okengine 0.19.8 → 0.20.0

package/AGENTS.md

@@ -84,7 +84,7 @@ After changing `src/kernel/`, `src/client/`, `src/compiler/`, `src/validation/`,
 Published packages:
 
 - `okengine` — framework. Subpath exports: `.`, `./client`, `./test`, `./config`, `./auth`, `./plugins`, `./drivers/*`. `"sideEffects": false`. CLI binary: `oke`.
-- `create-oke` — scaffold CLI (`bunx create-oke@latest <name>`). Lives in `packages/create-oke` and ships Notes starters from `packages/create-oke/templates/{standard,advanced}`.
+- `create-oke` — scaffold CLI (`bunx create-oke@latest <name>`). Lives in `packages/create-oke` and ships starters from `packages/create-oke/templates/{blank,shorter}`.
 
 Engine: Bun `>=1.4.2`.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "okengine",
-  "version": "0.19.8",
+  "version": "0.20.0",
   "description": "One law. Eight elements. One contract. The backend model stays small; operational surfaces are derived from it instead of maintained separately.",
   "license": "MIT",
   "repository": {

package/site/content/docs/client/auth.mdx

@@ -171,8 +171,7 @@ auth.bind(api);
 | `Forbidden`    | 403  | Wrong scopes / CSRF — read `error.data.reason` |
 | `RateLimited`  | 429  | Wait `retryAfterMs`                            |
 
-Also see [CORS](/docs/plugins/cors) and [CSRF](/docs/plugins/csrf). Advanced create-oke starter
-demos cookie + passkey + `<Can>`.
+Also see [CORS](/docs/plugins/cors) and [CSRF](/docs/plugins/csrf).
 
 ## Troubleshooting
 

package/site/content/docs/client/calling.mdx

@@ -81,11 +81,11 @@ export const publicApiUrl = vault.config("PUBLIC_API_URL", {
 });
 ```
 
-| Runtime                                    | Base URL for `createClient`                                     |
-| ------------------------------------------ | --------------------------------------------------------------- |
-| Browser / Bun (create-oke web)             | `vault.env("PUBLIC_API_URL") ?? ""` — empty = same-origin proxy |
-| Node / worker / CLI                        | `vault.env.required("PUBLIC_API_URL")`                          |
-| Separate storefront after `oke client add` | Same `vault.env("PUBLIC_API_URL") ?? ""`                        |
+| Runtime                                    | Base URL for `createClient`                               |
+| ------------------------------------------ | --------------------------------------------------------- |
+| Browser / Bun                              | `vault.env("PUBLIC_API_URL") ?? ""` — empty = same origin |
+| Node / worker / CLI                        | `vault.env.required("PUBLIC_API_URL")`                    |
+| Separate storefront after `oke client add` | Same `vault.env("PUBLIC_API_URL") ?? ""`                  |
 
 Set `PUBLIC_API_URL` via environment or `oke vault set`. Prefer `vault.env` over raw
 `process.env` — same helpers as the rest of the measure. See
@@ -362,8 +362,8 @@ const api = createClient(import.meta.env.PUBLIC_API_URL ?? "", { $routes: routes
 
 Ambient `.d.ts` types `in` / `out` / live / stream stamps. The routes module supplies wire REST.
 
-create-oke starters ship `web/`: Vite proxies Flow paths plus `/auth` and `/_oke` to the app.
-Leave `PUBLIC_API_URL` unset in local web so `createClient("")` stays same-origin.
+Point `createClient` at your app origin (`PUBLIC_API_URL`), or leave it empty when the
+browser page is same-origin with the API.
 
 CLI details: [CLI Reference](/docs/reference/cli).
 
@@ -387,7 +387,7 @@ Budget: the `./client` export stays under the measured client-runtime cap (hard
 <Accordions>
 
 <Accordion title="api.bookings.get is not a function / type error">
-  Confirm the Flow is `export`ed from a generated unit (`import "@/flows/generated"` then
+  Confirm the Flow is `export`ed from a generated unit (`import "@/flows"` then
   `oke({ name })`), or from a module you still `.adopt({ bookings })`.
 
 Type `createClient` with that `App` (or ambient `Register` after `oke-client.d.ts` regenerates).

package/site/content/docs/client/index.mdx

@@ -27,7 +27,7 @@ the envelope.
 
