okengine 0.2.6 → 0.3.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (681) hide show
  1. package/AGENTS.md +33 -30
  2. package/README.md +74 -340
  3. package/{spec/manifest.v1.schema.json → manifest.v1.schema.json} +40 -9
  4. package/package.json +47 -44
  5. package/site/content/docs/ai/llms-txt.mdx +54 -0
  6. package/site/content/docs/ai/mcp.mdx +123 -0
  7. package/site/content/docs/ai/meta.json +5 -0
  8. package/site/content/docs/ai/skills.mdx +53 -0
  9. package/site/content/docs/console/access.mdx +29 -0
  10. package/site/content/docs/console/ai.mdx +35 -0
  11. package/site/content/docs/console/architecture.mdx +35 -0
  12. package/site/content/docs/console/channels.mdx +37 -0
  13. package/site/content/docs/console/clock.mdx +31 -0
  14. package/site/content/docs/console/flows.mdx +31 -0
  15. package/site/content/docs/console/gates.mdx +35 -0
  16. package/site/content/docs/console/manifest-diff.mdx +34 -0
  17. package/site/content/docs/console/meta.json +23 -0
  18. package/site/content/docs/console/overview.mdx +40 -0
  19. package/site/content/docs/console/plugins.mdx +41 -0
  20. package/site/content/docs/console/privacy.mdx +32 -0
  21. package/site/content/docs/console/runs.mdx +40 -0
  22. package/site/content/docs/console/signals.mdx +31 -0
  23. package/site/content/docs/console/store.mdx +32 -0
  24. package/site/content/docs/console/tenancy.mdx +32 -0
  25. package/site/content/docs/console/traces.mdx +34 -0
  26. package/site/content/docs/console/vault.mdx +37 -0
  27. package/site/content/docs/elements/ai.mdx +180 -0
  28. package/site/content/docs/elements/channel.mdx +167 -0
  29. package/site/content/docs/elements/clock.mdx +182 -0
  30. package/site/content/docs/elements/flow.mdx +288 -0
  31. package/site/content/docs/elements/gate.mdx +171 -0
  32. package/site/content/docs/elements/meta.json +5 -0
  33. package/site/content/docs/elements/signal.mdx +171 -0
  34. package/site/content/docs/elements/store.mdx +320 -0
  35. package/site/content/docs/elements/vault.mdx +263 -0
  36. package/site/content/docs/get-started/basic-usage.mdx +124 -0
  37. package/site/content/docs/get-started/comparison.mdx +65 -0
  38. package/site/content/docs/get-started/installation.mdx +113 -0
  39. package/site/content/docs/get-started/introduction.mdx +123 -0
  40. package/site/content/docs/get-started/meta.json +5 -0
  41. package/site/content/docs/index.mdx +63 -0
  42. package/site/content/docs/meta.json +5 -0
  43. package/site/content/docs/plugins/compression.mdx +60 -0
  44. package/site/content/docs/plugins/cors.mdx +92 -0
  45. package/site/content/docs/plugins/csrf.mdx +96 -0
  46. package/site/content/docs/plugins/ip-allowlist.mdx +92 -0
  47. package/site/content/docs/plugins/maintenance-mode.mdx +101 -0
  48. package/site/content/docs/plugins/meta.json +15 -0
  49. package/site/content/docs/plugins/security-headers.mdx +136 -0
  50. package/site/content/docs/reference/cli.md +101 -0
  51. package/site/content/docs/reference/configuration.mdx +159 -0
  52. package/site/content/docs/reference/environment-variables.mdx +87 -0
  53. package/site/content/docs/reference/errors.mdx +80 -0
  54. package/site/content/docs/reference/fx.mdx +117 -0
  55. package/site/content/docs/reference/meta.json +5 -0
  56. package/site/content/docs/reference/plugins.mdx +249 -0
  57. package/site/content/docs/reference/security.md +63 -0
  58. package/src/auth/api-keys.ts +2 -5
  59. package/src/auth/attenuation.ts +2 -6
  60. package/src/auth/auth.test.ts +56 -31
  61. package/src/auth/invoke-as.ts +1 -3
  62. package/src/auth/operator.ts +8 -26
  63. package/src/auth/planes.ts +2 -7
  64. package/src/auth/plugin.ts +4 -7
  65. package/src/auth/roles.ts +1 -5
  66. package/src/auth/sessions.ts +10 -39
  67. package/src/cli/args.ts +1 -5
  68. package/src/cli/ask-dev-mode.ts +40 -0
  69. package/src/cli/build.ts +1 -2
  70. package/src/cli/client-add.test.ts +8 -15
  71. package/src/cli/client-add.ts +5 -14
  72. package/src/cli/completion.test.ts +1 -5
  73. package/src/cli/completion.ts +4 -17
  74. package/src/cli/db-auto-push.test.ts +64 -0
  75. package/src/cli/db-auto-push.ts +72 -0
  76. package/src/cli/db.test.ts +189 -0
  77. package/src/cli/db.ts +456 -0
  78. package/src/cli/dev-app-runner.ts +2 -8
  79. package/src/cli/dev-db-push.test.ts +193 -0
  80. package/src/cli/dev-mode.test.ts +45 -0
  81. package/src/cli/dev-mode.ts +78 -0
  82. package/src/cli/dev-schema-sync.test.ts +66 -0
  83. package/src/cli/dev-schema-sync.ts +139 -0
  84. package/src/cli/dev.test.ts +264 -15
  85. package/src/cli/dev.ts +355 -139
  86. package/src/cli/doc-staleness.test.ts +69 -0
  87. package/src/cli/docker-cli.test.ts +27 -8
  88. package/src/cli/docker.ts +11 -3
  89. package/src/cli/doctor-diff.test.ts +1 -5
  90. package/src/cli/doctor-diff.ts +17 -46
  91. package/src/cli/doctor-pii.ts +2 -7
  92. package/src/cli/doctor.test.ts +26 -4
  93. package/src/cli/doctor.ts +35 -11
  94. package/src/cli/drizzle-env.test.ts +67 -0
  95. package/src/cli/drizzle-env.ts +78 -0
  96. package/src/cli/ensure-drizzle-config.ts +50 -0
  97. package/src/cli/eval.ts +4 -14
  98. package/src/cli/gates-list.ts +1 -4
  99. package/src/cli/hero-meta.test.ts +17 -19
  100. package/src/cli/hero-meta.ts +20 -30
  101. package/src/cli/images.ts +3 -8
  102. package/src/cli/index.ts +11 -2
  103. package/src/cli/load-config.images.test.ts +14 -14
  104. package/src/cli/load-config.ts +47 -47
  105. package/src/cli/mcp-from-console.ts +1 -4
  106. package/src/cli/mode.ts +65 -0
  107. package/src/cli/openbao-bootstrap.test.ts +147 -0
  108. package/src/cli/openbao-bootstrap.ts +280 -0
  109. package/src/cli/openbao-restart.integration.test.ts +136 -0
  110. package/src/cli/ports.test.ts +7 -14
  111. package/src/cli/ports.ts +7 -5
  112. package/src/cli/privacy-erase.ts +1 -3
  113. package/src/cli/registry.ts +75 -25
  114. package/src/cli/resolve-dev-sql-env.test.ts +48 -0
  115. package/src/cli/resolve-dev-sql-env.ts +42 -0
  116. package/src/cli/schema.ts +3 -10
  117. package/src/cli/stack.ts +8 -10
  118. package/src/cli/start.ts +4 -15
  119. package/src/cli/upgrade.ts +1 -4
  120. package/src/cli/vault-cmd.ts +63 -0
  121. package/src/client/budget-entry.ts +1 -6
  122. package/src/client/create.test.ts +6 -12
  123. package/src/client/create.ts +2 -8
  124. package/src/client/errors.ts +1 -4
  125. package/src/client/index.ts +1 -6
  126. package/src/client/notes-contract.test.ts +4 -13
  127. package/src/client/transport.ts +9 -30
  128. package/src/client/types.ts +15 -30
  129. package/src/compiler/aot.test.ts +2 -9
  130. package/src/compiler/aot.ts +1 -4
  131. package/src/compiler/differential.test.ts +3 -11
  132. package/src/compiler/dynamic.ts +1 -4
  133. package/src/compiler/effects-infer.ts +8 -34
  134. package/src/compiler/emit.ts +1 -3
  135. package/src/compiler/extract.test.ts +136 -30
  136. package/src/compiler/extract.ts +485 -157
  137. package/src/compiler/fixtures/skyport/oke.config.ts +3 -3
  138. package/src/compiler/fixtures/skyport/src/flows/bookings/index.ts +7 -3
  139. package/src/compiler/fixtures/skyport/src/flows/payments/index.ts +1 -3
  140. package/src/compiler/fixtures/skyport/src/flows/support/index.ts +4 -1
  141. package/src/compiler/fixtures/skyport.expected.json +24 -83
  142. package/src/compiler/fixtures/triggers/five-triggers.ts +1 -2
  143. package/src/compiler/http-parse.ts +2 -9
  144. package/src/compiler/index.ts +1 -5
  145. package/src/compiler/response.ts +16 -7
  146. package/src/compiler/sucrose.ts +11 -31
  147. package/src/config/define-config.test.ts +55 -34
  148. package/src/config/index.ts +177 -46
  149. package/src/config/resolve-driver.test.ts +28 -17
  150. package/src/console/budget.test.ts +1 -4
  151. package/src/console/index.ts +1 -4
  152. package/src/console/server/access.test.ts +15 -43
  153. package/src/console/server/access.ts +19 -49
  154. package/src/console/server/ai.test.ts +3 -11
  155. package/src/console/server/ai.ts +23 -46
  156. package/src/console/server/app.ts +16 -45
  157. package/src/console/server/auth-rate.test.ts +4 -12
  158. package/src/console/server/bind.ts +1 -5
  159. package/src/console/server/channels.test.ts +2 -6
  160. package/src/console/server/channels.ts +10 -35
  161. package/src/console/server/claim.ts +2 -8
  162. package/src/console/server/clock.test.ts +2 -6
  163. package/src/console/server/clock.ts +8 -26
  164. package/src/console/server/console.test.ts +1 -3
  165. package/src/console/server/diff.test.ts +5 -17
  166. package/src/console/server/diff.ts +10 -31
  167. package/src/console/server/dry-run.audit.test.ts +2 -8
  168. package/src/console/server/flows.ts +64 -233
  169. package/src/console/server/gates.test.ts +14 -50
  170. package/src/console/server/gates.ts +13 -48
  171. package/src/console/server/index.ts +2 -9
  172. package/src/console/server/live.ts +3 -12
  173. package/src/console/server/operator-db.test.ts +4 -15
  174. package/src/console/server/operator-db.ts +13 -32
  175. package/src/console/server/plugin.ts +50 -53
  176. package/src/console/server/plugins.test.ts +2 -6
  177. package/src/console/server/plugins.ts +17 -56
