okengine 0.2.6 → 0.3.2

package/src/term.ts

@@ -6,9 +6,7 @@
  */
 
 /** Whether ANSI color should be applied. */
-export function termColorEnabled(
-  stream: { readonly isTTY?: boolean } = process.stdout,
-): boolean {
+export function termColorEnabled(stream: { readonly isTTY?: boolean } = process.stdout): boolean {
   if (process.env["NO_COLOR"] !== undefined) return false;
   if (process.env["FORCE_COLOR"] === "0") return false;
   if (process.env["FORCE_COLOR"]) return true;
@@ -70,7 +68,7 @@ export type DevHeroElement = {
 
 /** Shared options for the `oke dev` hero / banner. */
 export type DevHeroMeta = {
-  /** `local` · `local-server` · `test` · `production` */
+  /** `local` · `docker` · `test` · `production` */
   readonly profile?: string;
   /** Data plane: `local` · `production` */
   readonly runtimeEnv?: string;
@@ -88,20 +86,20 @@ export type DevHeroMeta = {
  *
  * @param color - Color on/off
  */
-export function formatOkeWordmark(
-  color: boolean = termColorEnabled(),
-): string {
+export function formatOkeWordmark(color: boolean = termColorEnabled()): string {
   const s = termStyle(color);
   const ink = `${s.green}${s.bold}`;
   const r = s.reset;
-  return [
-    `${ink}   ██████╗ ██╗  ██╗███████╗${r}`,
-    `${ink}  ██╔═══██╗██║ ██╔╝██╔════╝${r}`,
-    `${ink}  ██║   ██║█████╔╝ █████╗  ${r}`,
-    `${ink}  ██║   ██║██╔═██╗ ██╔══╝  ${r}`,
-    `${ink}  ╚██████╔╝██║  ██╗███████╗${r}`,
-    `${ink}   ╚═════╝ ╚═╝  ╚═╝╚══════╝${r}`,
-  ].join("\n") + "\n";
+  return (
+    [
+      `${ink}   ██████╗ ██╗  ██╗███████╗${r}`,
+      `${ink}  ██╔═══██╗██║ ██╔╝██╔════╝${r}`,
+      `${ink}  ██║   ██║█████╔╝ █████╗  ${r}`,
+      `${ink}  ██║   ██║██╔═██╗ ██╔══╝  ${r}`,
+      `${ink}  ╚██████╔╝██║  ██╗███████╗${r}`,
+      `${ink}   ╚═════╝ ╚═╝  ╚═╝╚══════╝${r}`,
+    ].join("\n") + "\n"
+  );
 }
 