 ```typescript title="src/app.ts"
 import "@/core";
-import "@/flows/generated";
+import "@/flows";
 import { oke } from "okengine/http";
 
 export const app = oke({ name: "commerce" });
@@ -46,7 +46,7 @@ import { createClient } from "okengine/client";
 import { vault } from "okengine/vault";
 import { app } from "../../src/app";
 
-// Base URL via vault.env (empty = same-origin proxy in create-oke web)
+// Base URL via vault.env (empty = same origin as the page)
 const api = createClient(app, vault.env("PUBLIC_API_URL") ?? "");
 const { data, error } = await api.bookings.get({ id: "bkg_7f3a" });
 
@@ -128,8 +128,8 @@ const api = createClient(vault.env("PUBLIC_API_URL") ?? "");
 ```
 
 Declare the origin on the server with [Vault · Config](/docs/elements/vault/config)
-(`PUBLIC_API_URL`), then set it via env or `oke vault set`. Leave it unset in local web
-dev so `createClient("")` stays same-origin behind the Vite proxy.
+(`PUBLIC_API_URL`), then set it via env or `oke vault set`. Leave it unset in local frontend
+dev so `createClient("")` stays same-origin behind your proxy.
 
 </Tab>
 

package/site/content/docs/client/react.mdx

@@ -221,6 +221,11 @@ Prefer [`createAuthClient`](/docs/client/auth) for cookie/Bearer sessions and me
   Without a token, status becomes `"unauthenticated"`.
 </Accordion>
 
+<Accordion title="Vite SPA is a blank page">
+  The console shows `node:async_hooks` / `AsyncLocalStorage` from `okengine/client-react`. Upgrade
+  okengine — `Can` / `useLiveQuery` must not import the server realtime binder.
+</Accordion>
+
 <Accordion title="useLiveQuery never connects">
   Pass `live: { method, path }` from `app.$routes` for the resource’s `/live` route. Set
   `enabled: true` (or omit). See [Live](/docs/client/live) for exposure and resume errors.

package/site/content/docs/elements/channel/email.mdx

@@ -6,14 +6,14 @@ source: "docs/spec/unified-theory.md"
 ---
 
 Email (`channel.email`) is the default Channel medium. Declare a binder with a From address,
-register templates, put bodies in the catalog, and send with `fx.send`.
+put `{{field}}` bodies on `.template({ catalog })`, and send with `fx.send`.
 
 For developers who need local catchers and production HTTP MTAs — same `fx.send` path, swap the
 driver.
 
 <Callout title="The one rule">
-  Use `channel.email({ from }).template(name, { schema, locales })` — never
-  `channel.email("name", { subject, body })`. Subject and body live in the catalog.
+  Use `channel.email({ from }).template(name, { schema, locales, catalog })`. Subject and body
+  live on the template — not on `oke()`.
 </Callout>
 
 ## Smallest Example
@@ -33,32 +33,20 @@ export const passwordReset = mail.template("auth.resetPassword", {
   description: "Password reset link",
   locales: ["en"],
   schema: z.object({ resetLink: z.string().url() }),
+  catalog: {
+    en: {
+      subject: "Reset your password",
+      text: "Open {{resetLink}} to choose a new password.",
+      html: '<p><a href="{{resetLink}}">Reset your password</a></p>',
+    },
+  },
 });
 ```
 
