okengine 0.18.5 → 0.19.0

package/src/elements/store.ts

@@ -181,6 +181,56 @@ export {
 } from "./store/files-policy.ts";
 export type { FileKeyWarning } from "./store/files-policy.ts";
 
+export {
+  SearchConfigError,
+  SEARCH_LOW_CORPUS_WARN_N,
+  RRF_DEFAULT_K,
+  LSH_DEFAULT_K,
+  BM25_K1,
+  BM25_B,
+} from "./store/search-errors.ts";
+export { bm25fScore, tokenize, termFrequencies } from "./store/search-bm25.ts";
+export {
+  generateHyperplanes,
+  hyperplaneSeed,
+  lshBucket,
+  lshBucketToSql,
+  lshBucketFromSql,
+  cosineSimilarity,
+  neighborBuckets,
+  serializePlanes,
+  deserializePlanes,
+} from "./store/search-lsh.ts";
+export { fuseRrf, fuseWeighted, fuseLists } from "./store/search-fusion.ts";
+export type { FuseOptions, FuseStrategy, RankedHit } from "./store/search-fusion.ts";
+export { runSqlSearch } from "./store/search-runtime.ts";
+export type {
+  SqlSearchOptions,
+  SqlSearchResult,
+  SearchColumnMeta,
+} from "./store/search-runtime.ts";
+export {
+  searchDdlForTable,
+  ensureHyperplaneInserts,
+  embColumn,
+  lshColumn,
+  OKE_TSV_COL,
+  SEARCH_PG_MIN_MAJOR,
+  parsePgMajor,
+} from "./store/search-ddl.ts";
+export { runSearchBackfill } from "./store/search-backfill.ts";
+export type { SearchBackfillOptions, SearchBackfillResult } from "./store/search-backfill.ts";
+export {
+  searchEmbedFlowName,
+  tablesNeedingSearchEmbed,
+  applySearchEmbedCdc,
+} from "./store/search-embed-flow.ts";
+export { bindSearchEmbedFlows } from "./store/search-bind.ts";
+export type {
+  SearchableOptions,
+  EmbedFieldOptions,
+  ColumnSearchDecl,
+} from "./store/schema-decl.ts";
 export {
   createFilesImagePipeline,
   putImageToBucket,

package/src/full.ts

@@ -12,9 +12,7 @@ export {
   on,
   flow,
   http,
-  every,
   internal,
-  table,
   fail,
   createFx,
   isFlow,
@@ -86,7 +84,11 @@ export {
   signal,
   createSignalRuntime,
   type SignalDecl,
+  type SignalLiveOptions,
+  type SignalNamespace,
   type SignalOptions,
+  type SignalRetention,
+  type SignalSharedOptions,
   type SignalRuntime,
   type DeadLetter,
   type SignalFailureReason,

package/src/http.ts

@@ -18,7 +18,10 @@
 
 export { on, listBindings, resetBindings, type Binding } from "./kernel/on.ts";
 export { flow, isFlow, type FlowDef } from "./kernel/flow.ts";
-export { http, every, internal } from "./kernel/triggers.ts";
+export { call } from "./kernel/call.ts";
+export { http, internal } from "./kernel/triggers.ts";
+export type { BoundaryContract } from "./kernel/boundary-contract.ts";
+export { clock } from "./elements/clock/declare.ts";
 export { gate, GATE_PUBLIC_NAME } from "./elements/gate/declare.ts";
 export { fail, type FlowFailure } from "./kernel/errors.ts";
 export { isFlowFailure } from "./kernel/hooks.ts";

