okengine 0.18.4 → 0.19.0

package/src/term.test.ts

@@ -50,7 +50,7 @@ describe("term", () => {
         { element: "flow", detail: "", status: "ready" },
         { element: "store", detail: "sql postgres · kv redis", status: "ready" },
         { element: "signal", detail: "memory", status: "ready" },
-        { element: "ai", detail: "openai-compatible · granite3.3:2b", status: "pending" },
+        { element: "ai", detail: "openai-compatible · openrouter/free", status: "pending" },
       ],
     });
     expect(out).toContain("oke dev  v0.2.4");

package/src/test/create-test-app.test.ts

@@ -12,7 +12,7 @@ import { vault, VaultBootError } from "../elements/vault.ts";
 import { oke } from "../kernel/app.ts";
 import { flow, resetFlowSeq } from "../kernel/flow.ts";
 import { on, resetBindings } from "../kernel/on.ts";
-import { every, http } from "../kernel/triggers.ts";
+import { http } from "../kernel/triggers.ts";
 import { createTestApp } from "./create-test-app.ts";
 
 describe("createTestApp — four-applications surface", () => {
@@ -21,11 +21,7 @@ describe("createTestApp — four-applications surface", () => {
     resetFlowSeq();
 
     const member = gate.policy("member", ({ auth }) => !!auth.verified);
-    const orderPlaced = signal("order-placed", {
-      delivery: "once",
-      retries: 2,
-      deadLetter: true,
-    });
+    const orderPlaced = signal.once("order-placed", { retries: 2, deadLetter: true });
     const mail = channel.email({ from: "test@oke.dev" });
     const orderConfirmed = mail.template("order-confirmed", {
       schema: z.object({
@@ -36,10 +32,13 @@ describe("createTestApp — four-applications surface", () => {
     });
 
     on(
-      http.post("/orders").gate(member),
+      http
+        .post("/orders", {
+          in: z.object({ sku: z.string(), qty: z.number() }),
+          out: z.object({ id: z.string() }),
+        })
+        .gate(member),
       flow("orders.create", {
-        in: z.object({ sku: z.string(), qty: z.number() }),
-        out: z.object({ id: z.string() }),
         effects: { emits: ["order-placed"] },
         do: async (input, fx) => {
           const id = fx.id();
@@ -62,8 +61,9 @@ describe("createTestApp — four-applications surface", () => {
       }),
     );
 
+    const expireStale = clock("expire-stale", { every: "1h" });
     on(
-      every("1h"),
+      expireStale,
       flow("orders.expire", {
         do: (_i, fx) => {
           fx.log.info("expire");
@@ -75,7 +75,7 @@ describe("createTestApp — four-applications surface", () => {
       name: "harness",
       gate: { policies: [member] },
       signals: [orderPlaced],
-      clocks: [clock("expire-stale", { every: "1h" })],
+      clocks: [expireStale],
       channel: { templates: [orderConfirmed] },
       env: "test",
     });
@@ -84,7 +84,7 @@ describe("createTestApp — four-applications surface", () => {
       gates: [member],
       signals: [orderPlaced],
       boot: {
-        clocks: [clock("expire-stale", { every: "1h" })],
+        clocks: [expireStale],
         channel: { templates: [orderConfirmed] },
       },
     });

package/src/test/live-signals.test.ts

@@ -17,15 +17,15 @@ describe("createTestApp live-signal subscriptions", () => {
     resetBindings();
     resetFlowSeq();
 
-    const orderStatus = signal("order-status", {
-      delivery: "live",
-      retention: { maxCount: 10 },
-    });
+    const orderStatus = signal.live("order-status", { retention: { maxCount: 10 } });
 
     on(
-      http.post("/orders/status").public(),
+      http
+        .post("/orders/status", {
+          in: z.object({ orderId: z.string(), status: z.string() }),
+        })
+        .public(),
       flow("orders.updateStatus", {
-        in: z.object({ orderId: z.string(), status: z.string() }),
         effects: { emits: ["order-status"] },
         do: async (input, fx) => {
           await fx.emit(orderStatus, input);

package/src/test/provisions.integration.test.ts

@@ -11,6 +11,7 @@ import { gate } from "../elements/gate.ts";
 import { signal } from "../elements/signal.ts";
 import { vault } from "../elements/vault.ts";
 import { oke } from "../kernel/app.ts";
+import { call } from "../kernel/call.ts";
 import { flow, resetFlowSeq } from "../kernel/flow.ts";
 import { on, resetBindings } from "../kernel/on.ts";
 import { http } from "../kernel/triggers.ts";
@@ -28,16 +29,8 @@ describe("Provisions integration", () => {
       dev: "sk_test_local",
     });
 