 </Step>
 
 <Step>
-### Catalog + send
-
-```typescript title="src/app.ts"
-import { oke } from "okengine";
-
-oke({
-  name: "app",
-  channel: {
-    catalog: {
-      "auth.resetPassword": {
-        en: {
-          subject: "Reset your password",
-          text: "Open {{resetLink}} to choose a new password.",
-          html: '<p><a href="{{resetLink}}">Reset your password</a></p>',
-        },
-      },
-    },
-  },
-});
-```
+### Send from a Flow
 
 ```typescript title="src/flows/auth/reset.ts"
 import { on, flow, http } from "okengine";
@@ -118,13 +106,13 @@ Per-locale `subject` / `text` / `html` with `{{field}}` interpolation from `data
 
 ```typescript
 catalog: {
-  "auth.resetPassword": {
-    en: { subject: "Reset", text: "{{resetLink}}", html: "<a href=\"{{resetLink}}\">Reset</a>" },
-    ar: { subject: "إعادة التعيين", text: "{{resetLink}}" },
-  },
+  en: { subject: "Reset", text: "{{resetLink}}", html: "<a href=\"{{resetLink}}\">Reset</a>" },
+  ar: { subject: "إعادة التعيين", text: "{{resetLink}}" },
 }
 ```
 
+Put that object on `.template({ catalog })`. Do not nest the template name again.
+
 </Tab>
 
 <Tab value="Failover">
@@ -146,8 +134,8 @@ Receipt status `fallback` means an earlier attempt failed and a later one succee
 
 <Tab value="Plugin catalog">
 
-Official plugins contribute catalogs with `.channelCatalog(…)` (e.g. OTP, magic link). App
-`channel.catalog` merges with plugin contributions at boot.
+Official plugins put copy on `.template({ catalog })` (OTP, magic link, two-factor). App
+`oke({ channel.catalog })` and plugin `.channelCatalog(…)` overlay those bodies at boot.
 
 </Tab>
 
@@ -164,11 +152,12 @@ Official plugins contribute catalogs with `.channelCatalog(…)` (e.g. OTP, magi
 
 ### `.template(name, options?)`
 
-| Option        | Type       | Meaning                     |
-| ------------- | ---------- | --------------------------- |
-| `description` | `string`   | Console label               |
-| `locales`     | `string[]` | Declared locales            |
-| `schema`      | Schema     | Payload contract for `data` |
+| Option        | Type       | Meaning                                |
+| ------------- | ---------- | -------------------------------------- |
+| `description` | `string`   | Console label                          |
+| `locales`     | `string[]` | Declared locales                       |
+| `schema`      | Schema     | Payload contract for `data`            |
+| `catalog`     | object     | Per-locale `subject` / `text` / `html` |
 
 Default From when neither binder nor template sets one: `"oke@localhost.test"`.
 
@@ -229,8 +218,8 @@ Channel catalogs are **not** ICU — do not use `fx.t` for email bodies ([i18n](
 </Accordion>
 
 <Accordion title="Message in Mailpit has JSON body / template name as subject">
-  No catalog entry for that template + locale. Add `channel.catalog` (or a plugin catalog) with
-  `subject` / `text` / `html`.
+  No catalog entry for that template + locale. Add `catalog` on `.template(…)` (or overlay with
+  `oke({channel.catalog})` / plugin `.channelCatalog`) with `subject` / `text` / `html`.
 </Accordion>
 
 <Accordion title="suppressed/opted-out or prior-bounce — no provider call">

package/site/content/docs/elements/channel/index.mdx

@@ -6,16 +6,16 @@ source: "docs/spec/unified-theory.md"
 ---
 
 Channel is how your backend **reaches a person** — the order-confirmation email, the SMS
-sign-in code, a WhatsApp notice, or a device push. You declare a template on a medium, fill a
-`{{field}}` body catalog, and send from a Flow with `fx.send`.
+sign-in code, a WhatsApp notice, or a device push. You declare a template on a medium with
+per-locale `{{field}}` bodies, then send from a Flow with `fx.send`.
 
 For developers wiring Mailpit locally and Resend / Taqnyat / FCM in production — templates and
 drivers first, never vendor SDKs inside `do`.
 
 <Callout title="The one rule">
-  Declare a template (`channel.email(…).template(…)`), then `fx.send(template, { to, data })`.
-  Bodies live in the catalog (`subject` / `text` / `html`), not on the declare call. Consent and
-  prior bounces suppress before any driver runs.
+  Declare a template (`channel.email(…).template({ catalog })`), then `fx.send(template, { to, data })`.
+  Bodies live on the declare (`subject` / `text` / `html` per locale). Consent and prior bounces
+  suppress before any driver runs.
 </Callout>
 
 <ChannelPhysics />
@@ -27,18 +27,28 @@ drivers first, never vendor SDKs inside `do`.
 <Step>
 ### Declare an email template
 
-```typescript title="src/core/channel.ts"
+```typescript title="src/core/email.ts"
 import { channel } from "okengine";
 import { z } from "zod";
 
-const mail = channel.email({ from: "Notes <notes@localhost>" });
+const mail = channel.email({ from: "Shorter <shorter@localhost>" });
 
-export const noteCreatedMail = mail.template("note-created", {
+export const linkCreatedMail = mail.template("link-created", {
+  description: "Short URL delivered to the demo inbox",
   locales: ["en"],
   schema: z.object({
     id: z.string(),
-    title: z.string(),
+    code: z.string(),
+    url: z.string(),
+    shortUrl: z.string(),
   }),
+  catalog: {
+    en: {
+      subject: "Short link {{code}}",
+      text: "{{shortUrl}} → {{url}}",
+      html: '<p><a href="{{shortUrl}}">{{code}}</a> → {{url}}</p>',
+    },
+  },
 });
 ```
 
