okengine 0.21.1 → 0.23.0

package/AGENTS.md

@@ -55,6 +55,13 @@ We build only what genuinely does not exist: the effect system, the Manifest and
 
 A direct `node:` import (or any other side-channel I/O) in element or flow code is a **defect**. `fx` is the single door to the outside world; effects are inferred from what a Flow touches through it. Deterministic tests, least privilege, cache invalidation, live queries, and durability all depend on this invariant.
 
+## AI
+
+- `fx.ask` runs a prompt (repair, budgets). `fx.run` runs an agent (`maxSteps`, `maxCostPerRun`, `stopReason`). `fx.decide` runs a decision.
+- A tool with `approval` requires `durable: true`. Resolve it in the Console or on the approval routes. Do not resolve it from MCP.
+- Stream with `return fx.json.stream(fx.run(agent, input, { stream: true }))`. Follow with `GET /agent/runs/:runId/events` (`Last-Event-ID`). Client: `okengine/client/agent`. React: `useAgentRun`.
+- `fx.decide` takes exactly one of `review` or `onUncertain: "abstain"`. Review only inside a durable non-HTTP Flow (emit to a consumer). Autonomy needs `{ maxError, audit }` and comes only from `oke-decisions.lock.json` (`oke eval --certify` / `oke decide promote`).
+
 ## Ports
 
 | Port     | Surface              |
@@ -71,13 +78,13 @@ Mnemonic: O·K·E = 6·5·3.
 | Budget                | Limit   |
 | --------------------- | ------- |
 | Kernel (edge profile) | < 17 kB |
-| Client runtime        | < 5 kB  |
+| Client runtime        | < 6 kB  |
 | Cold start on Bun     | < 75 ms |
 | p99 routing overhead  | < 1 ms  |
 
-A regression fails the build. Claims we cannot measure, we do not make.
+A regression fails the build. An absolute sample that can still double and stay under its cap (cold start today) also fails at 2× the last committed value. Claims we cannot measure, we do not make.
 
-After changing `src/kernel/`, `src/client/`, `src/compiler/`, `src/validation/`, or `src/release/limits.ts` / `measure.ts`, run `bun run budgets:core` (kernel edge + client gzip) before claiming done. Do not raise the published 17 kB / 5 kB caps without a measured before/after and an Unreleased changelog note; prefer lazy-loading off the edge graph.
+After changing `src/kernel/`, `src/client/`, `src/compiler/`, `src/validation/`, or `src/release/limits.ts` / `measure.ts`, run `bun run budgets:core` (kernel edge + client gzip) before claiming done. Do not raise the published 17 kB / 6 kB caps without a measured before/after and an Unreleased changelog note; prefer lazy-loading off the edge graph.
 
 ## Package shape
 
@@ -103,7 +110,7 @@ Engine: Bun `>=1.4.2`.
 
 ## After every implementation
 
-Before claiming work done: run [`.agents/skills/oke-ship`](.agents/skills/oke-ship/SKILL.md) — append notes to `changelog.md` under `## Unreleased` (never under a shipped `## v…` section), and update site docs via [`.agents/skills/oke-docs`](.agents/skills/oke-docs/SKILL.md) for any user-facing surface. Version bump is separate: `bun run bump` promotes Unreleased into the next `## vX.Y.Z`.
+Before claiming work done: run [`.agents/skills/oke-ship`](.agents/skills/oke-ship/SKILL.md) — append notes to `changelog.md` under `## Unreleased` (never under a shipped `## v…` section), and update site docs via [`.agents/skills/oke-docs`](.agents/skills/oke-docs/SKILL.md) for any user-facing surface. Version bump is separate: `bun run bump` promotes Unreleased into the next `## vX.Y.Z`. Before that bump, run [`.agents/skills/oke-perf`](.agents/skills/oke-perf/SKILL.md).
 
 Do **NOT** run `bun run ci` automatically after finishing an implementation. Only run `bun run ci` when the user explicitly requests it.
 