 /**
@@ -109,39 +107,27 @@ export function formatOkeWordmark(
  *
  * @param options - Snapshot fields from {@link import("./cli/hero-meta.ts").buildDevHeroSnapshot}
  */
-export function formatDevHeroDetails(
-  options: DevHeroMeta = {},
-): string {
+export function formatDevHeroDetails(options: DevHeroMeta = {}): string {
   const s = termStyle(options.color ?? termColorEnabled());
   const bar = `${s.dim}│${s.reset}`;
   const label = (name: string) => `${s.dim}${name.padEnd(9)}${s.reset}`;
   const lines: string[] = [];
   if (options.profile) {
-    lines.push(
-      `${bar}  ${label("profile")} ${s.cyan}${options.profile}${s.reset}`,
-    );
+    lines.push(`${bar}  ${label("profile")} ${s.cyan}${options.profile}${s.reset}`);
   }
   if (options.runtimeEnv) {
-    lines.push(
-      `${bar}  ${label("env")} ${s.cyan}${options.runtimeEnv}${s.reset}`,
-    );
+    lines.push(`${bar}  ${label("env")} ${s.cyan}${options.runtimeEnv}${s.reset}`);
   }
   if (options.system) {
-    lines.push(
-      `${bar}  ${label("system")} ${s.dim}${options.system}${s.reset}`,
-    );
+    lines.push(`${bar}  ${label("system")} ${s.dim}${options.system}${s.reset}`);
   }
   const elements = options.elements ?? [];
   if (elements.length > 0) {
     lines.push(`${bar}  ${s.dim}elements${s.reset}`);
     for (const row of elements) {
       const idle = row.detail === "—";
-      const detail = idle
-        ? `${s.dim}—${s.reset}`
-        : `${s.cyan}${row.detail}${s.reset}`;
-      lines.push(
-        `${bar}  ${s.dim}${row.element.padEnd(9)}${s.reset} ${detail}`,
-      );
+      const detail = idle ? `${s.dim}—${s.reset}` : `${s.cyan}${row.detail}${s.reset}`;
+      lines.push(`${bar}  ${s.dim}${row.element.padEnd(9)}${s.reset} ${detail}`);
     }
   }
   return lines.length > 0 ? `${lines.join("\n")}\n` : "";
@@ -164,9 +150,7 @@ export function formatDevBanner(options: DevHeroMeta = {}): string {
     `${s.green}◇${s.reset}  Starting`,
   ];
   if (options.watching !== false) {
-    lines.push(
-      `${bar}  ${s.dim}watching — client types regenerate on save${s.reset}`,
-    );
+    lines.push(`${bar}  ${s.dim}watching — client types regenerate on save${s.reset}`);
   }
   lines.push(formatDevHeroDetails(options).trimEnd());
   lines.push(bar);
@@ -196,10 +180,7 @@ export function formatServiceLine(
  * @param url - App base URL
  * @param color - Color on/off
  */
-export function formatAppReadyLine(
-  url: string,
-  color: boolean = termColorEnabled(),
-): string {
+export function formatAppReadyLine(url: string, color: boolean = termColorEnabled()): string {
   const s = termStyle(color);
   return `${s.green}●${s.reset}  ${s.dim}App${s.reset}      ${s.cyan}${url}${s.reset}\n`;
 }
@@ -245,9 +226,7 @@ export function formatDevHero(
  *
  * @param color - Color on/off
  */
-export function formatDevLogSeparator(
-  color: boolean = termColorEnabled(),
-): string {
+export function formatDevLogSeparator(color: boolean = termColorEnabled()): string {
   const s = termStyle(color);
   return (
     `${s.dim}│${s.reset}\n` +
@@ -263,10 +242,7 @@ export function formatDevLogSeparator(
  * @param message - Status text
  * @param color - Color on/off
  */
-export function formatStatusLine(
-  message: string,
-  color: boolean = termColorEnabled(),
-): string {
+export function formatStatusLine(message: string, color: boolean = termColorEnabled()): string {
   const s = termStyle(color);
   return `${s.dim}│${s.reset}  ${s.dim}${message}${s.reset}\n`;
 }
@@ -314,35 +290,24 @@ export function formatDevLogTime(at: Date = new Date()): string {
  *
  * @param options - Surface, method, path, flow, timing, status
  */
-export function formatRequestLine(
-  options: {
-    readonly surface: DevLogSurface;
-    readonly method: string;
-    readonly path: string;
-    readonly flow?: string;
-    readonly status: number;
-    readonly ms: number;
-    /** Instant for date/time columns (default now). */