-    const orderPlaced = signal("order-placed", {
-      delivery: "once",
-      retries: 3,
-      deadLetter: true,
-    });
-    const orderNews = signal("order-news", {
-      delivery: "once",
-      retries: 3,
-      deadLetter: true,
-    });
+    const orderPlaced = signal.once("order-placed", { retries: 3, deadLetter: true });
+    const orderNews = signal.once("order-news", { retries: 3, deadLetter: true });
 
     const mail = channel.email({ from: "Provisions <no-reply@provisions.sa>" });
     const orderConfirmed = mail.template("order-confirmed", {
@@ -48,7 +41,7 @@ describe("Provisions integration", () => {
       }),
     });
 
-    const chargeOrder = flow("payments.chargeOrder", {
+    const chargeOrder = call("payments.chargeOrder", {
       durable: true,
       in: z.object({ orderId: z.string() }),
       out: z.boolean(),
@@ -67,10 +60,13 @@ describe("Provisions integration", () => {
     });
 
     on(
-      http.post("/orders").gate(member, canOrder),
+      http
+        .post("/orders", {
+          in: z.object({ sku: z.string(), qty: z.number() }),
+          out: z.object({ id: z.string() }),
+        })
+        .gate(member, canOrder),
       flow("orders.create", {
-        in: z.object({ sku: z.string(), qty: z.number() }),
-        out: z.object({ id: z.string() }),
         effects: { emits: ["order-placed"], calls: ["payments.chargeOrder"] },
         do: async (input, fx) => {
           const id = fx.id();

package/src/test/reset-element-registries.ts

@@ -1,5 +1,5 @@
 /**
- * Global safety net for the `store.*` / `vault.secret` / `signal()` /
+ * Global safety net for the `store.*` / `vault.secret` / `signal.*` /
  * `clock()` / `gate.policy`·scope·rate / `channel.<medium>().template()` /
  * `ai.model`·prompt·embed·agent auto-registries
  * (`src/kernel/element-registries.ts`).

package/src/test/tenant-isolation.test.ts

@@ -39,10 +39,13 @@ describe("createTestApp tenancy testing & RLS isolation", () => {
     const docStore = store.sql("docs", { schema: { documents } });
 
     on(
-      http.post("/docs").gate(memberGate),
+      http
+        .post("/docs", {
+          in: z.object({ title: z.string() }),
+          out: z.object({ id: z.string(), tenantId: z.string().nullable() }),
+        })
+        .gate(memberGate),
       flow("docs.create", {
-        in: z.object({ title: z.string() }),
-        out: z.object({ id: z.string(), tenantId: z.string().nullable() }),
         effects: { writes: ["sql:docs"], reads: ["sql:docs"] },
         do: async (input, fx) => {
           const id = fx.id();
@@ -57,10 +60,13 @@ describe("createTestApp tenancy testing & RLS isolation", () => {
     );
 
     on(
-      http.get("/docs").gate(memberGate),
+      http
+        .get("/docs", {
+          in: z.void(),
+          out: z.array(z.object({ id: z.string(), title: z.string() })),
+        })
+        .gate(memberGate),
       flow("docs.list", {
-        in: z.void(),
-        out: z.array(z.object({ id: z.string(), title: z.string() })),
         effects: { reads: ["sql:docs"] },
         do: async (_input, fx) => {
           const rows = await fx.store(docStore).select().from(documents);