package/src/i18n/catalogs/ar.ts

@@ -32,27 +32,35 @@ export const builtinAr = {
       cause: 'التدفق "{flow}" يستدعي التدفق "{resource}" دون الإعلان عنه.',
       fix: 'أضف "{resource}" إلى effects.calls لهذا التدفق.',
     },
-    "1042": {
+    "1008": {
+      cause: 'التدفق "{flow}" يجلب "{resource}" دون الإعلان عنه.',
+      fix: 'أضف "{resource}" إلى effects.fetches لهذا التدفق.',
+    },
+    "1009": {
+      cause: 'التدفق "{flow}" يضمّن عبر "{resource}" دون الإعلان عنه.',
+      fix: 'أضف "{resource}" إلى effects.embeds لهذا التدفق.',
+    },
+    "1240": {
       cause: 'التدفق "{flow}" يُصدِر الإشارة "{resource}" بلا مشترك.',
       fix: "أضف on({resource}, …) أو عيّن الإشارة '{'optional: true'}'.",
     },
-    "1014": {
+    "1210": {
       cause: 'مؤشر البث "{afterId}" ليس على شريط "{signal}".',
       fix: "أعد الاتصال بدون Last-Event-ID لإعادة تشغيل الشريط المتبقي.",
     },
-    "1015": {
+    "1810": {
       cause: "هذه العملية تحتاج مستأجراً، ولم يُحدَّد مستأجر لهذا الطلب.",
       fix: "استدعِ fx.auth.switchTenant(id) أو أرسل مطالبة tid موقّعة أو رأس المستأجر.",
     },
-    "1016": {
+    "1820": {
       cause: 'المتصل ليس عضواً في المستأجر "{tenant}".',
       fix: "اختر مستأجراً من fx.auth.listTenants() أو أضف المستخدم كعضو.",
     },
-    "1017": {
+    "1830": {
       cause: 'نطاق دور المستأجر "{scope}" ليس نطاقاً تطبيقياً معلناً.',
       fix: "استخدم اسماً من كتالوج البيان لهذا التطبيق (وليس console:*).",
     },
-    "1101": {
+    "1110": {
       cause: "جدول النطاق غير موجود — لم تُطبَّق الترحيلات.",
       fix: "شغّل `oke db migrate` على هذه البيئة.",
     },

package/src/i18n/catalogs/en.ts

@@ -32,27 +32,35 @@ export const builtinEn = {
       cause: 'Flow "{flow}" calls "{resource}" without declaring it.',
       fix: "Add \"{resource}\" to this flow''s effects.calls.",
     },
-    "1042": {
+    "1008": {
+      cause: 'Flow "{flow}" fetches "{resource}" without declaring it.',
+      fix: "Add \"{resource}\" to this flow''s effects.fetches.",
+    },
+    "1009": {
+      cause: 'Flow "{flow}" embeds with "{resource}" without declaring it.',
+      fix: "Add \"{resource}\" to this flow''s effects.embeds.",
+    },
+    "1240": {
       cause: 'Flow "{flow}" emits signal "{resource}" with no subscriber.',
       fix: "Add on({resource}, …) or mark the signal '{'optional: true'}'.",
     },
-    "1014": {
+    "1210": {
       cause: 'Live cursor "{afterId}" is not on the tape for "{signal}".',
       fix: "Reconnect without Last-Event-ID to replay the remaining tape.",
     },
-    "1015": {
+    "1810": {
       cause: "This operation needs a tenant, but none is resolved for this request.",
       fix: "Call fx.auth.switchTenant(id), send a signed tid claim, or pass the tenant header.",
     },
-    "1016": {
+    "1820": {
       cause: 'The caller is not a member of tenant "{tenant}".',
       fix: "Pick a tenant from fx.auth.listTenants() or add the user as a member.",
     },
-    "1017": {
+    "1830": {
       cause: 'Tenant role scope "{scope}" is not a declared application scope.',
       fix: "Use a name from this app's Manifest catalog (never console:*).",
     },
-    "1101": {
+    "1110": {
       cause: "domain table not found — migrations have not been applied.",
       fix: "run `oke db migrate` against this environment.",
     },

package/src/index.ts

@@ -24,7 +24,9 @@ export {
 } from "./kernel/app.ts";
 export { on, type Binding } from "./kernel/on.ts";
 export { flow, isFlow, type FlowDef } from "./kernel/flow.ts";
-export { http, every, internal, table, mcp } from "./kernel/triggers.ts";
+export { call } from "./kernel/call.ts";
+export { http, internal, mcp } from "./kernel/triggers.ts";
+export type { BoundaryContract } from "./kernel/boundary-contract.ts";
 export { registerFlowUnits } from "./kernel/flow-units.ts";
 export { stampFlowName, stampHttpPath } from "./kernel/stamp-http.ts";
 export { fail, type FlowFailure, type FlowErrorValue } from "./kernel/errors.ts";
@@ -82,8 +84,11 @@ export {
   signal,
   createSignalRuntime,
   type SignalDecl,
+  type SignalLiveOptions,
+  type SignalNamespace,
   type SignalOptions,
   type SignalRetention,
+  type SignalSharedOptions,
   type SignalRuntime,
   type DeadLetter,
   type SignalFailureReason,

