okengine 0.3.5 → 0.4.3

package/src/console/ui/shell/panels/plugins/PluginsPanel.tsx

@@ -21,6 +21,7 @@ import {
 } from "../../../plugins/index.ts";
 import { consoleCalls } from "../../client.ts";
 import { Button, Input } from "../../components/ui.tsx";
+import { displayLabel } from "../../../display.ts";
 
 /**
  * Plugins panel — read-only catalogue + supply-chain surface.
@@ -176,10 +177,23 @@ function PluginDetail(props: {
         {p.declares.length === 0 ? (
           <p className="mt-2 text-sm text-[var(--oke-muted)]">None</p>
         ) : (
-          <ul className="mt-2 list-inside list-disc font-mono text-sm">
-            {p.declares.map((d) => (
-              <li key={d}>{d}</li>
-            ))}
+          <ul className="mt-2 list-inside list-disc text-sm">
+            {p.declares.map((d) => {
+              const tableName = d.startsWith("table:") ? d.slice("table:".length) : null;
+              const description = tableName ? p.tables[tableName]?.description : undefined;
+              return (
+                <li key={d}>
+                  {tableName && description ? (
+                    <>
+                      <span>{displayLabel(tableName, description)}</span>
+                      <code className="ml-2 font-mono text-[var(--oke-muted)]">{d}</code>
+                    </>
+                  ) : (
+                    <code className="font-mono">{d}</code>
+                  )}
+                </li>
+              );
+            })}
           </ul>
         )}
       </section>

package/src/console/ui/shell/panels/signals/SignalsPanel.tsx

@@ -31,6 +31,7 @@ import {
 } from "../../../signals/index.ts";
 import { consoleCalls } from "../../client.ts";
 import { Button } from "../../components/ui.tsx";
+import { displayLabel } from "../../../display.ts";
 
 /**
  * Signals panel. List + detail + DLQ state lives in URL search params.
@@ -248,13 +249,18 @@ export function SignalsPanel() {
                         onClick={() => setSearch(openSignal(search, s.name))}
                       >
                         <span className="font-medium">
-                          {s.name}
+                          {displayLabel(s.name, s.description)}
                           {s.orphaned ? (
                             <span role="status" className="ml-2 text-xs text-[var(--oke-muted)]">
                               orphaned
                             </span>
                           ) : null}
                         </span>
+                        {s.description ? (
+                          <span className="font-mono text-xs text-[var(--oke-muted)]">
+                            {s.name}
+                          </span>
+                        ) : null}
                         <span className="text-xs text-[var(--oke-muted)]">
                           {s.delivery === "once" && (
                             <>
@@ -299,7 +305,12 @@ export function SignalsPanel() {
             <div className="flex flex-col gap-6">
               <div className="flex items-start justify-between gap-4">
                 <div>
-                  <h2 className="text-lg font-semibold">{open.name}</h2>
+                  <h2 className="text-lg font-semibold">
+                    {displayLabel(open.name, open.description)}
+                  </h2>
+                  {open.description ? (
+                    <p className="font-mono text-sm text-[var(--oke-muted)]">{open.name}</p>
+                  ) : null}
                   <p
                     role="status"
                     className="mt-2 max-w-prose text-sm leading-relaxed"

package/src/console/ui/shell/panels/store/StorePanel.tsx

@@ -24,6 +24,7 @@ import {
 } from "../../../store/index.ts";
 import { consoleCalls } from "../../client.ts";
 import { Button } from "../../components/ui.tsx";
+import { displayLabel } from "../../../display.ts";
 