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/NOTICE

@@ -0,0 +1,2 @@
+okengine
+Copyright 2026 Omq Khafi

package/README.md

@@ -15,7 +15,7 @@
 <p align="center">
   <a href="https://www.npmjs.com/package/okengine"><img alt="npm" src="https://shieldcn.dev/npm/okengine.svg?size=sm&variant=outline" /></a>
   <a href="https://jsr.io/@omqkhafi/okengine"><img alt="JSR" src="https://shieldcn.dev/jsr/@omqkhafi/okengine.svg?size=sm&variant=outline" /></a>
-  <a href="https://opensource.org/licenses/MIT"><img alt="MIT" src="https://shieldcn.dev/npm/license/okengine.svg?size=sm&variant=outline" /></a>
+  <a href="https://www.apache.org/licenses/LICENSE-2.0"><img alt="Apache-2.0" src="https://shieldcn.dev/npm/license/okengine.svg?size=sm&variant=outline" /></a>
   <a href="https://bun.sh"><img alt="Bun >=1.4.2" src="https://shieldcn.dev/badge/Bun-%3E%3D1.4.2.svg?logo=bun&size=sm&variant=outline" /></a>
   <a href="https://github.com/omqkhafi/okengine/actions"><img alt="CI" src="https://shieldcn.dev/github/ci/omqkhafi/okengine.svg?size=sm&variant=outline" /></a>
   <a href="https://github.com/omqkhafi/okengine/commits"><img alt="last commit" src="https://shieldcn.dev/github/last-commit/omqkhafi/okengine.svg?size=sm&variant=outline" /></a>
@@ -69,16 +69,22 @@ Mnemonic: **O·K·E = 6·5·3**.
 The starter already exports a health Flow — change it and save; App and Console update from the same Manifest:
 
 ```typescript
-// src/flows/main/health.ts — folders are the URL: `main/health.ts` → GET /health
-import { on, flow, http } from "okengine";
+// src/flows/main/shapes.ts
 import { z } from "zod";
 
+/** Liveness payload for `GET /health`. */
+export const HealthOut = z.object({
+  ok: z.literal(true),
+});
+
+// src/flows/main/health.ts — folders are the URL: `main/health.ts` → GET /health
+import { on, flow, http } from "okengine/http";
+
+import { HealthOut } from "./shapes";
+
 export const health = on(
-  http.get().public(),
-  flow({
-    out: z.object({ ok: z.literal(true) }),
-    do: () => ({ ok: true as const }),
-  }),
+  http.get({ out: HealthOut }).public(),
+  flow({ do: () => ({ ok: true as const }) }),
 );
 ```
 
@@ -148,4 +154,4 @@ Store apps sync schema with `oke db push|generate|migrate` (local `oke dev` auto
 
 ## License
 
-Pre-1.0. Published on [npm](https://www.npmjs.com/package/okengine) and [JSR](https://jsr.io/@omqkhafi/okengine). [MIT](https://opensource.org/licenses/MIT).
+Pre-1.0. Published on [npm](https://www.npmjs.com/package/okengine) and [JSR](https://jsr.io/@omqkhafi/okengine). [Apache-2.0](https://www.apache.org/licenses/LICENSE-2.0).