package/site/content/docs/deployment/docker-swarm.mdx

@@ -1,164 +0,0 @@
----
-title: Docker Swarm
-description: Deploy with docker stack deploy — docker-stack.yml, PgDog, HEALTHCHECK readiness, graceful SIGTERM, known multi-instance limits, and optional Caddy, Traefik, or nginx.
-icon: Ship
-source: README.md
----
-
-Swarm consumes the stack file `oke docker --stack` writes. It adds built-in
-orchestration (scale, rolling updates, routing mesh) with a lower learning
-curve than Kubernetes. Scale replaceable replicas; share durable drivers.
-
-<Callout title="The one rule">
-  Deploy with `docker stack deploy`. Docker’s single `HEALTHCHECK` targets `GET /_/ready`. Treat
-  every task as replaceable — shared Postgres / Redis / S3, SIGTERM via `stop_grace_period`, honest
-  Signal/Channel process-local limits.
-</Callout>
-
-## Quick start
-
-<Steps>
-
-<Step>
-### Derive the Swarm stack file
-
-```bash
-oke docker --stack
-```
-
-Emits `Dockerfile` + **`docker-stack.yml`** (overlay network, `HEALTHCHECK` →
-`/_/ready`, `deploy.*`, `stop_grace_period: 30s`, resource limits from the
-default **4 CPU / 8 GiB** budget — override with `--cpus` / `--memory`).
-
-Prefer `--stack` over composing many `-c` files. The default `oke docker`
-(single `docker-compose.yml`) stays for plain Compose hosts.
-
-</Step>
-
-<Step>
-### Build the app image, init Swarm, deploy
-
-`docker stack deploy` ignores `build` — tag first (name matches the stack file).
-
-```bash
-docker build -t oke-<app>:latest -f docker/Dockerfile .
-docker swarm init
-cd docker
-docker stack deploy -c docker-stack.yml myapp
-```
-
-Create `secrets:` names via `docker secret create` when you use secret refs,
-or keep credentials in `.env.local` for single-node labs.
-
-</Step>
-
-<Step>
-### Scale and roll
-
-```bash
-docker service scale myapp_app=3
-docker service update --image oke-<app>:latest myapp_app
-```
-
-Prod deploy block: `update_config` (`parallelism: 1`, `order: start-first`,
-`failure_action: rollback`) and `restart_policy.condition: on-failure`.
-
-</Step>
-
-</Steps>
-
-## Share backing services
-
-Pin `dev`/`prod` drivers to shared stores:
-
-| Concern                       | Driver                       | Shared backend                                    |
-| ----------------------------- | ---------------------------- | ------------------------------------------------- |
-| SQL / durable journal / clock | `postgres`                   | Postgres (optionally via PgDog)                   |
-| Gate rate counters            | `redis` (`drivers.store.kv`) | Redis / Valkey / Dragonfly (`images["store.kv"]`) |
-| Files                         | `s3`                         | S3-compatible object store                        |
-| Signal                        | see known limits below       | —                                                 |
-
-## PgDog pooling
-
-Bun.SQL defaults to **10** connections per process — fine for one replica.
-Scale the Swarm service and `N × pool` can exceed Postgres `max_connections`.
-
-When both `store.sql` and `pgdog` are pinned (`dev`/`prod` template default),
