okengine 0.18.5 → 0.19.0

package/src/cli/registry.ts

@@ -224,7 +224,7 @@ export const OKE_COMMANDS: readonly CliCommand[] = [
   },
   {
     name: "db",
-    summary: "domain schema — push · generate · migrate · seed · studio",
+    summary: "domain schema — push · generate · migrate · seed · studio · search-backfill",
     subcommands: [
       {
         name: "push",
@@ -324,6 +324,26 @@ export const OKE_COMMANDS: readonly CliCommand[] = [
           HELP,
         ],
       },
+      {
+        name: "search-backfill",
+        summary: "Rebuild hybrid-search stats / embeddings (never auto on push)",
+        positionals: "<table>",
+        flags: [
+          {
+            long: "--batch",
+            takesValue: true,
+            valueName: "n",
+            summary: "Rows per page (default 32)",
+          },
+          {
+            long: "--env",
+            takesValue: true,
+            valueName: "name",
+            summary: "Config env (dev|test|prod)",
+          },
+          HELP,
+        ],
+      },
     ],
   },
   {
@@ -544,7 +564,7 @@ export const OKE_COMMANDS: readonly CliCommand[] = [
             long: "--provider",
             takesValue: true,
             valueName: "id",
-            summary: "ollama · openai · anthropic · gemini · lmstudio · openrouter · custom",
+            summary: "openrouter · openai · anthropic · groq · … · lmstudio · custom",
           },
           {
             long: "--chat",
@@ -564,14 +584,6 @@ export const OKE_COMMANDS: readonly CliCommand[] = [
             valueName: "model",
             summary: "Embedding model id",
           },
-          {
-            long: "--pull",
-            summary: "Pull missing Ollama models (default)",
-          },
-          {
-            long: "--no-pull",
-            summary: "Skip ollama pull",
-          },
           {
             long: "--yes",
             short: "-y",

package/src/cli/replay.ts

@@ -48,7 +48,9 @@ export interface ReplayOptions {
  * @param event - Wide event
  */
 export function eventHasIrreversible(event: WideEvent): boolean {
-  return event.effects.some((e) => e.kind === "send" || e.kind === "ask");
+  return event.effects.some(
+    (e) => e.kind === "send" || e.kind === "ask" || e.kind === "embed" || e.kind === "fetch",
+  );
 }
 
 /**

package/src/cli/start.ts

@@ -61,7 +61,7 @@ export async function runStart(options: StartOptions = {}): Promise<number> {
       PORT: port,
       // Signal to boot() where to lazily extract effects from when a flow
       // has no hand-declared `effects` — kernel/boot.ts's mintCapabilities()
-      // reads this (explicit opt-in only). docker/prod hard-fail (OKE1008)
+      // reads this (explicit opt-in only). docker/prod hard-fail (OKE1020)
       // rather than silently open when neither this nor an explicit
       // `manifest` resolves anything — this just gives that resolution a
       // real chance to succeed instead of failing every time.

package/src/cli/tui/keys.ts

@@ -1,9 +1,8 @@
 /**
- * Shared keyboard mapping for Ink `useInput` and pure tests.
- * Parity with legacy `parseDevControlKey` (`? r s q u x`).
+ * Shared keyboard mapping for the `oke` TUI Dev panel (`useInput`).
  */
 
-/** Dev control action from a keypress. */
+/** Dev panel action from a keypress. */
 export type DevControlKey = "?" | "r" | "s" | "q" | "u" | "x";
 
 /**

package/src/client/auth/cookies.ts

@@ -0,0 +1,74 @@
+/**
+ * SSR / request cookie → access token helper for `createClient`.
+ *
+ * @module
+ */
+
+/** Cookie name options (defaults match Gate `oke.session_token`). */
+export interface TokenFromCookiesOptions {
+  /** Cookie name prefix (default `oke`). */
+  readonly prefix?: string;
+  /** Full access cookie name (overrides prefix). */
+  readonly accessCookie?: string;
+}
+
+/** Acceptable cookie sources — no framework dependency. */
+export type CookieSource =
+  | string
+  | Headers
+  | Request
+  | { readonly headers: { get(name: string): string | null } };
+
+/**
+ * Read the Gate access-token cookie from a Cookie header, Headers, or Request.
+ *
+ * @param source - Raw cookie header, Headers, Request, or `{ headers }`
+ * @param opts - Cookie name overrides
+ */
+export function tokenFromRequestCookies(
+  source: CookieSource,
+  opts: TokenFromCookiesOptions = {},
+): string | null {
+  const header = cookieHeaderOf(source);
+  if (!header) return null;
+  const name = opts.accessCookie ?? `${opts.prefix ?? "oke"}.session_token`;
+  const map = parseCookieHeader(header);
+  return map.get(name) ?? null;
+}
+
+function cookieHeaderOf(source: CookieSource): string | null {
+  if (typeof source === "string") return source;
+  if (typeof Request !== "undefined" && source instanceof Request) {
+    return source.headers.get("cookie");
+  }
+  if (typeof Headers !== "undefined" && source instanceof Headers) {
+    return source.get("cookie");
+  }
+  if (
+    source !== null &&
+    typeof source === "object" &&
+    "headers" in source &&
+    source.headers &&
+    typeof source.headers.get === "function"
+  ) {
+    return source.headers.get("cookie");
+  }
+  return null;
+}
+
+function parseCookieHeader(header: string): Map<string, string> {
+  const out = new Map<string, string>();
+  for (const part of header.split(";")) {
+    const idx = part.indexOf("=");
+    if (idx <= 0) continue;
+    const k = part.slice(0, idx).trim();
+    const v = part.slice(idx + 1).trim();
+    if (!k) continue;
+    try {
+      out.set(k, decodeURIComponent(v));
+    } catch {
+      out.set(k, v);
+    }
+  }
+  return out;
+}