  178. package/src/console/server/runs-pii.ts +2 -7
  179. package/src/console/server/security.gate.test.ts +18 -40
  180. package/src/console/server/serve.ts +10 -25
  181. package/src/console/server/signals.test.ts +1 -3
  182. package/src/console/server/signals.ts +17 -40
  183. package/src/console/server/state.ts +21 -59
  184. package/src/console/server/store.test.ts +20 -22
  185. package/src/console/server/store.ts +31 -76
  186. package/src/console/server/vault.test.ts +12 -29
  187. package/src/console/server/vault.ts +44 -66
  188. package/src/console/ui/access/AccessA11yView.tsx +6 -21
  189. package/src/console/ui/access/a11y.test.tsx +3 -12
  190. package/src/console/ui/access/acknowledgement.test.ts +1 -4
  191. package/src/console/ui/access/acknowledgement.ts +1 -3
  192. package/src/console/ui/access/blast-radius.ts +1 -3
  193. package/src/console/ui/access/confirmation.test.ts +1 -5
  194. package/src/console/ui/access/confirmation.ts +1 -4
  195. package/src/console/ui/access/fixture.ts +1 -5
  196. package/src/console/ui/access/grantable.test.ts +1 -3
  197. package/src/console/ui/access/grantable.ts +2 -7
  198. package/src/console/ui/access/index.ts +2 -9
  199. package/src/console/ui/access/provenance.test.ts +1 -3
  200. package/src/console/ui/access/provenance.ts +2 -6
  201. package/src/console/ui/access/search.test.ts +1 -5
  202. package/src/console/ui/access/search.ts +2 -6
  203. package/src/console/ui/ai/AiA11yView.tsx +6 -17
  204. package/src/console/ui/ai/a11y.test.tsx +2 -5
  205. package/src/console/ui/ai/fixture.ts +2 -7
  206. package/src/console/ui/ai/format.ts +1 -3
  207. package/src/console/ui/ai/group.test.ts +1 -3
  208. package/src/console/ui/ai/group.ts +4 -12
  209. package/src/console/ui/ai/index.ts +2 -9
  210. package/src/console/ui/ai/promotion.test.ts +2 -7
  211. package/src/console/ui/ai/promotion.ts +4 -13
  212. package/src/console/ui/ai/search.test.ts +2 -11
  213. package/src/console/ui/ai/search.ts +3 -13
  214. package/src/console/ui/ai/types.ts +1 -8
  215. package/src/console/ui/architecture/ArchitectureA11yView.tsx +8 -29
  216. package/src/console/ui/architecture/a11y.test.tsx +1 -2
  217. package/src/console/ui/architecture/declared.ts +1 -5
  218. package/src/console/ui/architecture/index.ts +7 -35
  219. package/src/console/ui/architecture/layout.ts +1 -3
  220. package/src/console/ui/architecture/pathologies.ts +10 -19
  221. package/src/console/ui/architecture/search.ts +6 -15
  222. package/src/console/ui/architecture/traffic.ts +4 -14
  223. package/src/console/ui/architecture/types.ts +2 -10
  224. package/src/console/ui/architecture/view.test.ts +7 -19
  225. package/src/console/ui/architecture/view.ts +9 -36
  226. package/src/console/ui/channels/ChannelsA11yView.tsx +4 -13
  227. package/src/console/ui/channels/a11y.test.tsx +1 -2
  228. package/src/console/ui/channels/confirmation.test.ts +1 -4
  229. package/src/console/ui/channels/confirmation.ts +1 -4
  230. package/src/console/ui/channels/findings.ts +1 -5
  231. package/src/console/ui/channels/index.ts +2 -8
  232. package/src/console/ui/channels/locale.test.ts +1 -3
  233. package/src/console/ui/channels/locale.ts +2 -8
  234. package/src/console/ui/channels/search.ts +4 -13
  235. package/src/console/ui/channels/taxonomy.ts +1 -3
  236. package/src/console/ui/clock/ClockA11yView.tsx +9 -26
  237. package/src/console/ui/clock/a11y.test.tsx +2 -5
  238. package/src/console/ui/clock/confirmation.test.ts +1 -3
  239. package/src/console/ui/clock/confirmation.ts +1 -4
  240. package/src/console/ui/clock/findings.ts +1 -4
  241. package/src/console/ui/clock/health.ts +2 -7
  242. package/src/console/ui/clock/index.ts +2 -10
  243. package/src/console/ui/clock/search.test.ts +1 -3
  244. package/src/console/ui/clock/search.ts +2 -6
  245. package/src/console/ui/clock/timeline.test.ts +1 -3
  246. package/src/console/ui/clock/waiting-on.test.ts +1 -5
  247. package/src/console/ui/clock/waiting-on.ts +2 -7
  248. package/src/console/ui/diff/DiffA11yView.tsx +8 -17
  249. package/src/console/ui/diff/a11y.test.tsx +2 -5
  250. package/src/console/ui/diff/group.test.ts +3 -13
  251. package/src/console/ui/diff/group.ts +2 -8
  252. package/src/console/ui/diff/index.ts +2 -8
  253. package/src/console/ui/diff/search.test.ts +1 -5
  254. package/src/console/ui/diff/search.ts +4 -16
  255. package/src/console/ui/diff/summary.ts +1 -2
  256. package/src/console/ui/dist/assets/{index-Dy4jht9P.js → index-BWo8R7NR.js} +2 -2
  257. package/src/console/ui/dist/assets/{panel-access-Dd37LU2c.js → panel-access-C0J2D-a2.js} +1 -1
  258. package/src/console/ui/dist/assets/{panel-ai-CC7LR6-J.js → panel-ai-D_m6WQI8.js} +1 -1
  259. package/src/console/ui/dist/assets/{panel-architecture-B5b3iKCz.js → panel-architecture-CKnXFyUx.js} +1 -1
  260. package/src/console/ui/dist/assets/{panel-channels-CeNjTKXp.js → panel-channels-BOmQ-onL.js} +1 -1
  261. package/src/console/ui/dist/assets/{panel-clock-DgFTLoHV.js → panel-clock-giAq0Ccv.js} +1 -1
  262. package/src/console/ui/dist/assets/{panel-diff-DxehccqB.js → panel-diff-cdonmH8c.js} +1 -1
  263. package/src/console/ui/dist/assets/{panel-flows-BtrVn-Eg.js → panel-flows-DlCU5zjA.js} +2 -2
  264. package/src/console/ui/dist/assets/{panel-gates-Z9MKRGdH.js → panel-gates-XclZxWD5.js} +1 -1
  265. package/src/console/ui/dist/assets/{panel-overview-Dt_AeXgd.js → panel-overview-BznEOTnb.js} +1 -1
  266. package/src/console/ui/dist/assets/{panel-plugins-DWd0TowH.js → panel-plugins-CcGM1g64.js} +1 -1
  267. package/src/console/ui/dist/assets/{panel-runs-DGstFHeq.js → panel-runs-CGWNHLR4.js} +1 -1
  268. package/src/console/ui/dist/assets/{panel-signals-DzEa2Fnt.js → panel-signals-CNywkdak.js} +1 -1
  269. package/src/console/ui/dist/assets/{panel-store-BJkbNgxx.js → panel-store-KmTbFHMH.js} +1 -1
  270. package/src/console/ui/dist/assets/{panel-traces-BaRVO3gM.js → panel-traces-DBLx2ilD.js} +1 -1
  271. package/src/console/ui/dist/assets/panel-vault-CEnFc0dk.js +1 -0
  272. package/src/console/ui/dist/index.html +1 -1
  273. package/src/console/ui/flows/FlowsA11yView.tsx +7 -22
  274. package/src/console/ui/flows/a11y.test.tsx +2 -8
  275. package/src/console/ui/flows/buffer.test.ts +3 -11
  276. package/src/console/ui/flows/buffer.ts +4 -11
  277. package/src/console/ui/flows/confirmation.ts +1 -3
  278. package/src/console/ui/flows/contract.test.ts +3 -7
  279. package/src/console/ui/flows/contract.ts +12 -36
  280. package/src/console/ui/flows/graph.test.ts +3 -11
  281. package/src/console/ui/flows/graph.ts +5 -15
  282. package/src/console/ui/flows/index.ts +1 -6
  283. package/src/console/ui/flows/save-as-test.ts +1 -3
  284. package/src/console/ui/flows/search.ts +8 -25
  285. package/src/console/ui/flows/tiers.ts +2 -9
  286. package/src/console/ui/gates/GatesA11yView.tsx +4 -13
  287. package/src/console/ui/gates/a11y.test.tsx +2 -5
  288. package/src/console/ui/gates/audit.ts +1 -3
  289. package/src/console/ui/gates/denial.test.ts +1 -3
  290. package/src/console/ui/gates/denial.ts +4 -12
  291. package/src/console/ui/gates/findings.ts +1 -3
  292. package/src/console/ui/gates/group.test.ts +3 -3
  293. package/src/console/ui/gates/group.ts +3 -11
  294. package/src/console/ui/gates/index.ts +2 -10
  295. package/src/console/ui/gates/search.ts +3 -10
  296. package/src/console/ui/overview/OverviewA11yView.tsx +9 -27
  297. package/src/console/ui/overview/a11y.test.tsx +1 -2
  298. package/src/console/ui/overview/busiest.ts +1 -3
  299. package/src/console/ui/overview/compose.ts +1 -13
  300. package/src/console/ui/overview/cost.ts +34 -38
  301. package/src/console/ui/overview/fixture.ts +21 -26
  302. package/src/console/ui/overview/golden.ts +4 -14
  303. package/src/console/ui/overview/index.ts +2 -9
  304. package/src/console/ui/overview/rank.test.ts +3 -10
  305. package/src/console/ui/overview/rank.ts +2 -7
  306. package/src/console/ui/overview/slo.test.ts +5 -9
  307. package/src/console/ui/overview/slo.ts +6 -23
  308. package/src/console/ui/overview/verdict.ts +3 -10
  309. package/src/console/ui/plugins/PluginsA11yView.tsx +8 -18
  310. package/src/console/ui/plugins/a11y.test.tsx +1 -2
  311. package/src/console/ui/plugins/fixture.ts +2 -4
  312. package/src/console/ui/plugins/group.test.ts +1 -3
  313. package/src/console/ui/plugins/group.ts +1 -6
  314. package/src/console/ui/plugins/index.ts +3 -13
  315. package/src/console/ui/plugins/search.ts +7 -19
  316. package/src/console/ui/runs/RunsA11yView.tsx +5 -20
  317. package/src/console/ui/runs/a11y.test.tsx +2 -5
  318. package/src/console/ui/runs/explain.ts +2 -6
  319. package/src/console/ui/runs/group.ts +3 -12
  320. package/src/console/ui/runs/histogram.test.ts +2 -11
  321. package/src/console/ui/runs/histogram.ts +1 -4
  322. package/src/console/ui/runs/index.ts +4 -18
  323. package/src/console/ui/runs/project.ts +2 -6
  324. package/src/console/ui/runs/query.test.ts +1 -3
  325. package/src/console/ui/runs/query.ts +12 -35
  326. package/src/console/ui/runs/search.ts +5 -19
  327. package/src/console/ui/runs/trace-link.test.ts +2 -6
  328. package/src/console/ui/runs/trace-link.ts +4 -16