-`DATABASE_URL` points at PgDog `:6432` — transaction pooling, wire-transparent.
-Configs: `docker/pgdog/pgdog.toml` + `docker/pgdog/users.toml`.
-
-**Why PgDog.** Transaction pooling fixes the connection math. Naive poolers can
-leak session state (`SET`, RLS vars, `LISTEN`/`NOTIFY`) across clients; PgDog
-re-applies those under transaction mode.
-
-Read-replica routing (`BEGIN READ ONLY` → replica) is documented readiness —
-not configured in the generated stack yet.
-
-## Redis-protocol images (Redis · Valkey · Dragonfly)
-
-`images["store.kv"]` defaults to Redis (most mature). Pin Valkey or Dragonfly
-the same way — driver id stays `redis`, same `REDIS_URL`. Image table + one-line
-licenses: [Store · KV](/docs/elements/store#kv).
-
-## Readiness and liveness
-
-| Endpoint       | Role                                                   | On Swarm                                              |
-| -------------- | ------------------------------------------------------ | ----------------------------------------------------- |
-| `GET /_/ready` | Kernel readiness (`booting` → `orphan_scan` → `ready`) | Single Docker `HEALTHCHECK` — routing mesh waits here |
-| `GET /health`  | App liveness                                           | External monitors only                                |
-
-## Graceful shutdown
-
-`stop_grace_period: 30s` gives `installGracefulShutdown` time to release Clock /
-Journal leases before the task is killed. Signal message leases reclaim after
-visibility TTL on survivors.
-
-## Reverse proxy
-
-Same opt-in `images.proxy` pins as plain Compose — Caddy, Traefik, or nginx. Re-run
-`oke docker --stack` after pinning. Details:
-[Reverse proxy](/docs/deployment/reverse-proxy).
-
-## Known multi-instance limits
-
-Same table as [Docker](/docs/deployment/docker#known-multi-instance-limits) —
-Clock / Journal / Gate redis / Store shared; Signal consume and Channel consent
-stores stay process-local until durable drivers ship.
-
-## Troubleshooting
-
-<Accordions>
-<Accordion title="stack deploy ignores build">
-
-Build and tag `oke-<app>:latest` first (`docker build -f docker/Dockerfile .`).
-Swarm never runs Compose `build:`.
-
-</Accordion>
-<Accordion title="New task gets traffic before orphan scan finishes">
-
-Confirm `HEALTHCHECK` targets `/_/ready` in `docker-stack.yml`. Without it,
-Swarm treats “container started” as ready.
-
-</Accordion>
-<Accordion title="Overlay networking / multi-node volumes">
-
-Multi-node needs shared Postgres / Redis / S3 — do not rely on local named
-volumes for durable state across nodes.
-
-</Accordion>
-</Accordions>
-
-## Learn more
-
-- [Docker](/docs/deployment/docker) — plain compose default
-- [Reverse proxy](/docs/deployment/reverse-proxy) — Caddy / Traefik / nginx
-- [Kubernetes](/docs/deployment/kubernetes) — Deployment, probes, Ingress
-- [CLI](/docs/reference/cli) — `oke docker --stack`
-
-## Next
-
-<Cards>
-  <Card title="Docker" href="/docs/deployment/docker" />
-  <Card title="Reverse proxy" href="/docs/deployment/reverse-proxy" />
-  <Card title="Kubernetes" href="/docs/deployment/kubernetes" />
-</Cards>