package/manifest.v1.schema.json

@@ -185,6 +185,11 @@
           "type": "array",
           "items": { "$ref": "#/$defs/FlowRef" },
           "uniqueItems": true
+        },
+        "decides": {
+          "type": "array",
+          "items": { "type": "string", "minLength": 1 },
+          "uniqueItems": true
         }
       }
     },
@@ -308,6 +313,16 @@
           "enum": ["user", "operator"]
         },
         "durable": { "type": "boolean" },
+        "idempotency": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["mode", "ttl"],
+          "properties": {
+            "mode": { "enum": ["off", "auto", "required"] },
+            "ttl": { "type": "string", "minLength": 1 }
+          }
+        },
+        "usesRaw": { "type": "boolean" },
         "live": {
           "type": "string",
           "description": "Live signal name when this flow streams delivery: live SSE."
@@ -656,6 +671,7 @@
         "version": { "type": "integer", "minimum": 1 },
         "evals": { "type": "string", "minLength": 1 },
         "budget": { "$ref": "#/$defs/AiPromptBudget" },
+        "repair": { "type": "integer", "enum": [0, 1] },
         "model": { "type": "string", "minLength": 1 },
         "in": { "$ref": "#/$defs/JsonSchema" },
         "out": { "$ref": "#/$defs/JsonSchema" }
@@ -670,11 +686,44 @@
           "items": { "$ref": "#/$defs/FlowRef" },
           "uniqueItems": true
         },
+        "approvals": {
+          "type": "object",
+          "propertyNames": { "type": "string", "minLength": 1 },
+          "additionalProperties": { "const": true }
+        },
         "maxSteps": { "type": "integer", "minimum": 1 },
+        "maxDepth": { "type": "integer", "minimum": 1 },
         "model": { "type": "string", "minLength": 1 },
         "budget": { "$ref": "#/$defs/AiPromptBudget" }
       }
     },
+    "AiDecision": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["mode", "questions"],
+      "properties": {
+        "mode": { "enum": ["review", "abstain"] },
+        "review": { "type": "string", "minLength": 1 },
+        "model": { "type": "string", "minLength": 1 },
+        "driverId": { "enum": ["openrouter", "typesafe"] },
+        "questions": {
+          "type": "array",
+          "items": { "type": "string", "minLength": 1 },
+          "uniqueItems": true
+        },
+        "evals": { "type": "string", "minLength": 1 },
+        "autonomy": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["maxError", "audit"],
+          "properties": {
+            "maxError": { "type": "number", "exclusiveMinimum": 0, "maximum": 1 },
+            "audit": { "type": "number", "minimum": 0, "maximum": 1 },
+            "risk": { "type": "number", "exclusiveMinimum": 0, "maximum": 1 }
+          }
+        }
+      }
+    },
     "Ai": {
       "type": "object",
       "additionalProperties": false,
@@ -693,6 +742,11 @@
           "type": "object",
           "propertyNames": { "type": "string", "minLength": 1 },
           "additionalProperties": { "$ref": "#/$defs/AiAgent" }
+        },
+        "decisions": {
+          "type": "object",
+          "propertyNames": { "type": "string", "minLength": 1 },
+          "additionalProperties": { "$ref": "#/$defs/AiDecision" }
         }
       }
     },