-    readonly at?: Date;
-    readonly color?: boolean;
-  },
-): string {
+export function formatRequestLine(options: {
+  readonly surface: DevLogSurface;
+  readonly method: string;
+  readonly path: string;
+  readonly flow?: string;
+  readonly status: number;
+  readonly ms: number;
+  /** Instant for date/time columns (default now). */
+  readonly at?: Date;
+  readonly color?: boolean;
+}): string {
   const s = termStyle(options.color ?? termColorEnabled());
   const at = options.at ?? new Date();
   const date = formatDevLogDate(at);
   const time = formatDevLogTime(at);
   const surfaceColor =
-    options.surface === "App"
-      ? s.green
-      : options.surface === "Console"
-        ? s.magenta
-        : s.cyan;
-  const statusColor =
-    options.status >= 500
-      ? s.red
-      : options.status >= 400
-        ? s.yellow
-        : s.green;
+    options.surface === "App" ? s.green : options.surface === "Console" ? s.magenta : s.cyan;
+  const statusColor = options.status >= 500 ? s.red : options.status >= 400 ? s.yellow : s.green;
   const methodRaw = options.method.toUpperCase();
   const methodColor =
     methodRaw === "GET"
@@ -355,9 +320,7 @@ export function formatRequestLine(
             ? s.red
             : s.cyan;
   const method = methodRaw.padEnd(4);
-  const path = options.path.length > 28
-    ? `${options.path.slice(0, 27)}…`
-    : options.path.padEnd(28);
+  const path = options.path.length > 28 ? `${options.path.slice(0, 27)}…` : options.path.padEnd(28);
   const flow = (options.flow ?? "—").padEnd(22);
   const ms = `${options.ms}ms`.padStart(6);
   return (
@@ -378,34 +341,25 @@ export function formatRequestLine(
  *
  * @param options - Project name, services, driver labels
  */
-export function formatStackSummary(
-  options: {
-    readonly project: string;
-    readonly services: readonly StackSummaryService[];
-    /** Drivers the host app will use (e.g. `postgres`, `redis`). */
-    readonly appDrivers?: readonly string[];
-    readonly color?: boolean;
-  },
-): string {
+export function formatStackSummary(options: {
+  readonly project: string;
+  readonly services: readonly StackSummaryService[];
+  /** Drivers the host app will use (e.g. `postgres`, `redis`). */
+  readonly appDrivers?: readonly string[];
+  readonly color?: boolean;
+}): string {
   const s = termStyle(options.color ?? termColorEnabled());
   const bar = `${s.dim}│${s.reset}`;
   const pad = (label: string) => label.padEnd(8);
   const lines: string[] = [
-    `${s.green}◇${s.reset}  ${s.bold}Stack${s.reset}     ${s.cyan}${options.project}${s.reset}`,
+    `${s.green}◇${s.reset}  ${s.bold}Docker${s.reset}     ${s.cyan}${options.project}${s.reset}`,
   ];
   for (const svc of options.services) {
-    lines.push(
-      `${bar}  ${s.dim}${pad(svc.label)}${s.reset}  ${s.cyan}:${svc.hostPort}${s.reset}`,
-    );
+    lines.push(`${bar}  ${s.dim}${pad(svc.label)}${s.reset}  ${s.cyan}:${svc.hostPort}${s.reset}`);
   }
   const drivers = options.appDrivers ?? [];
-  const appDetail =
-    drivers.length > 0
-      ? `host Bun · ${drivers.join(" + ")}`
-      : "host Bun";
-  lines.push(
-    `${bar}  ${s.dim}${pad("app")}${s.reset}  ${s.dim}${appDetail}${s.reset}`,
-  );
+  const appDetail = drivers.length > 0 ? `host Bun · ${drivers.join(" + ")}` : "host Bun";
+  lines.push(`${bar}  ${s.dim}${pad("app")}${s.reset}  ${s.dim}${appDetail}${s.reset}`);
   lines.push(bar);
   return `${lines.join("\n")}\n`;
 }
@@ -416,10 +370,7 @@ export function formatStackSummary(
  * @param code - Hex claim code
  * @param color - Color on/off
  */
-export function formatClaimNote(
-  code: string,
-  color: boolean = termColorEnabled(),
-): string {
+export function formatClaimNote(code: string, color: boolean = termColorEnabled()): string {
   const s = termStyle(color);
   const bar = `${s.dim}│${s.reset}`;
   const title = "Claim code";