package/src/kernel/adopt-barrel-fresh.test.ts

@@ -2,9 +2,9 @@
  * Boot-level proof: a `src/flows/<unit>` folder on disk with no adopted
  * flow under that unit — the stale/missing `.adopt()` barrel case.
  *
- * Mirrors `effects-stamping.test.ts`'s OKE1008 shape exactly: opt-in only
+ * Mirrors `effects-stamping.test.ts`'s OKE1020 shape exactly: opt-in only
  * via `rootDir`, `test` warns once (dev-loop stays unbroken),
- * `dev`+compose / `prod` hard-fail (`OKE1009`) — never a silently-incomplete route
+ * `dev`+compose / `prod` hard-fail (`OKE1030`) — never a silently-incomplete route
  * table in a deploy-shaped environment.
  */
 
@@ -46,11 +46,11 @@ describe("assertAdoptBarrelFresh — direct", () => {
     }
   });
 
-  test("stale: unit on disk, zero adopted flows for it — dev+compose hard-fails OKE1009", async () => {
+  test("stale: unit on disk, zero adopted flows for it — dev+compose hard-fails OKE1030", async () => {
     const root = await mkdtemp(join(tmpdir(), "oke-adopt-fresh-"));
     try {
       await makeUnitDir(root, "notes");
-      await expect(assertAdoptBarrelFresh([], "dev", root, true)).rejects.toThrow(/OKE1009/);
+      await expect(assertAdoptBarrelFresh([], "dev", root, true)).rejects.toThrow(/OKE1030/);
     } finally {
       await rm(root, { recursive: true, force: true });
     }
@@ -60,7 +60,7 @@ describe("assertAdoptBarrelFresh — direct", () => {
     const root = await mkdtemp(join(tmpdir(), "oke-adopt-fresh-"));
     try {
       await makeUnitDir(root, "notes");
-      await expect(assertAdoptBarrelFresh([], "prod", root)).rejects.toThrow(/OKE1009/);
+      await expect(assertAdoptBarrelFresh([], "prod", root)).rejects.toThrow(/OKE1030/);
     } finally {
       await rm(root, { recursive: true, force: true });
     }
@@ -78,7 +78,7 @@ describe("assertAdoptBarrelFresh — direct", () => {
 });
 
 describe("boot-level: stale barrel through a real oke() boot", () => {
-  test("dev+compose: real app.boot() hard-fails OKE1009 when a unit folder was never adopted", async () => {
+  test("dev+compose: real app.boot() hard-fails OKE1030 when a unit folder was never adopted", async () => {
     const root = await mkdtemp(join(tmpdir(), "oke-adopt-fresh-"));
     try {
       // "notes" exists on disk but this app only ever adopted "main" —
@@ -109,7 +109,7 @@ describe("boot-level: stale barrel through a real oke() boot", () => {
             },
           },
         }),
-      ).rejects.toThrow(/OKE1009/);
+      ).rejects.toThrow(/OKE1030/);
     } finally {
       await rm(root, { recursive: true, force: true });
     }

package/src/kernel/adopt-routes.ts

@@ -186,6 +186,7 @@ export function runtimeRouteFromFlow(flowDef: AnyFlowDef): RuntimeFlowRoute {
   if (trigger?.kind !== "http") return {};
   const liveName = trigger.liveSignal?.name ?? flowDef.live;
   const gates = trigger.gates.map((g) => (typeof g === "string" ? g : g.name));
+  const streamOnly = flowDef.stream === true && liveName === undefined;
   return {
     method: trigger.method,
     path: trigger.path,
@@ -196,7 +197,14 @@ export function runtimeRouteFromFlow(flowDef: AnyFlowDef): RuntimeFlowRoute {
           matchKey: httpPathParams(trigger.path),
           ...(gates.length > 0 ? { gates } : {}),
         }
-      : {}),
+      : streamOnly
+        ? {
+            stream: true as const,
+            ...(gates.length > 0 ? { gates } : {}),
+          }
+        : gates.length > 0
+          ? { gates }
+          : {}),
   };
 }
 