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "okengine",
-  "version": "0.21.1",
+  "version": "0.23.0",
   "description": "One law. Eight elements. One contract. The backend model stays small; operational surfaces are derived from it instead of maintained separately.",
-  "license": "MIT",
+  "license": "Apache-2.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/omqkhafi/okengine.git"
@@ -16,6 +16,8 @@
     "site"
   ],
   "files": [
+    "LICENSE",
+    "NOTICE",
     "src",
     "dist",
     "manifest.v1.schema.json",
@@ -71,6 +73,7 @@
     "./client": "./src/client/index.ts",
     "./client/auth": "./src/client/auth.ts",
     "./client/explain": "./src/client/explain.ts",
+    "./client/agent": "./src/client/agent.ts",
     "./client-react": "./src/client-react/index.ts",
     "./test": "./src/test/index.ts",
     "./testing": {
@@ -102,36 +105,46 @@
     }
   },
   "scripts": {
-    "typecheck": "tsc --noEmit && tsc --noEmit -p tests/console/tsconfig.ui-next.json && tsc --noEmit -p src/console/ui-next && bun run --cwd packages/create-oke typecheck && bun run --cwd examples/keel typecheck",
-    "lint": "oxlint --quiet",
+    "typecheck": "turbo run typecheck typecheck:framework typecheck:console typecheck:console-tests",
+    "typecheck:framework": "tsc --noEmit",
+    "typecheck:console": "tsc --noEmit -p src/console/ui-next",
+    "typecheck:console-tests": "tsc --noEmit -p tests/console/tsconfig.ui-next.json",
+    "lint": "turbo run lint:repo",
+    "lint:repo": "oxlint --quiet",
     "lint:fix": "oxlint --fix",
     "fmt": "oxfmt",
     "format": "oxfmt",
-    "fmt:check": "oxfmt --check",
-    "test": "bun test --pass-with-no-tests",
+    "fmt:check": "turbo run fmt:check:repo",
+    "fmt:check:repo": "oxfmt --check",
+    "test": "turbo run test:framework",
+    "test:framework": "bun test --pass-with-no-tests",
     "test:coverage": "bun test --coverage --pass-with-no-tests",
     "test:console:smoke": "bunx playwright test tests/console/smoke.spec.ts",
     "test:console:setup": "bunx playwright test --config playwright.ui-next.config.ts",
     "test:console:setup:report": "bunx playwright show-report playwright-report/ui-next",
-    "build": "bunx --bun vite build --config src/console/ui-next/vite.config.ts",
-    "dev:console": "bunx --bun vite --config src/console/ui-next/vite.config.ts",
-    "dev:console:seed": "OKE_CONSOLE_SEEDED=1 bunx --bun vite --config src/console/ui-next/vite.config.ts",
-    "dev:console:fresh": "OKE_CONSOLE_FRESH=1 bunx --bun vite --config src/console/ui-next/vite.config.ts",
-    "dev:console:fresh:seed": "OKE_CONSOLE_FRESH=1 OKE_CONSOLE_SEEDED=1 bunx --bun vite --config src/console/ui-next/vite.config.ts",
-    "dev:keel": "bun run --cwd examples/keel dev",
-    "dev:keel:seed": "bun run --cwd examples/keel seed",
-    "dev:keel:reset": "bun run --cwd examples/keel reset",
-    "test:keel": "bun run --cwd examples/keel test",
-    "test:keel:docker": "OKE_TEST_DOCKER=1 bun run --cwd examples/keel test",
-    "build:lib": "bun src/release/build-lib.ts",
+    "build": "turbo run build:console",
+    "build:console": "bunx --bun vite build --config src/console/ui-next/vite.config.ts",
+    "dev:console": "turbo run dev:console:repo",
+    "dev:console:repo": "bunx --bun vite --config src/console/ui-next/vite.config.ts",
+    "dev:console:seed": "OKE_CONSOLE_SEEDED=1 turbo run dev:console:repo",
+    "dev:console:fresh": "OKE_CONSOLE_FRESH=1 turbo run dev:console:repo",
+    "dev:console:fresh:seed": "OKE_CONSOLE_FRESH=1 OKE_CONSOLE_SEEDED=1 turbo run dev:console:repo",
+    "dev:keel": "turbo run dev --filter=@oke/example-keel",
+    "dev:keel:seed": "turbo run seed --filter=@oke/example-keel",
+    "dev:keel:reset": "turbo run reset --filter=@oke/example-keel",
+    "test:keel": "turbo run test --filter=@oke/example-keel",
+    "test:keel:docker": "OKE_TEST_DOCKER=1 turbo run test --filter=@oke/example-keel",
+    "build:lib": "turbo run build:lib:repo",
+    "build:lib:repo": "bun src/release/build-lib.ts",