package/src/test/create-test-app.test.ts

@@ -96,19 +96,14 @@ describe("createTestApp — four-applications surface", () => {
     const u = await t.auth.loginAs({ scopes: ["order:create"] });
     expect(u.verified).toBe(true);
 
-    const { data, error } = await t.api.orders!.create!(
-      { sku: "COFFEE", qty: 2 },
-      { as: u },
-    );
+    const { data, error } = await t.api.orders!.create!({ sku: "COFFEE", qty: 2 }, { as: u });
     expect(error).toBeNull();
     expect(data).toMatchObject({ id: expect.any(String) });
 
     await t.signals.drain();
     const sent = t.channels.sent();
     expect(sent.length).toBeGreaterThanOrEqual(1);
-    expect(
-      sent.some((s) => "template" in s && s.template === "order-confirmed"),
-    ).toBe(true);
+    expect(sent.some((s) => "template" in s && s.template === "order-confirmed")).toBe(true);
 
     await t.clock.advance("2m");
     expect(await t.cron.run("expire-stale")).toBe(true);
@@ -116,9 +111,7 @@ describe("createTestApp — four-applications surface", () => {
     const events = await t.runs();
     expect(events.some((e) => e.flow === "orders.create")).toBe(true);
     const createRun = events.find((e) => e.flow === "orders.create")!;
-    expect(t.effects.of(createRun.id).some((e) => e.kind === "emit")).toBe(
-      true,
-    );
+    expect(t.effects.of(createRun.id).some((e) => e.kind === "emit")).toBe(true);
 
     await t.close();
   });
@@ -142,10 +135,7 @@ describe("createTestApp — vault gaps still fail boot", () => {
 
     try {
       await createTestApp(app, {
-        secrets: [
-          vault("A", { description: "alpha" }),
-          vault("B", { description: "beta" }),
-        ],
+        secrets: [vault("A", { description: "alpha" }), vault("B", { description: "beta" })],
         boot: {
           env: "prod",
           vault: { allowDevFallbacks: false, chain: [] },

package/src/test/create-test-app.ts

@@ -22,15 +22,8 @@ import {
   type ChannelInbox,
   type ChannelInboxEntry,
 } from "../drivers/index.ts";
-import {
-  createAiRuntime,
-  type AiPromptDecl,
-  type AiRuntime,
-} from "../elements/ai.ts";
-import {
-  createChannelRuntime,
-  type DeliveryReceipt,
-} from "../elements/channel.ts";
+import { createAiRuntime, type AiPromptDecl, type AiRuntime } from "../elements/ai.ts";
+import { createChannelRuntime, type DeliveryReceipt } from "../elements/channel.ts";
 import { createTestClockRuntime } from "../elements/clock.ts";
 import type { GateDecl } from "../elements/gate.ts";
 import type { SignalDecl } from "../elements/signal.ts";
@@ -39,6 +32,7 @@ import type { OkeApp } from "../kernel/app.ts";
 import type { BootOptions } from "../kernel/boot.ts";
 import type { EffectEntry } from "../kernel/effects.ts";
 import { fail, type FlowFailure } from "../kernel/errors.ts";
+import { isJsonResult } from "../kernel/fx.ts";
 import { isFlowFailure } from "../kernel/hooks.ts";
 import type { ResolvedPrincipal } from "../kernel/pipeline.ts";
 import type { InternalTrigger, Trigger } from "../kernel/triggers.ts";
@@ -158,7 +152,7 @@ export interface TestApp<App extends OkeApp = OkeApp> {
 export type TestApiCall = (
   input?: unknown,
   opts?: TestCallOptions,
-) => Promise<{ data: unknown; error: FlowFailure["error"] | null }>;
+) => Promise<{ data: unknown; error: FlowFailure["error"] | null; meta?: Record<string, unknown> }>;
 
 /** Loose API proxy — units/flows resolve at runtime from the booted app. */
 export type TestApi = Record<string, Record<string, TestApiCall>>;
@@ -199,16 +193,13 @@ export async function createTestApp<App extends OkeApp>(
     defaultLocale: "ar",
     ...(appOpts.channel ?? {}),
     ...(options.boot?.channel ?? {}),
-    drivers: options.boot?.channel?.drivers ?? [
-      openConsoleChannel({ inbox }),
-    ],
+    drivers: options.boot?.channel?.drivers ?? [openConsoleChannel({ inbox })],
     now: () => clock.now(),
   });
   const ai = createAiRuntime({
     ...(appOpts.ai ?? {}),
     ...(options.boot?.ai ?? {}),
-    defaultDriver:
-      options.boot?.ai?.defaultDriver ?? createMockAiDriver(mockResponses),
+    defaultDriver: options.boot?.ai?.defaultDriver ?? createMockAiDriver(mockResponses),
     now: () => clock.now(),
   });
 