 /**
  * Store panel. Tenant lives in the header when tenancy is declared.
@@ -320,7 +321,10 @@ export function StorePanel() {
                       )}
                       onClick={() => setSearch(openStore(search, s.ref))}
                     >
-                      <span>{s.name}</span>
+                      <span>{displayLabel(s.name, s.description)}</span>
+                      {s.description ? (
+                        <span className="font-mono text-xs text-[var(--oke-muted)]">{s.name}</span>
+                      ) : null}
                       <span className="text-xs text-[var(--oke-muted)]">
                         {s.children.length} resource(s)
                         {s.replicaLagMs != null ? ` · lag ${s.replicaLagMs}ms` : ""}
@@ -469,8 +473,11 @@ function StoreDetail(props: {
   return (
     <div className="flex flex-col gap-4">
       <div className="flex flex-wrap items-baseline gap-2">
-        <h2 className="text-base font-medium">{open.name}</h2>
-        <span className="text-sm text-[var(--oke-muted)]">{open.ref}</span>
+        <h2 className="text-base font-medium">{displayLabel(open.name, open.description)}</h2>
+        <span className="text-sm text-[var(--oke-muted)]">
+          {open.description ? `${open.name} · ` : ""}
+          {open.ref}
+        </span>
         {open.contentAddressed ? (
           <span role="status" className="text-xs text-[var(--oke-muted)]">
             content-addressed keys
@@ -610,7 +617,7 @@ function StoreDetail(props: {
                 <tr>
                   {Object.keys(browse.rows[0] ?? { id: 1 }).map((col) => (
                     <th key={col} scope="col" className="border-b px-2 py-1">
-                      {col}
+                      {displayLabel(col, child?.columnDescriptions[col])}
                     </th>
                   ))}
                   <th scope="col" className="border-b px-2 py-1">

package/src/console/ui/shell/panels/vault/VaultPanel.tsx

@@ -20,6 +20,7 @@ import {
   type VaultListResponse,
   type VaultSearch,
 } from "../../../vault/index.ts";
+import { displayLabel } from "../../../display.ts";
 import { consoleCalls } from "../../client.ts";
 import { Button, Input } from "../../components/ui.tsx";
 
@@ -191,7 +192,10 @@ export function VaultPanel() {
                       )}
                       onClick={() => setSearch(openVault(search, s.name))}
                     >
-                      <span className="font-mono">{s.name}</span>
+                      <span>{displayLabel(s.name, s.description)}</span>
+                      {s.description ? (
+                        <span className="font-mono text-xs text-[var(--oke-muted)]">{s.name}</span>
+                      ) : null}
                       <span className="truncate text-xs">
                         {s.sensitive ? (s.fingerprint ?? "unset") : (s.cleartext ?? "unset")}
                       </span>
@@ -225,9 +229,11 @@ export function VaultPanel() {
           ) : (
             <div className="flex max-w-2xl flex-col gap-6">
               <div>
-                <h2 className="font-mono text-lg text-[var(--oke-fg)]">{open.name}</h2>
+                <h2 className="text-lg text-[var(--oke-fg)]">
+                  {displayLabel(open.name, open.description)}
+                </h2>
                 {open.description ? (
-                  <p className="text-sm text-[var(--oke-muted)]">{open.description}</p>
+                  <p className="font-mono text-sm text-[var(--oke-muted)]">{open.name}</p>
                 ) : null}
                 {open.rotate ? (
                   <p className="text-sm text-[var(--oke-muted)]">Rotate hint: {open.rotate}</p>

package/src/console/ui/signals/types.ts

@@ -39,6 +39,7 @@ export interface SignalEndpoint {
 /** One signal in the operator list. */
 export interface SignalRecord {
   readonly name: string;
+  readonly description?: string;
   readonly delivery: SignalDelivery;
   readonly retries: number;
   readonly deadLetterEnabled: boolean;