     "prepack": "bun run build && bun run build:lib",
     "bench": "bun test ./src/runtime/cold-start.bench.ts src/client/budget.test.ts src/console/budget.test.ts src/kernel/budget.test.ts src/kernel/routing-budget.test.ts src/runs/bench.test.ts src/okid.bench.test.ts",
     "bench:load": "OKE_BENCH=1 bun test ./src/bench/*.bench.ts --timeout 600000 --pass-with-no-tests",
     "budgets": "bun src/release/publish.ts",
     "budgets:core": "bun test src/kernel/budget.test.ts src/client/budget.test.ts",
     "gate": "PUBLISH_GATE=1 bun test src/cli/doc-staleness.test.ts src/cli/competitor-mention-removal.test.ts src/drivers/vault-driver-removal.test.ts src/kernel/errors.registry.test.ts src/upgrade/codemods.test.ts scripts/publish.gate.test.ts",
-    "dev": "bun run --cwd site dev",
-    "site:build": "bun run --cwd site build",
+    "dev": "turbo run dev --filter=site",
+    "site:build": "turbo run build --filter=site",
+    "boundaries": "turbo boundaries",
     "verify": "bun run lint && bun run fmt:check && bun run typecheck && bun run test && bun run gate && bun run site:build",
     "ci": "bun scripts/ci.ts",
     "bump": "bun run scripts/bump-version.ts",
@@ -140,23 +153,23 @@
     "postinstall": "bun run --cwd examples/keel prepare"
   },
   "dependencies": {
-    "@clack/prompts": "^1.8.0",
+    "@clack/prompts": "^1.8.1",
     "intl-messageformat": "^11.2.14",
     "oxc-parser": "^0.149.0",
     "sently": "1.2.2"
   },
   "devDependencies": {
     "@base-ui/react": "^1.8.0",
-    "@codemirror/commands": "^6.11.0",
+    "@codemirror/commands": "^6.11.1",
     "@codemirror/lang-json": "^6.0.2",
-    "@codemirror/state": "^6.7.4",
+    "@codemirror/state": "^6.7.6",
     "@codemirror/theme-one-dark": "^6.1.3",
-    "@codemirror/view": "^6.43.11",
+    "@codemirror/view": "^6.43.13",
     "@dagrejs/dagre": "^3.1.1",
-    "@duckdb/node-api": "^1.5.5-r.4",
+    "@duckdb/node-api": "^1.5.5-r.5",
     "@electric-sql/pglite": "^0.5.8",
     "@electric-sql/pglite-pgvector": "^0.0.9",
-    "@hugeicons/core-free-icons": "^4.3.2",
+    "@hugeicons/core-free-icons": "^4.3.5",
     "@hugeicons/react": "^1.1.10",
     "@number-flow/react": "^0.6.2",
     "@oxc-project/types": "^0.149.0",
@@ -165,10 +178,10 @@
     "@tailwindcss/vite": "^4.3.3",
     "@tanstack/react-form": "^1.33.5",
     "@tanstack/react-hotkeys": "^0.10.0",
-    "@tanstack/react-query": "^5.102.8",
-    "@tanstack/react-router": "^1.170.34",
+    "@tanstack/react-query": "^5.103.2",
+    "@tanstack/react-router": "^1.170.39",
     "@tanstack/react-table": "^9.2.4",
-    "@tanstack/react-virtual": "^3.14.11",
+    "@tanstack/react-virtual": "^3.14.13",
     "@types/bun": "latest",
     "@types/d3-array": "^3.2.2",
     "@types/d3-shape": "^3.2.0",
@@ -192,30 +205,31 @@
     "d3-array": "^3.2.4",
     "d3-shape": "^3.2.0",
     "date-fns": "^4.4.0",
-    "drizzle-kit": "1.0.0-rc.5-ab785fc",
-    "drizzle-orm": "1.0.0-rc.5-169397b",
+    "drizzle-kit": "1.0.0-rc.5-5935859",
+    "drizzle-orm": "1.0.0-rc.5-5935859",
     "gflows": "^1.2.1",
-    "happy-dom": "^20.14.3",
+    "happy-dom": "^20.14.5",
     "hast-util-to-jsx-runtime": "^2.3.6",
     "mermaid": "^11.17.2",
-    "motion": "^13.2.0",
+    "motion": "^13.4.2",
     "nuqs": "^2.10.1",
     "oxfmt": "^0.67.0",
-    "oxlint": "^1.82.0",
-    "oxlint-tsgolint": "^7.0.2001",
+    "oxlint": "^1.85.0",
+    "oxlint-tsgolint": "^7.0.2002",
     "playwright": "^1.63.0",
     "react": "^19.3.0",
     "react-dom": "^19.3.0",
-    "react-resizable-panels": "^4.12.4",
+    "react-resizable-panels": "^4.13.3",
     "shadcn": "^4.21.0",
     "shiki": "^4.4.3",
-    "tailwind-merge": "^3.6.0",
+    "tailwind-merge": "^3.7.0",
     "tailwindcss": "^4.3.3",
+    "turbo": "^2.11.4",
     "tw-animate-css": "^1.4.0",
     "typescript": "^7.0.2",
     "valibot": "^1.5.0",
     "vite": "^8.3.0",
-    "zod": "^4.6.1"
+    "zod": "^4.6.5"
   },
   "peerDependencies": {
     "@aws-sdk/client-kms": ">=3.0.0",
@@ -283,5 +297,6 @@
   },
   "engines": {
     "bun": ">=1.4.2"
-  }
+  },
+  "packageManager": "bun@1.4.2"
 }