@@ -351,11 +342,13 @@ function createTestApi(app: OkeApp, now: () => number): TestApi {
     flowName: string,
     input: unknown,
     opts?: TestCallOptions,
-  ): Promise<{ data: unknown; error: FlowFailure["error"] | null }> => {
+  ): Promise<{
+    data: unknown;
+    error: FlowFailure["error"] | null;
+    meta?: Record<string, unknown>;
+  }> => {
     const flowDef =
-      app.flow(`${unit}.${flowName}`) ??
-      app.flow(flowName) ??
-      findFlowByUnit(app, unit, flowName);
+      app.flow(`${unit}.${flowName}`) ?? app.flow(flowName) ?? findFlowByUnit(app, unit, flowName);
     if (!flowDef) {
       return {
         data: null,
@@ -369,9 +362,7 @@ function createTestApi(app: OkeApp, now: () => number): TestApi {
     const principal = toPrincipal(opts?.as);
     const httpTrigger = flowDef.triggers.find((t) => t.kind === "http");
     const trigger: Trigger =
-      httpTrigger ??
-      flowDef.triggers[0] ??
-      ({ kind: "internal" } satisfies InternalTrigger);
+      httpTrigger ?? flowDef.triggers[0] ?? ({ kind: "internal" } satisfies InternalTrigger);
 
     const result = await app.execute(flowDef, input, trigger, {
       principal,
@@ -387,6 +378,13 @@ function createTestApi(app: OkeApp, now: () => number): TestApi {
     if (result.output !== undefined && isFlowFailure(result.output)) {
       return { data: null, error: result.output.error };
     }
+    if (isJsonResult(result.output)) {
+      return {
+        data: result.output.value,
+        error: null,
+        meta: result.output.meta,
+      };
+    }
     return { data: result.output ?? null, error: null };
   };
 
@@ -400,8 +398,7 @@ function createTestApi(app: OkeApp, now: () => number): TestApi {
             if (typeof flowName !== "string" || flowName === "then") {
               return undefined;
             }
-            return (input?: unknown, opts?: TestCallOptions) =>
-              call(unit, flowName, input, opts);
+            return (input?: unknown, opts?: TestCallOptions) => call(unit, flowName, input, opts);
           },
         },
       );
@@ -409,11 +406,7 @@ function createTestApi(app: OkeApp, now: () => number): TestApi {
   });
 }
 
-function findFlowByUnit(
-  app: OkeApp,
-  unit: string,
-  flowName: string,
-): ReturnType<OkeApp["flow"]> {
+function findFlowByUnit(app: OkeApp, unit: string, flowName: string): ReturnType<OkeApp["flow"]> {
   // Prefer $routes unit.flow → full flow name from bindings.
   const routes = app.$routes as Record<
     string,
@@ -439,7 +432,10 @@ function findFlowByUnit(
     }
   }
   for (const b of app.bindings) {
-    if (b.flow.unit === unit && (b.flow.name === flowName || b.flow.name.endsWith(`.${flowName}`))) {
+    if (
+      b.flow.unit === unit &&
+      (b.flow.name === flowName || b.flow.name.endsWith(`.${flowName}`))
+    ) {
       return b.flow;
     }
     // Auto-named flows: match export-style via name suffix after adopt.
@@ -515,9 +511,7 @@ function matchRestHeuristic(
   return undefined;
 }
 
-function toPrincipal(
-  as: TestUser | ResolvedPrincipal | undefined,
-): ResolvedPrincipal | undefined {
+function toPrincipal(as: TestUser | ResolvedPrincipal | undefined): ResolvedPrincipal | undefined {
   if (!as) return undefined;
   if ("scopes" in as && as.scopes instanceof Set && "id" in as) {
     const u = as as TestUser;

package/src/test/provisions.integration.test.ts

@@ -22,9 +22,7 @@ describe("Provisions integration", () => {
     resetFlowSeq();
 
     const member = gate.policy("member", ({ auth }) => !!auth.verified);
-    const canOrder = gate.policy("order:create", ({ auth }) =>
-      auth.scopes.has("order:create"),
-    );
+    const canOrder = gate.policy("order:create", ({ auth }) => auth.scopes.has("order:create"));
     const stripeKey = vault("STRIPE_KEY", {
       description: "Payments gateway key",
       dev: "sk_test_local",
@@ -133,10 +131,7 @@ describe("Provisions integration", () => {
     expect(denied.error?.code).toBe("Unauthorized");
 
     const u = await t.auth.loginAs({ scopes: ["order:create"] });
-    const { data, error } = await t.api.orders!.create!(
-      { sku: "COFFEE", qty: 2 },
-      { as: u },
-    );
+    const { data, error } = await t.api.orders!.create!({ sku: "COFFEE", qty: 2 }, { as: u });
     expect(error).toBeNull();
     expect(data).toMatchObject({ id: expect.any(String) });
 