package/src/kernel/app-auth.ts

@@ -10,6 +10,8 @@ import { auth as authPlugin } from "../auth/plugin.ts";
 import { createAuthHttpBindings, type AuthHttpMaterialization } from "../auth/bindings.ts";
 import { tokenFromCookieHeader } from "../auth/cookies.ts";
 import { setActiveGateAuthContext } from "../auth/method-context.ts";
+import { createPendingTwoFactorStore, createStepUpStore } from "../auth/two-factor-challenge.ts";
+import { createVerificationStore } from "../auth/verification.ts";
 import type { ResolvedGateConfig } from "../elements/gate/config.ts";
 import {
   createAppAuthBinding,
@@ -85,6 +87,9 @@ export function wireGateAuth(options: WireGateAuthOptions): WiredGateAuth {
     passwordPolicy: auth.passwordPolicy,
     password: auth.password,
     breachCheck: auth.breachCheck,
+    pendingTwoFactor: createPendingTwoFactorStore(),
+    stepUp: createStepUpStore(),
+    twoFactorVerifications: createVerificationStore(),
   });
 
   return {

package/src/kernel/app.ts

@@ -17,6 +17,7 @@ import {
   type RoutesFromNamespace,
   type RuntimeRouteMap,
 } from "./adopt-routes.ts";
+import { buildClientDescriptor } from "./client-descriptor.ts";
 import { liveExposureKey, liveGatesKey, liveMatchKeyFromPath } from "./live-http.ts";
 // `./boot.ts` pulls in every element + driver module (vault, store, signal,
 // clock, gate, channel, ai, runs) — a type-only import here keeps that whole
@@ -37,6 +38,7 @@ import {
 import { requirePackageModule } from "../shared/lazy-src.ts";
 import { lazyRequire } from "./lazy-require.ts";
 import type { DurableResult, RunDurableOptions } from "../elements/clock/durable.ts";
+import { applyClockTimezoneDefaults } from "../elements/clock/declare.ts";
 import type { TemplateCatalog } from "../elements/channel/runtime.ts";
 import { parseAcceptLanguage } from "../elements/channel/locale.ts";
 import { runWithLocale } from "../i18n/locale-context.ts";
@@ -62,7 +64,8 @@ import {
   logDevRequest,
   shouldLogDevRequests,
 } from "../runtime/dev-request-log.ts";
-import { asBrowserJsonCodeBlock, httpNavGroups } from "../runtime/json-code-block.ts";
+import { GATE_PUBLIC_NAME } from "../elements/gate/flatten.ts";
+import type { JsonCodeAuth } from "../runtime/json-code-block.ts";
 import { resolveDurationMs } from "./elapsed.ts";
 import { fail, throwOke } from "./errors.ts";
 import { consumeRegisteredFlowUnits, type FlowUnitBag } from "./flow-units.ts";
@@ -131,7 +134,6 @@ import { isPendingHttpPath } from "./http-path-pending.ts";
 import { drainPendingResourceLiveMounts } from "./resource-live.ts";
 import type {
   CdcTrigger,
-  EveryTrigger,
   HttpTrigger,
   InternalTrigger,
   SignalAsTrigger,
@@ -181,6 +183,15 @@ function loadDurable(): {
   return lazyRequire(import.meta.dir, ["clock", "durable"].join("-"));
 }
 
