent/mailpit:v1.31.1" },
+        pgdog: "ghcr.io/pgdogdev/pgdog:v0.1.57",
         proxy: "caddy:2-alpine",
       }),
     ).toEqual({
@@ -30,9 +29,8 @@ describe("flattenImagesConfig", () => {
       "store.kv": "redis:8-alpine",
       "store.files": "rustfs/rustfs:1.0.0",
       "store.index": "getmeili/meilisearch:v1.53",
-      "channel.email": "axllent/mailpit:v1.30.7",
-      ai: "ollama/ollama:0.32.13",
-      pgdog: "ghcr.io/pgdogdev/pgdog:v0.1.53",
+      "channel.email": "axllent/mailpit:v1.31.1",
+      pgdog: "ghcr.io/pgdogdev/pgdog:v0.1.57",
       proxy: "caddy:2-alpine",
     });
   });
@@ -55,7 +53,7 @@ describe("defaultImagesFromConfig", () => {
     });
     expect(images).toEqual({
       "store.sql": "postgres:18-alpine",
-      pgdog: "ghcr.io/pgdogdev/pgdog:v0.1.53",
+      pgdog: "ghcr.io/pgdogdev/pgdog:v0.1.57",
       "store.kv": "redis:8-alpine",
     });
   });
@@ -70,7 +68,7 @@ describe("defaultImagesFromConfig", () => {
       },
     });
     expect(images["store.sql"]).toBe("pgvector/pgvector:pg17");
-    expect(images.pgdog).toBe("ghcr.io/pgdogdev/pgdog:v0.1.53");
+    expect(images.pgdog).toBe("ghcr.io/pgdogdev/pgdog:v0.1.57");
   });
 
   test("clock postgres alone pulls store.sql image", () => {
@@ -81,7 +79,7 @@ describe("defaultImagesFromConfig", () => {
     });
     expect(images).toEqual({
       "store.sql": "postgres:18-alpine",
-      pgdog: "ghcr.io/pgdogdev/pgdog:v0.1.53",
+      pgdog: "ghcr.io/pgdogdev/pgdog:v0.1.57",
     });
   });
 
@@ -93,7 +91,7 @@ describe("defaultImagesFromConfig", () => {
     });
     expect(images).toEqual({
       "store.sql": "postgres:18-alpine",
-      pgdog: "ghcr.io/pgdogdev/pgdog:v0.1.53",
+      pgdog: "ghcr.io/pgdogdev/pgdog:v0.1.57",
     });
   });
 

package/src/cli/load-config.ts

@@ -15,7 +15,7 @@ import type { Manifest } from "../manifest/types.ts";
 /** Default image pins when `images` is omitted but prod drivers need containers. */
 const DEFAULT_SQL_IMAGE = "postgres:18-alpine";
 const DEFAULT_PGVECTOR_IMAGE = "pgvector/pgvector:pg17";
-const DEFAULT_PGDOG_IMAGE = "ghcr.io/pgdogdev/pgdog:v0.1.53";
+const DEFAULT_PGDOG_IMAGE = "ghcr.io/pgdogdev/pgdog:v0.1.57";
 const DEFAULT_KV_IMAGE = "redis:8-alpine";
 
 /**