@@ -50,26 +60,42 @@ Import this module before `oke()` so auto-registry adopts the template (or pass
 <Step>
 ### Send from a Flow
 
-```typescript title="src/flows/notes/on-created.ts"
-import { on, flow } from "okengine";
-import { noteCreatedMail } from "@/core/channel";
-import { noteCreated } from "./signals";
+```typescript title="src/flows/links/signals.ts"
+import { on, flow, signal } from "okengine";
+import { z } from "zod";
+import { linkCreatedMail } from "@/core";
+
+export const linkCreated = signal.once("link-created", {
+  retries: 3,
+  deadLetter: true,
+  schema: z.object({
+    id: z.string(),
+    code: z.string(),
+    url: z.string(),
+    shortUrl: z.string(),
+  }),
+});
 
 export const onCreated = on(
-  noteCreated,
-  flow("notes.onCreated", {
+  linkCreated,
+  flow("links.onCreated", {
     do: async (payload, fx) => {
-      await fx.send(noteCreatedMail, {
+      await fx.send(linkCreatedMail, {
         to: "you@localhost",
-        data: { id: payload.id, title: payload.title },
+        data: {
+          id: payload.id,
+          code: payload.code,
+          url: payload.url,
+          shortUrl: payload.shortUrl,
+        },
       });
     },
   }),
 );
 ```
 
-The compiler stamps `sends: ["note-created"]` on the Flow’s effects (template name — not
-`email:note-created`).
+The compiler stamps `sends: ["link-created"]` on the Flow’s effects (template name — not
+`email:link-created`). Declaration and subscriber share `signals.ts`.
 
 </Step>
 
@@ -77,8 +103,8 @@ The compiler stamps `sends: ["note-created"]` on the Flow’s effects (template
 ### See it locally
 
 With `drivers.channel.email.dev: "smtp"` and Mailpit pinned, open the Mailpit UI
-(`MAILPIT_UI_URL`). Missing catalog bodies fall back to `subject: note-created` and
-`text: JSON.stringify(data)`.
+(`MAILPIT_UI_URL`). Subject and HTML come from the template `catalog`. Omit `catalog` and the
+runtime falls back to `subject: link-created` and `text: JSON.stringify(data)`.
 
 </Step>
 
@@ -95,9 +121,14 @@ From a bare send to catalog bodies, locale, and same-medium failover:
 Template handle + recipient — catalog optional for local smoke tests:
 