package/site/content/docs/ai/mcp.mdx

@@ -26,15 +26,19 @@ The server on **6535** speaks JSON-RPC over HTTP (MCP protocol `2024-11-05`), re
 
 ## Read tools
 
-Default-safe — they return inert data envelopes, never live handles:
-
-| Tool               | Returns                                        | Scope (any of)                                |
-| ------------------ | ---------------------------------------------- | --------------------------------------------- |
-| `oke.manifest.get` | The current Manifest catalogue                 | `mcp:manifest:read` · `console:manifest:read` |
-| `oke.schema.get`   | In/out/error schemas for one flow (`flowId`)   | `mcp:schema:read` · `console:manifest:read`   |
-| `oke.effects.get`  | Declared effects for one flow (`flowId`)       | `mcp:effects:read` · `console:manifest:read`  |
-| `oke.traces.list`  | Recent runs (`limit` ≤ 200, optional `flowId`) | `mcp:traces:read` · `console:runs:read`       |
-| `oke.traces.get`   | One run/trace record (`runId`)                 | `mcp:traces:read` · `console:runs:read`       |
+Default-safe — they return inert data envelopes, never live handles. Approving a tool, resolving a review, and promoting a decision are not tools. Those stay with a person in the Console or the CLI.
+
+| Tool                    | Returns                                                                                                                                      | Scope (any of)                                |
+| ----------------------- | -------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------- |
+| `oke.manifest.get`      | The current Manifest catalogue                                                                                                               | `mcp:manifest:read` · `console:manifest:read` |
+| `oke.schema.get`        | In/out/error schemas for one flow (`flowId`)                                                                                                 | `mcp:schema:read` · `console:manifest:read`   |
+| `oke.effects.get`       | Declared effects for one flow (`flowId`)                                                                                                     | `mcp:effects:read` · `console:manifest:read`  |
+| `oke.traces.list`       | Recent runs (`limit` ≤ 200, optional `flowId`)                                                                                               | `mcp:traces:read` · `console:runs:read`       |
+| `oke.traces.get`        | One run/trace record (`runId`)                                                                                                               | `mcp:traces:read` · `console:runs:read`       |
+| `oke.ai.runs.list`      | Agent runs for the token's tenant (`limit` ≤ 200). `console:*` or `mcp:*` may omit `tenant` or name another one. PII and secrets are masked. | `mcp:ai:read` · `console:runs:read`           |
+| `oke.ai.runs.get`       | One agent run plus its follow events (`runId`). Same tenant rule. Args, trail, and events are masked.                                        | `mcp:ai:read` · `console:runs:read`           |
+| `oke.ai.approvals.list` | Pending tool approvals for the token's tenant. Same operator rule. Approval args are masked.                                                 | `mcp:ai:read` · `console:runs:read`           |
+| `oke.decisions.list`    | Decision state, pending count, metrics, and drift for the token's tenant. Same operator rule. Inputs are masked.                             | `mcp:decisions:read` · `console:runs:read`    |
 
 ## Write tools — confirmed, every single call
 

package/site/content/docs/ai/skills.mdx

@@ -19,11 +19,11 @@ Tools alone don't make a good operator — an agent also needs to know the _voca
 | **Images skill**   | `.agents/skills/oke-images/` | Updating Compose image pins                       | Registry probe, pin style, catalog + recipes + Keel + docs lockstep    |
 
 Contributor-only skills in the same tree (not required for app authors):
-`oke-ci`, `oke-docs-update`, `oke-docs-visuals`, `oke-console-style`.
+`oke-ci`, `oke-perf` (before a release), `oke-docs-update`, `oke-docs-visuals`, `oke-console-style`.
 
 ## AGENTS.md — the root contract
 
-Every OKE app's repo carries an `AGENTS.md` that agents (Cursor, Claude Code, and peers) read at session start. It is deliberately short and absolute: every backend behavior is a Flow (`on(Trigger) → Effects`), there are eight elements bound to one contract, all world access goes through `fx`, drivers are named after protocols, and the ports/budgets are fixed. Its closing rule is the one that keeps agents honest: **if the documentation is silent, stop and ask** — never invent the API.
+Every OKE app's repo carries an `AGENTS.md` that agents (Cursor, Claude Code, and peers) read at session start. It is deliberately short and absolute: every backend behavior is a Flow (`on(Trigger) → Effects`), there are eight elements bound to one contract, all world access goes through `fx`, drivers are named after protocols, and the ports/budgets are fixed. The AI section separates `fx.ask`, `fx.run`, and `fx.decide`: tool approvals need `durable: true` and a human resolve, streams follow `GET /agent/runs/:runId/events`, and autonomy comes only from `oke-decisions.lock.json` (`oke eval --certify` writes the certificate; `oke decide promote` installs it). Its closing rule is the one that keeps agents honest: **if the documentation is silent, stop and ask** — never invent the API.
 
 ## Skills — installable know-how