  329. package/src/console/ui/runs/types.ts +1 -3
  330. package/src/console/ui/shell/App.tsx +2 -10
  331. package/src/console/ui/shell/client.ts +22 -115
  332. package/src/console/ui/shell/components/ui.tsx +1 -4
  333. package/src/console/ui/shell/layout/Shell.tsx +2 -4
  334. package/src/console/ui/shell/main.tsx +31 -96
  335. package/src/console/ui/shell/panels/access/AccessPanel.tsx +34 -98
  336. package/src/console/ui/shell/panels/ai/AiPanel.tsx +35 -106
  337. package/src/console/ui/shell/panels/architecture/ArchitecturePanel.tsx +18 -66
  338. package/src/console/ui/shell/panels/channels/ChannelsPanel.tsx +20 -57
  339. package/src/console/ui/shell/panels/clock/ClockPanel.tsx +22 -54
  340. package/src/console/ui/shell/panels/diff/DiffPanel.tsx +20 -61
  341. package/src/console/ui/shell/panels/flows/ContractEditor.tsx +6 -23
  342. package/src/console/ui/shell/panels/flows/FlowDrawer.tsx +13 -28
  343. package/src/console/ui/shell/panels/flows/FlowsPanel.tsx +9 -29
  344. package/src/console/ui/shell/panels/gates/GatesPanel.tsx +24 -80
  345. package/src/console/ui/shell/panels/overview/OverviewPanel.tsx +20 -58
  346. package/src/console/ui/shell/panels/plugins/PluginsPanel.tsx +16 -41
  347. package/src/console/ui/shell/panels/runs/RunsPanel.tsx +31 -99
  348. package/src/console/ui/shell/panels/signals/SignalsPanel.tsx +38 -101
  349. package/src/console/ui/shell/panels/store/StorePanel.tsx +27 -66
  350. package/src/console/ui/shell/panels/traces/TracesPanel.tsx +28 -89
  351. package/src/console/ui/shell/panels/vault/VaultPanel.tsx +22 -53
  352. package/src/console/ui/shell/setup/Wizard.tsx +3 -5
  353. package/src/console/ui/shell/styles.css +1 -2
  354. package/src/console/ui/signals/SignalsA11yView.tsx +9 -33
  355. package/src/console/ui/signals/a11y.test.tsx +2 -5
  356. package/src/console/ui/signals/confirmation.test.ts +1 -5
  357. package/src/console/ui/signals/confirmation.ts +2 -6
  358. package/src/console/ui/signals/dry-run.ts +1 -3
  359. package/src/console/ui/signals/durable.ts +1 -3
  360. package/src/console/ui/signals/findings.ts +1 -3
  361. package/src/console/ui/signals/group.test.ts +2 -8
  362. package/src/console/ui/signals/group.ts +2 -10
  363. package/src/console/ui/signals/index.ts +1 -4
  364. package/src/console/ui/signals/monitor.ts +2 -7
  365. package/src/console/ui/signals/schema-form.test.ts +3 -14
  366. package/src/console/ui/signals/schema-form.ts +1 -4
  367. package/src/console/ui/signals/search.ts +4 -13
  368. package/src/console/ui/store/StoreA11yView.tsx +3 -9
  369. package/src/console/ui/store/a11y.test.tsx +2 -5
  370. package/src/console/ui/store/confirmation.test.ts +1 -3
  371. package/src/console/ui/store/confirmation.ts +1 -4
  372. package/src/console/ui/store/dry-run.ts +2 -5
  373. package/src/console/ui/store/fixture.ts +1 -2
  374. package/src/console/ui/store/group.test.ts +1 -6
  375. package/src/console/ui/store/group.ts +1 -4
  376. package/src/console/ui/store/index.ts +1 -5
  377. package/src/console/ui/store/search.ts +2 -6
  378. package/src/console/ui/store/will-not-fire.ts +1 -2
  379. package/src/console/ui/traces/TracesA11yView.tsx +10 -29
  380. package/src/console/ui/traces/a11y.test.tsx +1 -2
  381. package/src/console/ui/traces/chain.test.ts +5 -19
  382. package/src/console/ui/traces/chain.ts +1 -3
  383. package/src/console/ui/traces/critical-path.test.ts +1 -3
  384. package/src/console/ui/traces/critical-path.ts +2 -6
  385. package/src/console/ui/traces/filter.test.ts +2 -6
  386. package/src/console/ui/traces/filter.ts +5 -13
  387. package/src/console/ui/traces/fold.test.ts +4 -12
  388. package/src/console/ui/traces/fold.ts +1 -3
  389. package/src/console/ui/traces/mini.ts +1 -3
  390. package/src/console/ui/traces/replay.test.ts +1 -3
  391. package/src/console/ui/traces/replay.ts +1 -3
  392. package/src/console/ui/traces/sampling.ts +1 -4
  393. package/src/console/ui/traces/search.ts +4 -17
  394. package/src/console/ui/traces/tier.ts +1 -3
  395. package/src/console/ui/vault/VaultA11yView.tsx +5 -17
  396. package/src/console/ui/vault/a11y.test.tsx +1 -2
  397. package/src/console/ui/vault/blast-radius.ts +1 -3
  398. package/src/console/ui/vault/confirmation.test.ts +1 -5
  399. package/src/console/ui/vault/confirmation.ts +1 -4
  400. package/src/console/ui/vault/dormant.test.ts +1 -4
  401. package/src/console/ui/vault/export-safe.test.ts +1 -5
  402. package/src/console/ui/vault/export-safe.ts +1 -4
  403. package/src/console/ui/vault/fixture.ts +3 -3
  404. package/src/console/ui/vault/group.ts +1 -2
  405. package/src/console/ui/vault/index.ts +2 -10
  406. package/src/console/ui/vault/search.ts +2 -6
  407. package/src/console/ui/vault/types.ts +1 -1
  408. package/src/console/xss.gate.test.ts +1 -3
  409. package/src/docker/compose.ts +215 -27
  410. package/src/docker/derive.ts +6 -14
  411. package/src/docker/docker.test.ts +118 -15
  412. package/src/docker/dockerfile.integration.test.ts +12 -21
  413. package/src/docker/helpers.ts +5 -4
  414. package/src/docker/index.ts +9 -6
  415. package/src/docker/pin.ts +1 -9
  416. package/src/docker/recipes/index.ts +6 -6
  417. package/src/docker/recipes/mailpit.ts +22 -0
  418. package/src/docker/recipes/openbao.ts +47 -0
  419. package/src/docker/recipes/postgres.ts +17 -6
  420. package/src/docker/recipes/redis.ts +11 -2
  421. package/src/docker/recipes/rustfs.ts +32 -0
  422. package/src/docker/stack-id.test.ts +73 -5
  423. package/src/docker/stack-id.ts +124 -33
  424. package/src/docker/stack.integration.test.ts +6 -21
  425. package/src/docker/stack.ts +36 -4
  426. package/src/docker/types.ts +16 -4
  427. package/src/docs-origin.ts +4 -4
  428. package/src/drivers/ai-anthropic.ts +5 -14
  429. package/src/drivers/ai-mock.ts +2 -5
  430. package/src/drivers/ai-openai-compatible.ts +4 -10
  431. package/src/drivers/ai-providers.test.ts +6 -13
  432. package/src/drivers/bun-native-completeness.test.ts +6 -15
  433. package/src/drivers/channel-console.ts +6 -7
  434. package/src/drivers/channel-fcm.ts +20 -30
  435. package/src/drivers/channel-resend.ts +1 -3
  436. package/src/drivers/channel-smtp.ts +2 -6
  437. package/src/drivers/channel-types.ts +2 -12
  438. package/src/drivers/channel-unifonic.ts +2 -6
  439. package/src/drivers/channel-wa-cloud.ts +2 -6
  440. package/src/drivers/channel-webpush.ts +21 -60
  441. package/src/drivers/conformance.test.ts +2 -10
  442. package/src/drivers/conformance.ts +8 -21
  443. package/src/drivers/drizzle-dialect.test.ts +20 -0
  444. package/src/drivers/drizzle-dialect.ts +37 -0
  445. package/src/drivers/fs.ts +2 -8
  446. package/src/drivers/index.ts +12 -57
  447. package/src/drivers/memory.ts +287 -75
  448. package/src/drivers/pgvector.ts +7 -11
  449. package/src/drivers/postgres.ts +7 -13
  450. package/src/drivers/redis.ts +13 -37
  451. package/src/drivers/s3.ts +15 -18
  452. package/src/drivers/signal-engine.ts +12 -49
  453. package/src/drivers/signal-memory.ts +2 -8
  454. package/src/drivers/signal-nats.ts +4 -9
  455. package/src/drivers/signal-postgres.ts +62 -129
  456. package/src/drivers/signal-redis.ts +7 -21
  457. package/src/drivers/signal-types.ts +1 -4
  458. package/src/drivers/sqlite.ts +3 -12
  459. package/src/drivers/types.ts +4 -23
  460. package/src/drivers/vault-driver-removal.test.ts +55 -0
  461. package/src/drivers/vault-env.ts +2 -6
  462. package/src/drivers/vault-infisical.ts +1 -5
  463. package/src/drivers/vault-managed.ts +1 -5
  464. package/src/drivers/vault-memory.ts +1 -5
  465. package/src/drivers/vault-openbao.test.ts +97 -0
  466. package/src/drivers/vault-openbao.ts +103 -40
  467. package/src/drivers/vault-types.ts +3 -16
  468. package/src/elements/ai/declare.ts +4 -14
  469. package/src/elements/ai/eval.ts +2 -6
  470. package/src/elements/ai/pii.ts +1 -3
  471. package/src/elements/ai/runtime.ts +12 -50
  472. package/src/elements/ai/schema.ts +4 -15
  473. package/src/elements/ai.test.ts +13 -24
  474. package/src/elements/ai.ts +1 -5
  475. package/src/elements/channel/consent.ts +3 -12
  476. package/src/elements/channel/costs.ts +4 -15
  477. package/src/elements/channel/declare.ts +1 -4
  478. package/src/elements/channel/email-auth.ts +1 -4
  479. package/src/elements/channel/locale.ts +2 -10
  480. package/src/elements/channel/mask.ts +1 -3
  481. package/src/elements/channel/mime.ts +2 -12
  482. package/src/elements/channel/outcomes.test.ts +1 -5
  483. package/src/elements/channel/outcomes.ts +5 -15
  484. package/src/elements/channel/receipts.ts +2 -7
  485. package/src/elements/channel/runtime.ts +28 -74
  486. package/src/elements/channel/suppression.ts +8 -14
  487. package/src/elements/channel.test.ts +8 -31
  488. package/src/elements/channel.ts +3 -14
  489. package/src/elements/clock/actions.ts +6 -18
  490. package/src/elements/clock/declare.ts +1 -3
  491. package/src/elements/clock/dst.ts +1 -5
  492. package/src/elements/clock/durable.ts +4 -16
  493. package/src/elements/clock/health.ts +2 -7
  494. package/src/elements/clock/leader.ts +2 -9
  495. package/src/elements/clock/reconcile.ts +4 -15
  496. package/src/elements/clock/runtime.ts +2 -5
  497. package/src/elements/clock/schedule.ts +4 -20