package/site/content/docs/deployment/docker.mdx

@@ -1,227 +0,0 @@
----
-title: Docker
-description: Deploy with plain docker compose — single production-grade docker-compose.yml, shared drivers, PgDog, readiness, graceful SIGTERM, and opt-in Caddy, Traefik, or nginx when you need an edge without an orchestrator.
-icon: Package
-source: README.md
----
-
-Plain `docker compose` is the simplest production shape: single or few app
-instances on one host (or a small set you manage yourself). Derive with
-`oke docker`; opt into a proxy only when you need HTTPS at the edge.
-
-<Callout title="The one rule">
-  Treat every app container as replaceable. Put durable state in Postgres / Redis / S3, wait on `GET
-  /_/ready`, give SIGTERM time to release leases, and leave `images.proxy` unset until you need TLS
-  or `--scale app=N`.
-</Callout>
-
-## Quick start
-
-<Steps>
-
-<Step>
-### Derive compose
-
-```bash
-oke docker
-```
-
-Writes `Dockerfile` + production-grade **`docker-compose.yml`** under `docker/`
-(readiness HEALTHCHECK on `/_/ready`, deploy policy, resource limits).
-Default host budget is **4 CPU / 8 GiB** — override with `--cpus` / `--memory`.
-
-Other layouts when you ask for them:
-
-| Flag        | Output                                                    |
-| ----------- | --------------------------------------------------------- |
-| _(default)_ | `docker-compose.yml`                                      |
-| `--split`   | `compose.yml` + `compose.<role>.yml` + `compose.prod.yml` |
-| `--stack`   | `docker-stack.yml` for Swarm (`docker stack deploy -c`)   |
-
-Without a proxy, the app still publishes port `6530`.
-
-</Step>
-
-<Step>
-### Share backing services
-
-Pin `dev`/`prod` drivers to shared stores (create-oke templates already do —
-same protocols locally via `oke dev` and in production):
-
-| Concern                       | Driver                       | Shared backend                                 |
-| ----------------------------- | ---------------------------- | ---------------------------------------------- |
-| SQL / durable journal / clock | `postgres`                   | Postgres (optionally via PgDog)                |
-| Gate rate counters            | `redis` (`drivers.store.kv`) | Redis / Valkey / Dragonfly (`images.store.kv`) |
-| Files                         | `s3`                         | S3-compatible object store                     |
-| Signal                        | see known limits below       | —                                              |
-
-<Callout>
-  The monorepo `examples/keel` app is the work-management Compose fixture — `bun run dev:keel`, then
-  `oke db seed` (Harbor GA story + ~500 tasks). Wipe with `bun run dev:keel:reset` (stops leftover
-  ports, fresh `.env.local`).
-</Callout>
-
-</Step>
-
-<Step>
-### Bring the stack up
-
-```bash
-cd docker
-docker compose -f docker-compose.yml up -d
-```
-
-Add `-f docker-compose.override.yml` if you keep local tweaks (oke never writes
-that file). With `--split`, pass every `-f` file `oke docker` prints.
-
-</Step>
-
-</Steps>
-
-## PgDog pooling
-
-Bun.SQL defaults to **10** connections per process — fine for one instance.
-Scale out and `N × pool` can exceed Postgres `max_connections`.
-
-When both `store.sql` and `pgdog` are pinned (templates' `dev`/`prod` default),
-`DATABASE_URL` points at PgDog `:6432` — transaction pooling, wire-transparent.
-Configs: `docker/pgdog/pgdog.toml` + `docker/pgdog/users.toml`.
-
-**Why PgDog.** Transaction pooling fixes the connection math. Naive poolers can
-leak session state (`SET`, RLS vars, `LISTEN`/`NOTIFY`) across clients; PgDog
-re-applies those under transaction mode.
-
-Read-replica routing (`BEGIN READ ONLY` → replica) is documented readiness —
-not configured in the generated stack yet.
-
-## Redis-protocol images (Redis · Valkey · Dragonfly)
-
-`images["store.kv"]` defaults to Redis (most mature). Pin Valkey or Dragonfly
-the same way — driver id stays `redis`, same `REDIS_URL`. Image table + one-line
-licenses: [Store · KV](/docs/elements/store#kv).
-
-## Readiness and liveness
-
-| Endpoint       | Role                                                        | On plain compose                                     |
-| -------------- | ----------------------------------------------------------- | ---------------------------------------------------- |
-| `GET /_/ready` | Kernel readiness (`booting` → `orphan_scan` → `ready`)      | HEALTHCHECK in `docker-compose.yml`; LBs should wait |
-| `GET /health`  | App liveness (create-oke ships one) — cheap “process alive” | External monitors only — not orphan-scan aware       |
-
-`/_/ready` returns `200 { ready: true }` only after boot and the durable orphan
-scan finish. While booting or scanning it returns
-`503 { ready: false, reason: "booting" | "orphan_scan" }`.
-
-**Consequence:** orphan scan delays “healthy” (and traffic) on purpose so a
-new replica is not hit mid-takeover.
-
-## Graceful shutdown
-
-On `SIGTERM` / `SIGINT`, `installGracefulShutdown` (wired by `oke dev`’s app
-runner; call it next to `createBunRuntime().serve` in custom entries):
-
-1. Stops accepting new connections
-2. Releases **Clock** cron leases and **Journal** run leases held by this instance