 ```typescript
-await fx.send(noteCreatedMail, {
+await fx.send(linkCreatedMail, {
   to: "alice@example.com",
-  data: { id: "n1", title: "Hello" },
+  data: {
+    id: "lnk_1",
+    code: "ok",
+    url: "https://example.com",
+    shortUrl: "http://localhost:6530/ok",
+  },
 });
 ```
 
@@ -105,23 +136,22 @@ await fx.send(noteCreatedMail, {
 
 <Tab value="Catalog">
 
-Bodies are `{{field}}` strings per locale — not ICU, not React. Pass them on boot or via a
-plugin `.channelCatalog(…)`:
-
-```typescript title="src/app.ts"
-import { oke } from "okengine";
-
-export const app = oke({
-  name: "notes",
-  channel: {
-    catalog: {
-      "note-created": {
-        en: {
-          subject: "Note created",
-          text: "Your note {{title}} ({{id}}) is ready.",
-          html: "<p>Your note <strong>{{title}}</strong> is ready.</p>",
-        },
-      },
+Bodies are `{{field}}` strings per locale — not ICU, not React. Put them on the template.
+`oke({ channel.catalog })` and plugin `.channelCatalog(…)` are overlays (later locale wins):
+
+```typescript title="src/core/email.ts"
+export const linkCreatedMail = mail.template("link-created", {
+  locales: ["en"],
+  schema: z.object({
+    code: z.string(),
+    url: z.string(),
+    shortUrl: z.string(),
+  }),
+  catalog: {
+    en: {
+      subject: "Short link {{code}}",
+      text: "{{shortUrl}} → {{url}}",
+      html: '<p><a href="{{shortUrl}}">{{code}}</a> → {{url}}</p>',
     },
   },
 });
@@ -136,9 +166,14 @@ Precedence: explicit `locale` → `profileLocale` → `Accept-Language` →
 `fx.locale`.
 
 ```typescript
-await fx.send(noteCreatedMail, {
+await fx.send(linkCreatedMail, {
   to: "alice@example.com",
-  data: { id: "n1", title: "مرحبا" },
+  data: {
+    id: "lnk_1",
+    code: "ok",
+    url: "https://example.com",
+    shortUrl: "http://localhost:6530/ok",
+  },
   locale: "ar",
 });
 ```
@@ -154,9 +189,14 @@ Order same-medium drivers for failover. Provider / 5xx errors advance; permanent
 (400, invalid address) do **not**:
 
 ```typescript
-await fx.send(noteCreatedMail, {
+await fx.send(linkCreatedMail, {
   to: "alice@example.com",
-  data: { id: "n1", title: "Hello" },
+  data: {
+    id: "lnk_1",
+    code: "ok",
+    url: "https://example.com",
+    shortUrl: "http://localhost:6530/ok",
+  },
   via: ["smtp", "resend"],
 });
 ```
@@ -193,12 +233,14 @@ succeeded — every attempt is kept on the receipt.
 | `description` | `string`   | name      | Console / docs label                                |
 | `locales`     | `string[]` | —         | Declared locale tags for the template               |
 | `schema`      | Schema     | —         | Payload shape (Zod / Standard Schema)               |
+| `catalog`     | object     | —         | Per-locale `subject` / `text` / `html`              |
 | `from`        | `string`   | binder’s  | Override sender on agnostic `channel.template` only |
 | `medium`      | medium     | `"email"` | Only on `channel.template()`                        |
 
 Empty name throws `TypeError: channel.template: name is required`.
 
-There is **no** `subject` / `body` / `html` on declare — those belong in the catalog.
+`oke({ channel.catalog })` overlays bodies after template catalogs (tests / plugin copy
+overrides). Manifest stays free of copy.
 
 ## `fx` surface
 
@@ -295,7 +337,7 @@ Env knobs: [Environment variables](/docs/reference/environment-variables). Local
 
 <Accordion title="OKE1004 — UNDECLARED_SEND">
   Cause: `Flow "{flow}" sends "{resource}" without declaring it.` Touch the template handle
-  inside `do` (inference) or list `effects: { sends: ["note-created"] }`.
+  inside `do` (inference) or list `effects: { sends: ["link-created"] }`.
 </Accordion>
 
 <Accordion title="channel: no email transport in driver chain">

package/site/content/docs/elements/channel/push.mdx

@@ -37,6 +37,9 @@ export const orderPush = push.template("order.status", {
     title: z.string(),
     body: z.string(),
   }),
+  catalog: {
+    en: { subject: "{{title}}", text: "{{body}}" },
+  },
 });
 ```
 