+/**
+ * Browser JSON page helpers — loaded on `app.fetch` only.
+ * A static import pins the traces-language HTML/CSS graph on every Store-only
+ * `oke()` construction.
+ */
+function loadJsonCodeBlock(): typeof import("../runtime/json-code-block.ts") {
+  return lazyRequire(`${import.meta.dir}/../runtime`, ["json", "code", "block"].join("-"));
+}
+
 /** Options for {@link oke}. */
 export interface OkeOptions {
   /** Application name (Manifest `app`). */
@@ -265,6 +276,14 @@ export interface OkeOptions {
   readonly signals?: BootOptions["signals"];
   /** Named clock declarations. */
   readonly clocks?: BootOptions["clocks"];
+  /**
+   * Clock element defaults. `{ timezone: "Asia/Riyadh" }` applies to every
+   * `clock()` / helper that omits `timezone` (explicit per-clock wins).
+   * Prefer this over repeating `timezone` on each declaration.
+   */
+  readonly clock?: {
+    readonly timezone?: string;
+  };
   /** Store facet declarations to register. */
   readonly stores?: BootOptions["stores"];
   /**
@@ -275,8 +294,20 @@ export interface OkeOptions {
    * `store.schema.live(false)`. Default `false` — today's explicit-only
    * behavior, zero change to existing apps. Declaration ergonomics only;
    * never the runtime cost model.
+   *
+   * `{ search: { embed: { model, dims } } }` sets the project default for
+   * field `.embed()` so columns can write bare `.embed()` and inherit;
+   * per-field `{ model?, dims? }` still overrides.
    */
-  readonly store?: { readonly live?: boolean };
+  readonly store?: {
+    readonly live?: boolean;
+    readonly search?: {
+      readonly embed?: {
+        readonly model: { readonly name: string } | string;
+        readonly dims: number;
+      };
+    };
+  };
   /** Channel runtime options. */
   readonly channel?: BootOptions["channel"];
   /** AI runtime options. */
@@ -838,7 +869,12 @@ export function oke(options: OkeOptions): OkeApp {
   const effectiveStores = mergeUnique(options.stores, registrySnapshot.stores);
   const effectiveSecrets = mergeUnique(options.secrets, registrySnapshot.secrets);
   const effectiveSignals = mergeUnique(options.signals, registrySnapshot.signals);
-  const effectiveClocks = mergeUnique(options.clocks, registrySnapshot.clocks);
+  const mergedClocks = mergeUnique(options.clocks, registrySnapshot.clocks);
+  // Apply oke({ clock: { timezone } }) now; leave defaulted clocks intact when
+  // unset so bindClock can still honor defineConfig({ clock: { timezone } }).
+  const effectiveClocks = options.clock?.timezone
+    ? applyClockTimezoneDefaults(mergedClocks, options.clock.timezone)
+    : mergedClocks;
   const effectivePolicies = mergeUnique(options.gate?.policies, registrySnapshot.gates);
   /**
    * Fold registered `vault.env.required` names into the vault boot options so
@@ -954,6 +990,30 @@ export function oke(options: OkeOptions): OkeApp {
     }
   }
 
+  /** Once-per-app: system `_oke_search_embed_*` CDC bindings from Manifest. */
+  let searchEmbedFlowsBound = false;
+  /**
+   * Auto-register hybrid-search embed CDC flows when any `.embed()` column
+   * exists. Lazy-loads search-bind so edge graphs without search stay lean.
+   * Requires an explicit Manifest on `oke({ manifest })` / boot overrides —
+   * does not AoT-extract the project tree (that path is for capability stamping).
+   *
+   * @param manifest - Boot / options Manifest (optional)
+   */
+  async function ensureSearchEmbedFlows(
+    manifest: BootOptions["manifest"] | undefined,
+  ): Promise<void> {
+    if (searchEmbedFlowsBound || !manifest) return;
+    const { tablesNeedingSearchEmbed } = await import("../elements/store/search-embed-flow.ts");
+    if (tablesNeedingSearchEmbed(manifest).length === 0) {
+      searchEmbedFlowsBound = true;
+      return;
+    }
+    const { bindSearchEmbedFlows } = await import("../elements/store/search-bind.ts");
+    bindSearchEmbedFlows(adoptBinding, manifest);
+    searchEmbedFlowsBound = true;
+  }
+
   // Project-wide `store.live` default — drain deferred resource live mounts
   // now that the flag is known. Off flag: pending state is discarded and the
   // behavior is 100% today's explicit-only. On flag: every pending resource
@@ -1206,6 +1266,17 @@ export function oke(options: OkeOptions): OkeApp {
 