  498. package/src/elements/clock.test.ts +2 -7
  499. package/src/elements/clock.ts +5 -23
  500. package/src/elements/gate/permissions.ts +1 -4
  501. package/src/elements/gate/runtime.ts +7 -28
  502. package/src/elements/gate.ts +1 -5
  503. package/src/elements/index.ts +9 -7
  504. package/src/elements/signal/declare.ts +2 -7
  505. package/src/elements/signal/reconcile.test.ts +1 -4
  506. package/src/elements/signal/runtime.ts +1 -3
  507. package/src/elements/signal.test.ts +3 -15
  508. package/src/elements/signal.ts +2 -8
  509. package/src/elements/store/cache.test.ts +46 -0
  510. package/src/elements/store/cache.ts +3 -11
  511. package/src/elements/store/classify.ts +5 -22
  512. package/src/elements/store/declare.ts +11 -17
  513. package/src/elements/store/domain-ddl.test.ts +86 -0
  514. package/src/elements/store/emit-drizzle.ts +363 -0
  515. package/src/elements/store/files-policy.test.ts +1 -5
  516. package/src/elements/store/files-policy.ts +4 -12
  517. package/src/elements/store/load-plugin-tables.ts +103 -0
  518. package/src/elements/store/missing-relation.test.ts +83 -0
  519. package/src/elements/store/missing-relation.ts +38 -0
  520. package/src/elements/store/replica.ts +1 -4
  521. package/src/elements/store/resource-list-docs.fixture.ts +56 -0
  522. package/src/elements/store/resource-list-docs.test.ts +79 -0
  523. package/src/elements/store/resource.test.ts +253 -0
  524. package/src/elements/store/resource.ts +786 -0
  525. package/src/elements/store/runtime.ts +25 -28
  526. package/src/elements/store/schema-decl.test.ts +227 -0
  527. package/src/elements/store/schema-decl.ts +516 -0
  528. package/src/elements/store/sql-condition.test.ts +132 -0
  529. package/src/elements/store/sql-condition.ts +293 -65
  530. package/src/elements/store/sql-session.test.ts +135 -0
  531. package/src/elements/store/sql-session.ts +241 -84
  532. package/src/elements/store/table.ts +69 -23
  533. package/src/elements/store.test.ts +17 -39
  534. package/src/elements/store.ts +53 -31
  535. package/src/elements/vault/chain.ts +34 -0
  536. package/src/elements/vault/declare.ts +22 -32
  537. package/src/elements/vault/fingerprint.ts +2 -7
  538. package/src/elements/vault/redact.ts +2 -6
  539. package/src/elements/vault/runtime.ts +19 -33
  540. package/src/elements/vault.test.ts +12 -55
  541. package/src/elements/vault.ts +9 -13
  542. package/src/index.ts +5 -2
  543. package/src/kernel/adopt-routes.ts +15 -29
  544. package/src/kernel/app.ts +92 -118
  545. package/src/kernel/auth-resolve.ts +2 -9
  546. package/src/kernel/boot-bind/ai.ts +1 -4
  547. package/src/kernel/boot-bind/channel.test.ts +60 -0
  548. package/src/kernel/boot-bind/channel.ts +61 -5
  549. package/src/kernel/boot-bind/clock.ts +2 -6
  550. package/src/kernel/boot-bind/gate.ts +2 -8
  551. package/src/kernel/boot-bind/runs.ts +1 -3
  552. package/src/kernel/boot-bind/signal.ts +3 -10
  553. package/src/kernel/boot-bind/store.test.ts +27 -18
  554. package/src/kernel/boot-bind/store.ts +93 -52
  555. package/src/kernel/boot-bind/vault.ts +2 -8
  556. package/src/kernel/boot.test.ts +4 -10
  557. package/src/kernel/boot.ts +30 -77
  558. package/src/kernel/budget.test.ts +1 -3
  559. package/src/kernel/capability.ts +3 -10
  560. package/src/kernel/dry-run.test.ts +1 -4
  561. package/src/kernel/dry-run.ts +3 -11
  562. package/src/kernel/edge.test.ts +68 -0
  563. package/src/kernel/effects.test.ts +1 -5
  564. package/src/kernel/effects.ts +4 -11
  565. package/src/kernel/errors.registry.test.ts +2 -8
  566. package/src/kernel/errors.ts +23 -32
  567. package/src/kernel/flow.test.ts +12 -25
  568. package/src/kernel/flow.ts +13 -25
  569. package/src/kernel/fx.test.ts +31 -40
  570. package/src/kernel/fx.ts +135 -90
  571. package/src/kernel/hook-timing.test.ts +3 -6
  572. package/src/kernel/hook-timing.ts +5 -14
  573. package/src/kernel/hooks.test.ts +43 -10
  574. package/src/kernel/hooks.ts +25 -12
  575. package/src/kernel/index.ts +11 -17
  576. package/src/kernel/journal.ts +7 -31
  577. package/src/kernel/on.ts +45 -9
  578. package/src/kernel/pipeline.test.ts +10 -19
  579. package/src/kernel/pipeline.ts +5 -17
  580. package/src/kernel/plug.ts +4 -11
  581. package/src/kernel/plugin/conflicts.test.ts +13 -25
  582. package/src/kernel/plugin/decorate.test.ts +8 -13
  583. package/src/kernel/plugin/scoping.test.ts +4 -11
  584. package/src/kernel/plugin.ts +81 -27
  585. package/src/kernel/registry-isolation.test.ts +74 -0
  586. package/src/kernel/registry.ts +102 -30
  587. package/src/kernel/router.test.ts +15 -13
  588. package/src/kernel/router.ts +9 -29
  589. package/src/kernel/routing-budget.test.ts +1 -3
  590. package/src/kernel/run-telemetry.ts +1 -3
  591. package/src/kernel/triggers.ts +63 -21
  592. package/src/manifest/diff.test.ts +26 -91
  593. package/src/manifest/diff.ts +95 -225
  594. package/src/manifest/fixtures/skyport.excerpt.json +1 -1
  595. package/src/manifest/fixtures/skyport.manifest.json +1 -1
  596. package/src/manifest/index.ts +3 -10
  597. package/src/manifest/types.ts +30 -6
  598. package/src/manifest/undeclared.test.ts +4 -12
  599. package/src/manifest/undeclared.ts +1 -2
  600. package/src/manifest/validate.test.ts +2 -6
  601. package/src/manifest/validate.ts +5 -15
  602. package/src/mcp/authorization.ts +8 -27
  603. package/src/mcp/confirmation.ts +3 -10
  604. package/src/mcp/data.ts +2 -6
  605. package/src/mcp/docs-index.ts +4 -7
  606. package/src/mcp/docs-mcp.test.ts +3 -12
  607. package/src/mcp/docs-server.ts +7 -27
  608. package/src/mcp/docs-tools.ts +2 -6
  609. package/src/mcp/index.ts +1 -6
  610. package/src/mcp/injection.gate.test.ts +4 -18
  611. package/src/mcp/mcp.test.ts +18 -49
  612. package/src/mcp/protocol.ts +3 -10
  613. package/src/mcp/server.ts +11 -52
  614. package/src/mcp/session.ts +4 -14
  615. package/src/mcp/tools.ts +14 -50
  616. package/src/plugins/catalogue.test.ts +3 -7
  617. package/src/plugins/catalogue.ts +1 -3
  618. package/src/plugins/compression.test.ts +127 -0
  619. package/src/plugins/compression.ts +94 -0
  620. package/src/plugins/config-source.test.ts +204 -0
  621. package/src/plugins/config-source.ts +209 -0
  622. package/src/plugins/cors.test.ts +138 -0
  623. package/src/plugins/cors.ts +129 -0
  624. package/src/plugins/csrf.test.ts +102 -0
  625. package/src/plugins/csrf.ts +86 -0
  626. package/src/plugins/headers.ts +54 -0
  627. package/src/plugins/index.ts +26 -0
  628. package/src/plugins/ip-allowlist.test.ts +105 -0
  629. package/src/plugins/ip-allowlist.ts +76 -0
  630. package/src/plugins/maintenance-mode.test.ts +91 -0
  631. package/src/plugins/maintenance-mode.ts +85 -0
  632. package/src/plugins/node-import-scan.ts +2 -5
  633. package/src/plugins/security-headers.test.ts +243 -0
  634. package/src/plugins/security-headers.ts +255 -0
  635. package/src/plugins/supply-chain.ts +5 -17
  636. package/src/release/exports.ts +3 -8
  637. package/src/release/measure.exports.test.ts +1 -3
  638. package/src/release/measure.ts +16 -45
  639. package/src/runs/bench.test.ts +1 -3
  640. package/src/runs/collect.ts +8 -25
  641. package/src/runs/drivers/clickhouse.ts +2 -9
  642. package/src/runs/drivers/files.ts +9 -31
  643. package/src/runs/drivers/memory.ts +5 -22
  644. package/src/runs/drivers/postgres.ts +8 -20
  645. package/src/runs/duckdb.ts +2 -8
  646. package/src/runs/index.ts +3 -14
  647. package/src/runs/outlier.ts +3 -10
  648. package/src/runs/parquet.ts +8 -26
  649. package/src/runs/privacy.ts +2 -8
  650. package/src/runs/runs.test.ts +3 -9
  651. package/src/runs/runtime.ts +7 -32
  652. package/src/runs/shred.ts +10 -29
  653. package/src/runs/types.ts +1 -4
  654. package/src/runtime/bun.ts +4 -15
  655. package/src/runtime/cold-start.bench.ts +1 -3
  656. package/src/runtime/dev-request-log.test.ts +1 -4
  657. package/src/runtime/dev-request-log.ts +1 -4
  658. package/src/runtime/index.ts +1 -6
  659. package/src/runtime/primitives.ts +5 -4
  660. package/src/runtime/security.ts +3 -13
  661. package/src/runtime/serve.test.ts +4 -7
  662. package/src/runtime/types.ts +1 -4
  663. package/src/runtime/web-standard.ts +3 -15
  664. package/src/term.test.ts +4 -6
  665. package/src/term.ts +49 -98
  666. package/src/test/create-test-app.test.ts +4 -14
  667. package/src/test/create-test-app.ts +27 -33
  668. package/src/test/provisions.integration.test.ts +3 -11
  669. package/src/upgrade/codemods.test.ts +25 -6
  670. package/src/upgrade/codemods.ts +116 -3
  671. package/src/validation/standard-schema.test.ts +2 -5
  672. package/src/validation/standard-schema.ts +13 -33
  673. package/docs/spec/console.md +0 -739
  674. package/docs/spec/example.md +0 -1196
  675. package/docs/spec/four-applications.md +0 -1195
  676. package/docs/spec/unified-theory.md +0 -489
  677. package/src/cli/doc-drift.test.ts +0 -146
  678. package/src/cli/doc-drift.ts +0 -430
  679. package/src/cli/doctor-diff-examples.ts +0 -92
  680. package/src/console/ui/dist/assets/panel-vault-BbfWdox0.js +0 -1
  681. package/src/drivers/vault-sops.ts +0 -271
@@ -2,15 +2,15 @@ import { defineConfig } from "okengine/config";
2
2
 