@@ -59,11 +62,6 @@ export const app = oke({
         privateKey: process.env.FCM_PRIVATE_KEY,
       }),
     ],
-    catalog: {
-      "order.status": {
-        en: { subject: "{{title}}", text: "{{body}}" },
-      },
-    },
   },
 });
 ```
@@ -128,13 +126,13 @@ Web Push where the subscription is supplied on the runtime path.
 <Tab value="Catalog">
 
 ```typescript
-"order.status": {
+catalog: {
   en: { subject: "{{title}}", text: "{{body}}" },
 }
 ```
 
-`subject` becomes the notification title on FCM; `text` is the body. Extra `data` fields pass
-through as FCM data payload when present.
+Put that on `push.template({ catalog })`. `subject` becomes the notification title on FCM; `text`
+is the body. Extra `data` fields pass through as FCM data payload when present.
 
 </Tab>
 
@@ -163,7 +161,7 @@ Config key `drivers.channel.push` exists for Manifest / tooling ids (`console`
 
 ### `.template(name, options?)`
 
-`description` · `locales` · `schema` — same as other mediums.
+`description` · `locales` · `schema` · `catalog` — same as other mediums.
 
 ## Troubleshooting
 

package/site/content/docs/elements/channel/sms.mdx

@@ -52,6 +52,7 @@ const sms = channel.sms({ sender: "ACME" });
 export const orderShippedSms = sms.template("order.shipped", {
   locales: ["en"],
   schema: z.object({ tracking: z.string() }),
+  catalog: { en: { text: "Shipped — track {{tracking}}" } },
 });
 ```
 
@@ -62,7 +63,7 @@ await fx.send(orderShippedSms, {
 });
 ```
 
-Add a catalog body (`text: "Shipped — track {{tracking}}"`) or accept the JSON fallback.
+Missing `catalog` falls back to `subject: templateName` and `text: JSON.stringify(data)`.
 
 </Step>
 
@@ -102,6 +103,7 @@ Transactional SMS through the same `fx.send` path as email:
 const sms = channel.sms({ from: "ACME" });
 export const alertSms = sms.template("ops.alert", {
   schema: z.object({ message: z.string() }),
+  catalog: { en: { text: "{{message}}" } },
 });
 
 await fx.send(alertSms, { to: phone, data: { message: "Disk 90%" } });
@@ -202,7 +204,7 @@ Same medium options as email: `from` / `sender`.
 
 ### `.template(name, options?)`
 
-`description` · `locales` · `schema` — bodies in the catalog (`text` is typical for SMS).
+`description` · `locales` · `schema` · `catalog` — `text` is typical for SMS.
 
 ## Troubleshooting
 
@@ -229,8 +231,8 @@ Same medium options as email: `from` / `sender`.
 </Accordion>
 
 <Accordion title="channel: otp delivery failed on all channels">
-  Every medium in the failover list failed. Check driver credentials, suppression, and template
-  catalog entries.
+  Every medium in the failover list failed. Check driver credentials, suppression, and `catalog` on
+  each `.template()`.
 </Accordion>
 
 </Accordions>

package/site/content/docs/elements/channel/whatsapp.mdx

@@ -53,6 +53,10 @@ const wa = channel.whatsapp();
 export const bookingReminder = wa.template("booking.reminder", {
   locales: ["en", "ar"],
   schema: z.object({ when: z.string(), place: z.string() }),
+  catalog: {
+    en: { text: "Reminder: {{when}} at {{place}}" },
+    ar: { text: "تذكير: {{when}} — {{place}}" },
+  },
 });
 ```
 