     const caps = pluginRegistry.capabilities();
     const pluginNames = new Set(Object.keys(caps));
+
+    // Soft-require csrf when gate.auth.cookies.enabled (cookie sessions need CSRF).
+    if (gateConfig.auth?.cookies.enabled && !pluginNames.has("csrf")) {
+      const msg =
+        "gate.auth.cookies.enabled requires the csrf plugin — .plug(csrf({ allowNoHeader: false })) and cors with credentials when cross-origin";
+      if (bootEnv === "prod") {
+        throw new Error(msg);
+      }
+      console.warn(`[okengine] ${msg}`);
+    }
+
     const authGates = authMaterialization?.authGates ?? [];
     const baseGates = overrides?.gates ?? gateConfig.policies ?? [];
     const elementNeeds = resolveElementNeeds({
@@ -1290,6 +1361,7 @@ export function oke(options: OkeOptions): OkeApp {
       unguardedHttp,
       signals: [...baseSignals, ...pluginSignals],
       clocks: [...baseClocks, ...pluginClocks],
+      clock: overrides?.clock ?? options.clock,
       stores: overrides?.stores ?? effectiveStores,
       channel: {
         ...(baseChannel ?? {}),
@@ -1347,6 +1419,9 @@ export function oke(options: OkeOptions): OkeApp {
         );
       }
     }
+    // Built-in hybrid search — auto-register durable embed CDC flows when the
+    // Manifest declares any `.embed()` column (writer flows stay embed-free).
+    await ensureSearchEmbedFlows(overrides?.manifest ?? options.manifest);
     // otp() provider / app mode capability — fail loud at boot, never silent downgrade.
     if (result.channel) {
       const { assertOtpPluginCapability } = await import("../auth/otp-capability.ts");
@@ -2127,6 +2202,7 @@ export function oke(options: OkeOptions): OkeApp {
       let flowLabel: string | undefined;
       let runLabel: string | undefined;
       let cacheLabel: "hit" | "miss" | "none" | undefined;
+      let authLabel: JsonCodeAuth | undefined;
       const url = new URL(request.url);
       const method = request.method.toUpperCase();
 
@@ -2146,13 +2222,15 @@ export function oke(options: OkeOptions): OkeApp {
             detail: await failureDetailFromResponse(response),
           });
         }
-        return asBrowserJsonCodeBlock(
+        const jcb = loadJsonCodeBlock();
+        return jcb.asBrowserJsonCodeBlock(
           request,
           response,
           options.name,
-          httpNavGroups(adopted, request),
+          jcb.httpNavGroups(adopted, request),
           performance.now() - started,
           cacheLabel ?? "none",
+          authLabel ?? { kind: "none" },
         );
       };
 
@@ -2175,8 +2253,9 @@ export function oke(options: OkeOptions): OkeApp {
       }
 
       if (method === "GET" && url.pathname === "/_oke/client.json") {
+        const descriptor = buildClientDescriptor(routes, flowsByName);
         return respond(
-          new Response(JSON.stringify({ routes }), {
+          new Response(JSON.stringify(descriptor), {
             headers: { "content-type": "application/json" },
           }),
         );
@@ -2207,6 +2286,11 @@ export function oke(options: OkeOptions): OkeApp {
           );
           runLabel = internalResult.runId;
           cacheLabel = internalResult.cache;
+          authLabel = loadJsonCodeBlock().jsonCodeAuthFrom({
+            userId: internalResult.fx.auth.userId,
+            apiKeyId: internalResult.fx.auth.apiKeyId,
+            operatorId: internalResult.fx.operator.id,
+          });
           return respond(await encodeExecuteResult(internalResult));
         }
       }
@@ -2285,6 +2369,12 @@ export function oke(options: OkeOptions): OkeApp {
       });
       runLabel = result.runId;
       cacheLabel = result.cache;
+      authLabel = loadJsonCodeBlock().jsonCodeAuthFrom({
+        userId: result.fx.auth.userId,
+        apiKeyId: result.fx.auth.apiKeyId,
+        operatorId: result.fx.operator.id,
+        publicGate: gateNamesOf(binding.trigger).includes(GATE_PUBLIC_NAME),
+      });
 
       return respond(await encodeExecuteResult(result));
     },
@@ -2305,8 +2395,11 @@ export function oke(options: OkeOptions): OkeApp {
     async dispatchEvery(interval, extras) {
       const results: ExecuteResult[] = [];
       for (const b of adopted) {
-        if (b.trigger.kind === "every" && b.trigger.interval === interval) {
-          results.push(await execute(b.flow, undefined, b.trigger as EveryTrigger, extras));
+        if (
+          (b.trigger.kind === "clock" && b.trigger.name === interval) ||
+          (b.trigger.kind === "every" && b.trigger.interval === interval)
+        ) {
+          results.push(await execute(b.flow, undefined, b.trigger, extras));
         }
       }
       return results;