3
3
  export default defineConfig({
4
4
  drivers: {
5
- prod: ["postgres", "redis", "s3", "smtp", "sops", "anthropic", "pgvector"],
5
+ prod: ["postgres", "redis", "s3", "smtp", "openbao", "anthropic", "pgvector"],
6
6
  store: {
7
- sql: { dev: "sqlite", prod: { driver: "postgres" } },
7
+ sql: { local: "sqlite", prod: { driver: "postgres" } },
8
8
  kv: { prod: "redis" },
9
9
  files: { prod: "s3" },
10
10
  index: { prod: "pgvector" },
11
11
  },
12
12
  signal: { prod: "postgres" },
13
- vault: { prod: "sops" },
13
+ vault: { prod: "openbao" },
14
14
  channel: { email: { prod: "smtp" } },
15
15
  ai: { prod: { driver: "anthropic" } },
16
16
  },
@@ -10,8 +10,8 @@ const BookingOut = { name: "BookingOut" };
10
10
  const FlightFull = { name: "FlightFull" };
11
11
 
12
12
  // Padding so `flow(` lands on line 18 (spec excerpt source path).
13
-
14
-
13
+ void 0;
14
+ void 0;
15
15
 
16
16
  export const create = on(
17
17
  http.post("/bookings").gate(member, canBook, fair),
@@ -39,7 +39,11 @@ export const mine = on(
39
39
  name: "bookings.mine",
40
40
  live: true,
41
41
  do: (_, fx) =>
42
- fx.store(db).select().from(bookings).where(eq(bookings.userId as never, fx.auth.userId)),
42
+ fx
43
+ .store(db)
44
+ .select()
45
+ .from(bookings)
46
+ .where(eq(bookings.userId as never, fx.auth.userId)),
43
47
  }),
44
48
  );
45
49
 