@@ -85,14 +89,12 @@ and SMS.
 Catalog typically supplies `text` (and optional `subject` where the transport uses it):
 
 ```typescript
-oke({
-  channel: {
-    catalog: {
-      "booking.reminder": {
-        en: { text: "Reminder: {{when}} at {{place}}" },
-        ar: { text: "تذكير: {{when}} — {{place}}" },
-      },
-    },
+export const bookingReminder = wa.template("booking.reminder", {
+  locales: ["en", "ar"],
+  schema: z.object({ when: z.string(), place: z.string() }),
+  catalog: {
+    en: { text: "Reminder: {{when}} at {{place}}" },
+    ar: { text: "تذكير: {{when}} — {{place}}" },
   },
 });
 ```
@@ -165,7 +167,7 @@ oke boot: unknown whatsapp channel driver "…"
 
 ### `.template(name, options?)`
 
-`description` · `locales` · `schema` — same as other mediums.
+`description` · `locales` · `schema` · `catalog` — same as other mediums.
 
 ## Troubleshooting
 

package/site/content/docs/elements/clock/index.mdx

@@ -21,32 +21,19 @@ For developers scheduling work on okengine — one handle shape; drivers swap by
 <Steps>
 
 <Step>
-### Declare a named clock
+### Declare and bind in the unit
 
-```typescript title="src/clocks/digest.ts"
-import { clock } from "okengine";
-
-export const digestClock = clock.every("notes.digest", "1d");
-```
-
-</Step>
-
-<Step>
-### Bind a Flow
+```typescript title="src/flows/links/expire.ts"
+import { on, flow, clock } from "okengine/http";
 
-```typescript title="src/flows/notes/digest.ts"
-import { on, flow } from "okengine";
-import { digestClock } from "@/clocks/digest";
-import { db, notes } from "@/schema";
-import { isNull } from "drizzle-orm";
+const expireClock = clock.every("links.expire", "1h");
 
-export const digest = on(
-  digestClock,
-  flow("notes.digest", {
-    plane: "operator",
-    do: async (_, fx) => {
-      const rows = await fx.store(db).select().from(notes).where(isNull(notes.archivedAt));
-      return { active: rows.length, at: new Date(fx.clock.now()).toISOString() };
+export const expire = on(
+  expireClock,
+  flow({
+    do: async (_input, fx) => {
+      const now = fx.clock.now();
+      return { archived: 0, at: new Date(now).toISOString() };
     },
   }),
 );
@@ -57,9 +44,11 @@ export const digest = on(
 <Step>
 ### See it tick
 
-With `oke dev`, the scheduler reconciles `notes.digest` into the Store and leader-elects
+With `oke dev`, the scheduler reconciles `links.expire` into the Store and leader-elects
 before each fire. `do` receives no payload — read time with `fx.clock.now()` (epoch-ms).
-Map to ISO on the wire with `new Date(fx.clock.now()).toISOString()`.
+
+Pass that number into SQL `timestamp` columns as-is — insert, update, and WHERE binds
+coerce to `Date`. For a hand-built ISO reply, use `new Date(fx.clock.now()).toISOString()`.
 
 Under `drivers.clock.test = "frozen"`, advance time in tests instead of waiting a day.