@@ -159,10 +154,7 @@ describe("Provisions integration", () => {
     // First orders.create is the anonymous deny (stops at member); the
     // authenticated success evaluates the full chain.
     const createRun = events.find(
-      (e) =>
-        e.flow === "orders.create" &&
-        e.gates.includes("order:create") &&
-        e.error == null,
+      (e) => e.flow === "orders.create" && e.gates.includes("order:create") && e.error == null,
     );
     expect(createRun).toBeDefined();
     expect(createRun!.gates).toEqual(["member", "order:create"]);

package/src/upgrade/codemods.test.ts

@@ -5,6 +5,8 @@
 import { describe, expect, test } from "bun:test";
 import {
   CODEMODS,
+  rewriteConfigEnvKeys,
+  rewriteFromStackMarkers,
   runCodemods,
   validateCodemodRegistry,
   type Codemod,
@@ -45,14 +47,31 @@ describe("codemod registry", () => {
         from: "0.0.0",
         to: "0.0.1",
         description: "rename demo",
-        apply: async () => [
-          { path: "src/x.ts", before: "old", after: "new" },
-        ],
+        apply: async () => [{ path: "src/x.ts", before: "old", after: "new" }],
       },
     ];
     const changes = await runCodemods("/tmp", registry);
-    expect(changes).toEqual([
-      { path: "src/x.ts", before: "old", after: "new" },
-    ]);
+    expect(changes).toEqual([{ path: "src/x.ts", before: "old", after: "new" }]);
+  });
+
+  test("rewriteConfigEnvKeys renames driver-map keys", () => {
+    const after = rewriteConfigEnvKeys(`sql: {
+  dev: "sqlite",
+  stack: "postgres",
+  prod: "postgres",
+}`);
+    expect(after).toContain('local: "sqlite"');
+    expect(after).toContain('docker: "postgres"');
+    expect(after).not.toMatch(/(^|[^\w.])dev\s*:/);
+    expect(after).not.toMatch(/(^|[^\w.])stack\s*:/);
+  });
+
+  test("rewriteFromStackMarkers renames vault helpers", () => {
+    const after = rewriteFromStackMarkers(
+      `dev: vault.fromStack("store.sql") // __oke_from_stack__`,
+    );
+    expect(after).toContain("fromDocker");
+    expect(after).toContain("__oke_from_docker__");
+    expect(after).not.toContain("fromStack");
   });
 });

package/src/upgrade/codemods.ts

@@ -6,6 +6,9 @@
  * registry is the checklist.
  */
 
+import { readdir } from "node:fs/promises";
+import { join, relative, resolve } from "node:path";
+
 /** One file rewrite produced by a codemod. */
 export interface CodemodChange {
   /** Path relative to the project root. */
@@ -35,10 +38,120 @@ export interface Codemod {
 }
 