@@ -5,9 +5,7 @@ export const chargeBooking = flow({
5
5
  name: "payments.chargeBooking",
6
6
  durable: true,
7
7
  do: async ({ orderId }, fx) => {
8
- const intent = await fx.step("create-intent", () =>
9
- fx.vault(stripeKey),
10
- );
8
+ const intent = await fx.step("create-intent", () => fx.vault(stripeKey));
11
9
  await fx.clock.sleep("verify-window", "2m");
12
10
  return fx.step("confirm", () => intent);
13
11
  },
@@ -13,7 +13,10 @@ export const createTicket = on(
13
13
  do: async (input, fx) => {
14
14
  const t = await fx.ask(triage, input);
15
15
  const id = fx.id();
16
- await fx.store(db).insert(tickets).values({ id, ...input, ...t });
16
+ await fx
17
+ .store(db)
18
+ .insert(tickets)
19
+ .values({ id, ...input, ...t });
17
20
  return { id, urgency: t.urgency };
18
21
  },
19
22
  }),
@@ -9,27 +9,14 @@
9
9
  "path": "/bookings"
10
10
  }
11
11
  },
12
- "gates": [
13
- "member",
14
- "booking:create",
15
- "rate:sliding-window-counter:300/1m"
16
- ],
12
+ "gates": ["member", "booking:create", "rate:sliding-window-counter:300/1m"],
17
13
  "in": "…",
18
14
  "out": "…",
19
- "errors": [
20
- "FlightFull"
21
- ],
15
+ "errors": ["FlightFull"],
22
16
  "effects": {
23
- "reads": [
24
- "sql:bookings"
25
- ],
26
- "writes": [
27
- "sql:bookings"
28
- ],
29
- "emits": [
30
- "order-placed",
31
- "seat-feed"
32
- ],
17
+ "reads": ["sql:bookings"],
18
+ "writes": ["sql:bookings"],
19
+ "emits": ["order-placed", "seat-feed"],
33
20
  "secrets": []
34
21
  },
35
22
  "source": "src/flows/bookings/index.ts:18",
@@ -43,11 +30,9 @@
43
30
  },
44
31
  "bookings.getBooking": {
45
32
  "effects": {
46
- "reads": [
47
- "sql:bookings"
48
- ]
33
+ "reads": ["sql:bookings"]
49
34
  },
50
- "source": "src/flows/bookings/index.ts:46"
35
+ "source": "src/flows/bookings/index.ts:50"
51
36
  },
52
37
  "bookings.mine": {
53
38
  "trigger": {
@@ -56,13 +41,9 @@
56
41
  "path": "/bookings"
57
42
  }
58
43
  },
59
- "gates": [
60
- "member"
61
- ],
44
+ "gates": ["member"],
62
45
  "effects": {
63
- "reads": [
64
- "sql:bookings"
65
- ]
46
+ "reads": ["sql:bookings"]
66
47
  },
67
48
  "source": "src/flows/bookings/index.ts:38",
68
49
  "live": true,
@@ -70,27 +51,18 @@
70
51
  },
71
52
  "bookings.refundBooking": {
72
53
  "effects": {
73
- "reads": [
74
- "sql:bookings"
75
- ],
76
- "writes": [
77
- "sql:bookings"
78
- ]
54
+ "reads": ["sql:bookings"],
55
+ "writes": ["sql:bookings"]
79
56
  },
80
- "source": "src/flows/bookings/index.ts:51"
57
+ "source": "src/flows/bookings/index.ts:55"
81
58
  },
82
59
  "payments.chargeBooking": {
83
60
  "effects": {
84
- "secrets": [
85
- "STRIPE_KEY"
86
- ]
61
+ "secrets": ["STRIPE_KEY"]
87
62
  },
88
63
  "source": "src/flows/payments/index.ts:4",
89
64
  "durable": true,
90
- "steps": [
91
- "create-intent",
92
- "confirm"
93
- ]
65
+ "steps": ["create-intent", "confirm"]
94
66
  },
95
67
  "support.createTicket": {
96
68
  "trigger": {
@@ -99,16 +71,10 @@
99
71
  "path": "/tickets"
100
72
  }
101
73
  },
102
- "gates": [
103
- "member"
104
- ],
74
+ "gates": ["member"],
105
75
  "effects": {
106
- "writes": [
107
- "sql:tickets"
108
- ],
109
- "asks": [
110
- "ticket-triage@3"
111
- ]
76
+ "writes": ["sql:tickets"],
77
+ "asks": ["ticket-triage@3"]
112
78
  },
113
79
  "source": "src/flows/support/index.ts:9",
114
80
  "nondeterministic": true,
@@ -137,9 +103,7 @@
137
103
  "gates": {
138
104
  "booking:create": {
139
105
  "kind": "policy",
140
- "roles": [
141
- "booking:create"
142
- ]
106
+ "roles": ["booking:create"]
143
107
  },
144
108
  "fair": {
145
109
  "kind": "rate",
@@ -150,9 +114,7 @@
150
114
  },
151
115
  "member": {
152
116
  "kind": "policy",
153
- "roles": [
154
- "member"
155
- ]
117
+ "roles": ["member"]
156
118
  }
157
119
  },
158
120
  "vault": {
@@ -164,10 +126,7 @@
164
126
  "channels": {
165
127
  "booking-confirmed": {
166
128
  "medium": "email",
167
- "locales": [
168
- "en",
169
- "ar"
170
- ]
129
+ "locales": ["en", "ar"]
171
130
  }
172
131
  },
173
132
  "ai": {
@@ -188,10 +147,7 @@
188
147
  },
189
148
  "agents": {
190
149
  "support": {
191
- "tools": [
192
- "bookings.getBooking",
193
- "bookings.refundBooking"
194
- ],
150
+ "tools": ["bookings.getBooking", "bookings.refundBooking"],
195
151
  "maxSteps": 6
196
152
  }
197
153
  }
@@ -202,31 +158,17 @@
202
158
  "availability": "99.5%"
203
159
  },
204
160
  "composes": "99.6%",
205
- "flows": [
206
- "bookings.create",
207
- "payments.chargeBooking"
208
- ]
161
+ "flows": ["bookings.create", "payments.chargeBooking"]
209
162
  }
210
163
  },
211
164
  "drivers": {
212
- "prod": [
213
- "postgres",
214
- "redis",
215
- "s3",
216
- "smtp",
217
- "sops",
218
- "anthropic",
219
- "pgvector"
220
- ]
165
+ "prod": ["postgres", "redis", "s3", "smtp", "openbao", "anthropic", "pgvector"]
221
166
  },
222
167
  "tenancy": {
223
168
  "isolation": "row"
224
169
  },
225
170
  "i18n": {
226
- "locales": [
227
- "en",
228
- "ar"
229
- ],
171
+ "locales": ["en", "ar"],
230
172
  "default": "ar",
231
173
  "dir": {
232
174
  "ar": "rtl"
@@ -238,4 +180,3 @@
238
180
  "store.kv": "valkey/valkey:8-alpine"
239
181
  }
240
182
  }
241
-
@@ -51,8 +51,7 @@ on(
51
51
  table("orders").changed("status"),
52
52
  flow({
53
53
  name: "triggers.cdc",
54
- do: ({ before, after }, fx) =>
55
- fx.store(db).insert(orders).values({ before, after }),
54
+ do: ({ before, after }, fx) => fx.store(db).insert(orders).values({ before, after }),
56
55
  }),
57
56
  );
58
57
 