-3. Closes element runtimes and exits
-
-Signal message leases have no proactive release today — survivors reclaim after
-the visibility TTL (default 30s). Generated compose sets `stop_grace_period: 30s`
-so the release path can finish (≥ typical Clock / Journal / Signal lease TTL).
-
-## Reverse proxy
-
-Omit `images.proxy` until you need HTTPS or horizontal scale without fighting a
-host port bind. Then pick one:
-
-| Choice                          | Best for                                  | How routing works                                                  |
-| ------------------------------- | ----------------------------------------- | ------------------------------------------------------------------ |
-| **Caddy** (`caddy:2-alpine`)    | Single instance, simplest automatic HTTPS | Generated `Caddyfile` → `reverse_proxy app:6530`                   |
-| **Traefik** (`traefik:v3.7`)    | `docker compose up --scale app=N`         | Docker labels on `app`; replicas auto-discovered and load-balanced |
-| **nginx** (`nginx:1.31-alpine`) | Static HTTP edge; TLS elsewhere           | Generated `nginx.conf` → `proxy_pass` to `app:6530` on `:80`       |
-
-```typescript title="oke.config.ts"
-images: {
-  // …
-  proxy: "caddy:2-alpine", // or "traefik:v3.7" / "nginx:1.31-alpine"
-},
-```
-
-`create-oke` asks **Add a reverse proxy…?** (or `--proxy caddy|traefik|nginx|none`).
-
-```bash title=".env.local"
-OKE_PROXY_HOST=app.example.com
-OKE_PROXY_ACME_EMAIL=admin@example.com
-```
-
-Re-run `oke docker`. Edge publishes `80`/`443`; `app` stays internal.
-Set `allowedHosts` to your public hostname ([Security](/docs/reference/security)).
-
-Traefik never mounts raw `docker.sock` — only a filtered
-`tecnativa/docker-socket-proxy` on the internal network. Full custom-domain,
-Let's Encrypt, and socket-proxy rationale → [Reverse proxy](/docs/deployment/reverse-proxy).
-
-## Known multi-instance limits
-
-| Surface                                  | Multi-instance today                                                                                       |
-| ---------------------------------------- | ---------------------------------------------------------------------------------------------------------- |
-| Clock (`postgres` / shared `file`)       | Shared leader election                                                                                     |
-| Journal (`postgres` / shared `file`)     | Shared durable runs + orphan resume                                                                        |
-| Gate rates (`drivers.store.kv: redis`)   | Shared counters                                                                                            |
-| Store SQL / KV redis / files `s3`        | Shared                                                                                                     |
-| Store files `fs`                         | **Per-instance filesystem** — boot warns; use `s3` when scaled                                             |
-| Signal `redis`                           | Emit relays to Redis; **consume / `live` / `drain` are process-local outbox** until Streams consume ships  |
-| Channel suppression / consent / receipts | **Default stores are process-local** — opt-out on replica A is invisible to B until a durable driver ships |
-
-## Troubleshooting
-
-<Accordions>
-<Accordion title="compose up --scale app=N fails with port already allocated">
-
-You still have `6530:6530` on `app`. Confirm `images.proxy` is set and
-re-derived so the host bind was omitted.
-
-</Accordion>
-<Accordion title="New replica gets traffic before orphan scan finishes">
-
-Confirm the healthcheck hits `/_/ready` (default `oke docker` output). Without
-it, compose treats “container started” as ready. Pass `--no-prod` only when you
-intentionally want a bare derive.
-
-</Accordion>
-<Accordion title="Rate limits look twice as high after scaling to 2">
-
-`drivers.store.kv` must be `redis` with `REDIS_URL` set. A missing URL **fails
-boot** (no silent memory fallback). Declaring `memory` for local is fine;
-`dev`/`prod` should stay on redis.
-
-</Accordion>
-<Accordion title="Files uploaded on instance A are missing on B">
-
-`drivers.store.files: "fs"` is single-host. Switch `dev`/`prod` to `s3`
-(create-oke templates already do).
-
-</Accordion>
-<Accordion title="Host header rejected (403)">
-
-Serve validates `Host`. Add your public hostname to `allowedHosts`
-([Security](/docs/reference/security)).
-
-</Accordion>
-</Accordions>
-
-## Learn more
-
-- [Deployment](/docs/deployment) — choose compose, Swarm, or Kubernetes
-- [Reverse proxy](/docs/deployment/reverse-proxy) — Caddy / Traefik / nginx in full
-- [Docker Swarm](/docs/deployment/docker-swarm) — `docker stack deploy`
-- [Kubernetes](/docs/deployment/kubernetes) — Deployment, probes, Ingress
-- [CLI](/docs/reference/cli) — `oke docker`, layouts, budget flags
-- [Store](/docs/elements/store) — PgDog and facets
-- [Security](/docs/reference/security) — `allowedHosts`
-
-## Next
-
-<Cards>
-  <Card title="Deployment" href="/docs/deployment" />
-  <Card title="Reverse proxy" href="/docs/deployment/reverse-proxy" />
-  <Card title="Docker Swarm" href="/docs/deployment/docker-swarm" />
-</Cards>