package/src/kernel/auto-cache.test.ts

@@ -44,9 +44,8 @@ describe("automatic tier-1 cache from effects", () => {
     const db = store.sql("app", { schema: { notes } });
     let lists = 0;
     const list = on(
-      http.get("/notes").public(),
+      http.get("/notes", { out: z.array(NoteOut) }).public(),
       flow("notes.list", {
-        out: z.array(NoteOut),
         effects: { reads: ["sql:notes"] },
         do: () => {
           lists += 1;
@@ -80,9 +79,8 @@ describe("automatic tier-1 cache from effects", () => {
     resetFlowSeq();
     const db = store.sql("app", { schema: { notes } });
     const list = on(
-      http.get("/notes").public(),
+      http.get("/notes", { out: z.array(NoteOut) }).public(),
       flow("notes.list", {
-        out: z.array(NoteOut),
         effects: { reads: ["sql:notes"] },
         do: () => [{ id: "n1", title: "Harbor" }],
       }),
@@ -146,9 +144,8 @@ describe("automatic tier-1 cache from effects", () => {
     const db = store.sql("app", { schema: { notes } });
     let lists = 0;
     const list = on(
-      http.get("/notes").public(),
+      http.get("/notes", { out: z.array(NoteOut) }).public(),
       flow("notes.list", {
-        out: z.array(NoteOut),
         do: async (_input, fx) => {
           lists += 1;
           const rows = await fx.store(db).select().from(notes);
@@ -201,9 +198,8 @@ describe("automatic tier-1 cache from effects", () => {
       }),
     );
     const create = on(
-      http.post("/notes").public(),
+      http.post("/notes", { in: z.object({ title: z.string() }) }).public(),
       flow("notes.create", {
-        in: z.object({ title: z.string() }),
         effects: { writes: ["sql:notes"] },
         do: (input) => ({ id: "n-new", title: input.title }),
       }),
@@ -231,9 +227,8 @@ describe("automatic tier-1 cache from effects", () => {
     const db = store.sql("app", { schema: { notes } });
     let lists = 0;
     const list = on(
-      http.get("/notes").public(),
+      http.get("/notes", { out: z.array(NoteOut) }).public(),
       flow("notes.list", {
-        out: z.array(NoteOut),
         do: async (_input, fx) => {
           lists += 1;
           const rows = await fx.store(db).select().from(notes);
@@ -242,9 +237,8 @@ describe("automatic tier-1 cache from effects", () => {
       }),
     );
     const create = on(
-      http.post("/notes").public(),
+      http.post("/notes", { in: z.object({ title: z.string() }) }).public(),
       flow("notes.create", {
-        in: z.object({ title: z.string() }),
         do: async (input, fx) => {
           const id = `n-${lists + 1}`;
           await fx.store(db).insert(notes).values({ id, title: input.title });

package/src/kernel/auto-registry.test.ts

@@ -33,7 +33,7 @@ describe("oke() auto-registry — stores/secrets/signals/clocks/gates/channel.te
     const dbBefore = store.sql("before-app", { schema: {} });
     const filesBefore = store.files("before-uploads");
     const secretBefore = vault.secret("BEFORE_WEBHOOK_SECRET", { dev: "dev-secret-before" });
-    const signalBefore = signal("before-note-created", { delivery: "once", optional: true });
+    const signalBefore = signal.once("before-note-created", { optional: true });
     const mailBefore = channel.email({ from: "Before <before@localhost>" });
     const templateBefore = mailBefore.template("before-note-created");
 
@@ -71,7 +71,7 @@ describe("oke() auto-registry — stores/secrets/signals/clocks/gates/channel.te
     store.sql("after-app", { schema: {} });
     store.files("after-uploads");
     const secretAfter = vault.secret("AFTER_WEBHOOK_SECRET", { dev: "dev-secret-after" });
-    const signalAfter = signal("after-note-created", { delivery: "once", optional: true });
+    const signalAfter = signal.once("after-note-created", { optional: true });
     const mailAfter = channel.email({ from: "After <after@localhost>" });
     const templateAfter = mailAfter.template("after-note-created");
 
@@ -204,7 +204,7 @@ describe("oke() auto-registry — stores/secrets/signals/clocks/gates/channel.te
   test('registry: "consume" (default) drains stores/secrets/signals/channel.templates — a later app does not inherit them', async () => {
     store.sql("leak-app", { schema: {} });
     vault.secret("LEAK_SECRET", { dev: "dev-leak" });
-    signal("leak-signal", { delivery: "once" });
+    signal.once("leak-signal");
     channel.email().template("leak-template");
 
     const appA = oke({