@@ -53,10 +53,7 @@ export function emptyInference(): MutableInference {
53
53
  * @param into - Accumulator
54
54
  * @param next - Flags to merge
55
55
  */
56
- export function mergeInference(
57
- into: MutableInference,
58
- next: ContextInference,
59
- ): MutableInference {
56
+ export function mergeInference(into: MutableInference, next: ContextInference): MutableInference {
60
57
  into.body = into.body || next.body;
61
58
  into.query = into.query || next.query;
62
59
  into.params = into.params || next.params;
@@ -160,11 +157,7 @@ export function assembleInput(parts: InputParts): unknown {
160
157
  }
161
158
 
162
159
  if (parts.body !== undefined) {
163
- if (
164
- typeof parts.body === "object" &&
165
- parts.body !== null &&
166
- !Array.isArray(parts.body)
167
- ) {
160
+ if (typeof parts.body === "object" && parts.body !== null && !Array.isArray(parts.body)) {
168
161
  Object.assign(out, parts.body as Record<string, unknown>);
169
162
  } else {
170
163
  out.body = parts.body;
@@ -14,11 +14,7 @@ export {
14
14
  type SucroseOptions,
15
15
  } from "./aot.ts";
16
16
 
17
- export {
18
- compileDynamic,
19
- compileRoute,
20
- FULL_INFERENCE,
21
- } from "./dynamic.ts";
17
+ export { compileDynamic, compileRoute, FULL_INFERENCE } from "./dynamic.ts";
22
18
 
23
19
  export {
24
20
  assembleInput,
@@ -5,6 +5,7 @@
5
5
  */
6
6
 
7
7
  import type { FlowFailure } from "../kernel/errors.ts";
8
+ import { isJsonResult } from "../kernel/fx.ts";
8
9
  import { isFlowFailure } from "../kernel/hooks.ts";
9
10
  import { VALIDATION_ERROR_CODE } from "../validation/standard-schema.ts";
10
11
 
@@ -12,6 +13,7 @@ import { VALIDATION_ERROR_CODE } from "../validation/standard-schema.ts";
12
13
  export interface SuccessEnvelope {
13
14
  readonly data: unknown;
14
15
  readonly error: null;
16
+ readonly meta?: Record<string, unknown>;
15
17
  }
16
18
 
17
19
  /** Failure envelope. */
@@ -45,16 +47,24 @@ export function statusForFailure(failure: FlowFailure): number {
45
47
 
46
48
  /**
47
49
  * Encode a successful output as JSON `{ data, error: null }`.
50
+ * An `fx.json` carrier overrides status (`create` → 201) and attaches
51
+ * top-level `meta` (Stripe-style envelope).
48
52
  *
49
53
  * @param output - Handler output (`undefined` → 204)
50
54
  */
51
55
  export function encodeSuccess(output: unknown): Response {
56
+ if (isJsonResult(output)) {
57
+ if (output.status === 204) {
58
+ return new Response(null, { status: 204 });
59
+ }
60
+ const body: SuccessEnvelope = { data: output.value, error: null };
61
+ const envelope = output.meta === undefined ? body : { ...body, meta: output.meta };
62
+ return Response.json(envelope, { status: output.status });
63
+ }
52
64
  if (output === undefined) {
53
65
  return new Response(null, { status: 204 });
54
66
  }
55
- return Response.json(
56
- { data: output, error: null } satisfies SuccessEnvelope,
57
- );
67
+ return Response.json({ data: output, error: null } satisfies SuccessEnvelope);
58
68
  }
59
69
 
60
70
  /**
@@ -63,10 +73,9 @@ export function encodeSuccess(output: unknown): Response {
63
73
  * @param failure - Flow-boundary failure
64
74
  */
65
75
  export function encodeFailure(failure: FlowFailure): Response {
66
- return Response.json(
67
- { data: null, error: failure.error } satisfies FailureEnvelope,
68
- { status: statusForFailure(failure) },
69
- );
76
+ return Response.json({ data: null, error: failure.error } satisfies FailureEnvelope, {
77
+ status: statusForFailure(failure),
78
+ });
70
79
  }
71
80
 
72
81
  /**
@@ -15,13 +15,7 @@ import {
15
15
  } from "./http-parse.ts";
16
16
 
17
17
  /** Context property names sucrose tracks. */
18
- const CONTEXT_KEYS = [
19
- "body",
20
- "query",
21
- "params",
22
- "headers",
23
- "cookie",
24
- ] as const;
18
+ const CONTEXT_KEYS = ["body", "query", "params", "headers", "cookie"] as const;
25
19
 
26
20
  type ContextKey = (typeof CONTEXT_KEYS)[number];
27
21
 
@@ -58,8 +52,7 @@ export function sucrose(options: SucroseOptions): ContextInference {
58
52
  }
59
53
 
60
54
  const method = (options.method ?? "GET").toUpperCase();
61
- const bodyMethod =
62
- method !== "GET" && method !== "HEAD" && method !== "DELETE";
55
+ const bodyMethod = method !== "GET" && method !== "HEAD" && method !== "DELETE";
63
56
 
64
57
  // OKE handlers receive assembled input as arg0 — body methods always
65
58
  // parse JSON. AoT still drops query/headers/cookie when unused.
@@ -121,13 +114,12 @@ export function analyseFunction(
121
114
  inferFromDestructure(parameter, inference);
122
115
  }
123
116
 