 /**
- * Built-in transforms. Empty until the next intentional breaking release —
- * the infrastructure is the gate; entries are added with the break.
+ * Rewrite driver-map keys `dev:` → `local:` and `stack:` → `docker:`.
+ *
+ * Vault `dev:` fallbacks are intentionally excluded — callers pass only
+ * `oke.config.*` paths into this rewriter.
+ *
+ * @param source - File contents
+ */
+export function rewriteConfigEnvKeys(source: string): string {
+  return source
+    .replace(/(^|[^\w.])dev(\s*:)/gm, "$1local$2")
+    .replace(/(^|[^\w.])stack(\s*:)/gm, "$1docker$2");
+}
+
+/**
+ * Rewrite removed vault stack markers to docker equivalents.
+ *
+ * @param source - File contents
+ */
+export function rewriteFromStackMarkers(source: string): string {
+  return source
+    .replace(/\bfromStack\b/g, "fromDocker")
+    .replace(/\bFROM_STACK_PREFIX\b/g, "FROM_DOCKER_PREFIX")
+    .replace(/\bisFromStack\b/g, "isFromDocker")
+    .replace(/\bfromStackRole\b/g, "fromDockerRole")
+    .replace(/__oke_from_stack__/g, "__oke_from_docker__");
+}
+
+/**
+ * Collect `oke.config.*` files under a project root.
+ *
+ * @param cwd - Project root
+ */
+async function collectConfigCandidates(cwd: string): Promise<string[]> {
+  const out: string[] = [];
+  for (const name of ["oke.config.ts", "oke.config.mts", "oke.config.js"]) {
+    const path = resolve(cwd, name);
+    if (await Bun.file(path).exists()) out.push(path);
+  }
+  return out;
+}
+
+/**
+ * Collect TypeScript sources that may reference `fromStack`.
+ *
+ * @param cwd - Project root
+ */
+async function collectVaultCandidates(cwd: string): Promise<string[]> {
+  const out: string[] = [];
+  const roots = ["src", "app"];
+  for (const root of roots) {
+    const dir = resolve(cwd, root);
+    try {
+      await walkTs(dir, out);
+    } catch {
+      // missing dir
+    }
+  }
+  return out;
+}
+
+/**
+ * @param dir - Directory
+ * @param out - Accumulator of absolute paths
+ */
+async function walkTs(dir: string, out: string[]): Promise<void> {
+  const entries = await readdir(dir, { withFileTypes: true });
+  for (const entry of entries) {
+    const path = join(dir, entry.name);
+    if (entry.isDirectory()) {
+      if (entry.name === "node_modules" || entry.name === ".git") continue;
+      await walkTs(path, out);
+    } else if (entry.isFile() && /\.(ts|mts|tsx)$/.test(entry.name)) {
+      out.push(path);
+    }
+  }
+}
+
+/**
+ * Built-in transforms.
  */
-export const CODEMODS: readonly Codemod[] = [];
+export const CODEMODS: readonly Codemod[] = [
+  {
+    id: "0.2.7-config-env-local-docker",
+    from: "0.2.6",
+    to: "0.2.7",
+    description: "Rename driver-map keys dev→local, stack→docker; fromStack→fromDocker",
+    async apply(cwd) {
+      const changes: CodemodChange[] = [];
+      for (const path of await collectConfigCandidates(cwd)) {
+        const before = await Bun.file(path).text();
+        const after = rewriteConfigEnvKeys(before);
+        if (after !== before) {
+          changes.push({
+            path: relative(cwd, path) || path,
+            before,
+            after,
+          });
+        }
+      }
+      for (const path of await collectVaultCandidates(cwd)) {
+        const before = await Bun.file(path).text();
+        const after = rewriteFromStackMarkers(before);
+        if (after !== before) {
+          changes.push({
+            path: relative(cwd, path) || path,
+            before,
+            after,
+          });
+        }
+      }
+      return changes;
+    },
+  },
+];
 
 /**
  * Validate the registry (unique ids, non-empty metadata, apply present).

package/src/validation/standard-schema.test.ts

@@ -31,9 +31,7 @@ describe("Standard Schema — four libraries", () => {
       expect(bad.failure.data).toBeNull();
       expect(bad.failure.error.code).toBe(VALIDATION_ERROR_CODE);
       expect(bad.failure.error.data.issues.length).toBeGreaterThan(0);
-      expect(bad.failure.error.data.issues[0]?.message.length).toBeGreaterThan(
-        0,
-      );
+      expect(bad.failure.error.data.issues[0]?.message.length).toBeGreaterThan(0);
     }
   });
 
@@ -82,8 +80,7 @@ describe("Standard Schema — four libraries", () => {
     expect(bad.ok).toBe(false);
     if (!bad.ok) {
       expect(bad.failure.error.code).toBe(VALIDATION_ERROR_CODE);
-      expect(bad.failure.error.data.issues.some((i) => i.path.includes("seats")))
-        .toBe(true);
+      expect(bad.failure.error.data.issues.some((i) => i.path.includes("seats"))).toBe(true);
     }
   });