package/site/content/docs/deployment/index.mdx

@@ -1,83 +0,0 @@
----
-title: Deployment
-description: Choose plain docker compose, Docker Swarm, or Kubernetes — then follow that path's complete page for PgDog, probes, graceful shutdown, and TLS.
-icon: Server
-source: README.md
----
-
-OKE apps are process-stateless when shared drivers back Store, Clock, Journal,
-and Gate. Pick an orchestrator (or none) first; each path page below is
-self-contained after you choose.
-
-<Callout title="The one rule">
-  Decide the deploy shape here, then open **one** path page and follow it end to end. Do not mix
-  recipes across pages — Docker proxy compose ≠ Kubernetes Ingress.
-</Callout>
-
-## Which path?
-
-| Path                                          | Best for                                     | Trade-off                                            |
-| --------------------------------------------- | -------------------------------------------- | ---------------------------------------------------- |
-| [Docker](/docs/deployment/docker) (compose)   | Simplest — single or few instances           | You run scale / restart / TLS yourself (or opt in)   |
-| [Docker Swarm](/docs/deployment/docker-swarm) | Built-in orchestration, lower learning curve | Smaller ecosystem than Kubernetes; mesh ≠ certs      |
-| [Kubernetes](/docs/deployment/kubernetes)     | Full orchestration, largest ecosystem        | Highest operational surface (Ingress, probes, RBAC…) |
-
-**Consequence:** start with plain compose until you need Swarm's service mesh /
-rolling updates or Kubernetes' cluster ecosystem. Same multi-instance contract
-on every path — shared Postgres/Redis/S3, not sticky pod identity.
-
-## Capabilities (every path)
-
-These already ship. Each path page explains them in full in that page's words:
-
-| Capability                        | What it guarantees                                                                      | Deep dive                                        |
-| --------------------------------- | --------------------------------------------------------------------------------------- | ------------------------------------------------ |
-| **PgDog pooling**                 | `dev`/`prod` SQL goes through transaction pooler (`DATABASE_URL` → `:6432`) when pinned | Path pages · [Store](/docs/elements/store)       |
-| **Graceful SIGTERM**              | `installGracefulShutdown` releases Clock + Journal leases, then drains                  | Path pages                                       |
-| **Readiness vs liveness**         | `GET /_/ready` (kernel) vs app `GET /health`                                            | Path pages                                       |
-| **Horizontal proof**              | Two-process integration test against live Postgres + Redis                              | Changelog / CI (`OKE_TEST_POSTGRES_URL` + Redis) |
-| **Reverse proxy (compose/Swarm)** | Opt-in Caddy, Traefik, or nginx (`images.proxy`)                                        | [Reverse proxy](/docs/deployment/reverse-proxy)  |
-| **Ingress (Kubernetes)**          | Cluster-native Ingress / Gateway API                                                    | [Kubernetes](/docs/deployment/kubernetes)        |
-
-Honesty notes (Signal consume / Channel suppression still process-local) live
-on each path page — not papered over here.
-
-## Pick a path
-
-<Cards>
-  <Card
-    title="Docker"
-    description="Plain compose — simplest single or few-instance deploy."
-    href="/docs/deployment/docker"
-  />
-  <Card
-    title="Docker Swarm"
-    description="stack deploy on the generated compose layers."
-    href="/docs/deployment/docker-swarm"
-  />
-  <Card
-    title="Kubernetes"
-    description="Deployment, probes, shared drivers, Ingress."
-    href="/docs/deployment/kubernetes"
-  />
-  <Card
-    title="Reverse proxy"
-    description="Caddy / Traefik / nginx — TLS, domains, socket-proxy why."
-    href="/docs/deployment/reverse-proxy"
-  />
-</Cards>
-
-## Learn more
-
-- [Installation](/docs/get-started/installation) — scaffold and `oke dev`
-- [CLI](/docs/reference/cli) — `oke docker --prod`, `oke start`
-- [Configuration](/docs/reference/configuration) — `images` and drivers
-- [Store](/docs/elements/store) — PgDog and facets
-
-## Next
-
-<Cards>
-  <Card title="Docker" href="/docs/deployment/docker" />
-  <Card title="Docker Swarm" href="/docs/deployment/docker-swarm" />
-  <Card title="Kubernetes" href="/docs/deployment/kubernetes" />
-</Cards>