124
- function splitFunction(
125
- source: string,
126
- ): { parameter: string | undefined; body: string | undefined } {
117
+ function splitFunction(source: string): {
118
+ parameter: string | undefined;
119
+ body: string | undefined;
120
+ } {
127
121
  // async (a, b) => … | (a) => … | function (a, b) { … }
128
- const arrow = source.match(
129
- /^(?:async\s*)?(?:\(([^)]*)\)|([a-zA-Z_$][\w$]*))\s*=>\s*([\s\S]*)$/,
130
- );
122
+ const arrow = source.match(/^(?:async\s*)?(?:\(([^)]*)\)|([a-zA-Z_$][\w$]*))\s*=>\s*([\s\S]*)$/);
131
123
  if (arrow) {
132
124
  return {
133
125
  parameter: (arrow[1] ?? arrow[2] ?? "").trim(),
@@ -177,11 +169,7 @@ function collectAliases(parameter: string, body: string): string[] {
177
169
  return aliases;
178
170
  }
179
171
 
180
- function inferFromAlias(
181
- alias: string,
182
- body: string,
183
- inference: MutableInference,
184
- ): void {
172
+ function inferFromAlias(alias: string, body: string, inference: MutableInference): void {
185
173
  for (const key of CONTEXT_KEYS) {
186
174
  if (inference[key]) continue;
187
175
  const access = new RegExp(
@@ -193,10 +181,7 @@ function inferFromAlias(
193
181
  }
194
182
  }
195
183
 
196
- function inferFromDestructure(
197
- parameter: string,
198
- inference: MutableInference,
199
- ): void {
184
+ function inferFromDestructure(parameter: string, inference: MutableInference): void {
200
185
  if (!parameter.includes("{")) return;
201
186
  for (const key of CONTEXT_KEYS) {
202
187
  const re = new RegExp(`\\b${key}\\b`);
@@ -206,10 +191,7 @@ function inferFromDestructure(
206
191
  }
207
192
  }
208
193
 
209
- function isContextPassedToFunction(
210
- aliases: readonly string[],
211
- body: string,
212
- ): boolean {
194
+ function isContextPassedToFunction(aliases: readonly string[], body: string): boolean {
213
195
  for (const alias of aliases) {
214
196
  if (alias.length === 0) continue;
215
197
  // Word-boundary safe: `(…, alias, …)` or `(alias)` as a complete argument
@@ -218,9 +200,7 @@ function isContextPassedToFunction(
218
200
  );
219
201
  if (re.test(body)) return true;
220
202
  // shorthand: fn(alias)
221
- const exact = new RegExp(
222
- `\\(\\s*${escapeRegExp(alias)}\\s*\\)`,
223
- );
203
+ const exact = new RegExp(`\\(\\s*${escapeRegExp(alias)}\\s*\\)`);
224
204
  if (exact.test(body)) return true;
225
205
  }
226
206
  return false;
@@ -1,61 +1,82 @@
1
1
  /**
2
- * `defineConfig` fills missing `stack` pins from `prod`.
2
+ * `defineConfig` fills missing `docker` pins from `prod` and normalizes legacy keys.
3
3
  */
4
4
 
5
5
  import { describe, expect, test } from "bun:test";
6
- import { defineConfig, fillStackFromProd } from "./index.ts";
6
+ import { defineConfig, fillDockerFromProd, normalizeEnvDriverMap } from "./index.ts";
7
7
 
8
- describe("fillStackFromProd / defineConfig", () => {
9
- test("copies prod onto stack when stack is omitted", () => {
10
- const filled = fillStackFromProd({
11
- dev: "sqlite",
8
+ describe("fillDockerFromProd / defineConfig", () => {
9
+ test("copies prod onto docker when docker is omitted", () => {
10
+ const filled = fillDockerFromProd({
11
+ local: "sqlite",
12
12
  prod: "postgres",
13
13
  });
14
- expect(filled?.stack).toBe("postgres");
15
- expect(filled?.dev).toBe("sqlite");
14
+ expect(filled?.docker).toBe("postgres");
15
+ expect(filled?.local).toBe("sqlite");
16
16
  });
17
17
 
18
- test("does not overwrite an explicit stack pin", () => {
18
+ test("does not overwrite an explicit docker pin", () => {
19
19
  expect(
20
- fillStackFromProd({
21
- dev: "sqlite",
22
- stack: "memory",
20
+ fillDockerFromProd({
21
+ local: "sqlite",
22
+ docker: "memory",
23
23
  prod: "postgres",
24
- })?.stack,
24
+ })?.docker,
25
25
  ).toBe("memory");
26
26
  });
27
27
 
28
- test("vault sopsstack dotenv", () => {
29
- expect(
30
- fillStackFromProd({ dev: "dotenv", prod: "sops" }, { vault: true })
31
- ?.stack,
32
- ).toBe("dotenv");
28
+ test("vault proddocker copies the prod driver", () => {
29
+ expect(fillDockerFromProd({ local: "dotenv", prod: "openbao" })?.docker).toBe("openbao");
33
30
  });
34
31
 
35
32
  test("defineConfig fills every element from prod", () => {
36
33
  const cfg = defineConfig({
37
34
  drivers: {
38
35
  store: {
39
- sql: { dev: "sqlite", prod: "postgres" },
40
- kv: { dev: "memory", prod: "redis" },
41
- files: { dev: "fs", prod: "s3" },
36
+ sql: { local: "sqlite", prod: "postgres" },
37
+ kv: { local: "memory", prod: "redis" },
38
+ files: { local: "fs", prod: "s3" },
42
39
  },
43
- signal: { dev: "memory", prod: "postgres" },
44
- clock: { dev: "memory", prod: "postgres" },
45
- vault: { dev: "dotenv", prod: "sops" },
40
+ signal: { local: "memory", prod: "postgres" },
41
+ clock: { local: "memory", prod: "postgres" },
42
+ vault: { local: "dotenv", prod: "openbao" },
46
43
  channel: {
47
- email: { dev: "console", prod: "smtp" },
44
+ email: { local: "console", prod: "smtp" },
45
+ },
46
+ ai: { local: "mock", prod: "anthropic" },
47
+ },
48
+ });
49
+ expect(cfg.drivers?.store?.sql?.docker).toBe("postgres");
50
+ expect(cfg.drivers?.store?.kv?.docker).toBe("redis");
51
+ expect(cfg.drivers?.store?.files?.docker).toBe("s3");
52
+ expect(cfg.drivers?.signal?.docker).toBe("postgres");
53
+ expect(cfg.drivers?.clock?.docker).toBe("postgres");
54
+ expect(cfg.drivers?.vault?.docker).toBe("openbao");
55
+ expect(cfg.drivers?.channel?.email?.docker).toBe("smtp");
56
+ expect(cfg.drivers?.ai?.docker).toBe("anthropic");
57
+ });
58
+
59
+ test("normalizeEnvDriverMap maps legacy keys", () => {
60
+ const normalized = normalizeEnvDriverMap({
61
+ dev: "sqlite",
62
+ stack: "postgres",
63
+ prod: "postgres",
64
+ });
65
+ expect(normalized?.local).toBe("sqlite");
66
+ expect(normalized?.docker).toBe("postgres");
67
+ expect((normalized as { dev?: string } | undefined)?.dev).toBeUndefined();
68
+ expect((normalized as { stack?: string } | undefined)?.stack).toBeUndefined();
69
+ });
70
+
71
+ test("defineConfig accepts legacy driver-map keys", () => {
72
+ const cfg = defineConfig({
73
+ drivers: {
74
+ store: {
75
+ sql: { dev: "sqlite", stack: "postgres", prod: "postgres" } as never,
48
76
  },
49
- ai: { dev: "mock", prod: "anthropic" },
50
77
  },
51
78
  });
52
- expect(cfg.drivers?.store?.sql?.stack).toBe("postgres");
53
- expect(cfg.drivers?.store?.kv?.stack).toBe("redis");
54
- expect(cfg.drivers?.store?.files?.stack).toBe("s3");
55
- expect(cfg.drivers?.signal?.stack).toBe("postgres");
56
- expect(cfg.drivers?.clock?.stack).toBe("postgres");
57
- expect(cfg.drivers?.vault?.stack).toBe("dotenv");
58
- expect(cfg.drivers?.channel?.email?.stack).toBe("smtp");
59
- expect(cfg.drivers?.ai?.stack).toBe("anthropic");
79
+ expect(cfg.drivers?.store?.sql?.local).toBe("sqlite");
80
+ expect(cfg.drivers?.store?.sql?.docker).toBe("postgres");
60
81
  });
61
82
  });