package/src/console/ui/store/fixture.ts

@@ -27,6 +27,7 @@ export const STORE_FIXTURE: readonly StoreRecord[] = [
           channels: [],
         },
         piiColumns: ["email"],
+        columnDescriptions: {},
       },
       {
         name: "shipments",
@@ -44,6 +45,7 @@ export const STORE_FIXTURE: readonly StoreRecord[] = [
           channels: ["booking-confirmed"],
         },
         piiColumns: [],
+        columnDescriptions: {},
       },
     ],
     replicaLagMs: 240,
@@ -76,6 +78,7 @@ export const STORE_FIXTURE: readonly StoreRecord[] = [
           channels: [],
         },
         piiColumns: [],
+        columnDescriptions: {},
       },
     ],
     replicaLagMs: null,
@@ -104,6 +107,7 @@ export const STORE_FIXTURE: readonly StoreRecord[] = [
           channels: [],
         },
         piiColumns: [],
+        columnDescriptions: {},
       },
     ],
     replicaLagMs: null,
@@ -138,6 +142,7 @@ export const STORE_FIXTURE: readonly StoreRecord[] = [
           channels: [],
         },
         piiColumns: [],
+        columnDescriptions: {},
       },
     ],
     replicaLagMs: null,

package/src/console/ui/store/types.ts

@@ -28,6 +28,7 @@ export interface StoreChild {
   readonly cache: StoreCacheView;
   readonly willNotFire: WillNotFire;
   readonly piiColumns: readonly string[];
+  readonly columnDescriptions: Readonly<Record<string, string>>;
 }
 
 /** One store row from `console.store.list`. */
@@ -35,6 +36,7 @@ export interface StoreRecord {
   readonly ref: string;
   readonly facet: StoreFacet;
   readonly name: string;
+  readonly description?: string;
   readonly children: readonly StoreChild[];
   readonly replicaLagMs: number | null;
   readonly migrationDrift: {

package/src/docker/compose.ts

@@ -250,6 +250,11 @@ export function buildStackEnv(
       // Token is minted by the bootstrap — never a generated password here.
       env[`${prefix}_URL`] = url;
       env.OKE_VAULT_URL = url;
+    } else if (spec.role === "store.index") {
+      // Meilisearch: standalone HTTP URL + the generated master key.
+      env[`${prefix}_URL`] = url;
+      env.OKE_STORE_INDEX_URL = url;
+      env.OKE_STORE_INDEX_KEY = spec.credentials.password;
     } else {
       env[`${prefix}_USER`] = spec.credentials.user;
       env[`${prefix}_PASSWORD`] = spec.credentials.password;

package/src/docker/docker.test.ts

@@ -43,6 +43,29 @@ describe("image recipes", () => {
     expect(redis.match("redis:7")).toBe(true);
   });
 
+  test("meilisearch matches the official image and emits a http URL", () => {
+    expect(recipeFor("getmeili/meilisearch:v1.37").id).toBe("meilisearch");
+    const spec: ServiceSpec = {
+      role: "store.index",
+      serviceName: "store-index",
+      image: "getmeili/meilisearch:v1.37",
+      port: 7700,
+      hostPort: 7700,
+      credentials: { user: "oke", password: "meili-master-key", database: "oke" },
+    };
+    const applied = recipeFor(spec.image).apply(spec);
+    expect(applied.environment?.MEILI_MASTER_KEY).toBe("${OKE_STORE_INDEX_KEY}");
+    expect(applied.volumes).toContain("store-index-data:/meili_data");
+    const url = recipeFor(spec.image).url(spec, {
+      host: "127.0.0.1",
+      port: 7700,
+      user: "oke",
+      password: "meili-master-key",
+      database: "oke",
+    });
+    expect(url).toBe("http://127.0.0.1:7700");
+  });
+
   test("a new image recipe is ≤15 lines", async () => {
     const src = await Bun.file(`${import.meta.dir}/recipes/postgres.ts`).text();
     const exportLines = src
@@ -197,6 +220,24 @@ describe("deriveInfrastructure", () => {
     expect(formatStackEnv(result.stackEnv)).toContain("OKE_STORE_SQL_PASSWORD=");
   });
 
+  test("store.index meilisearch emits its own URL + master key env", () => {
+    const result = deriveInfrastructure({
+      images: { "store.index": "getmeili/meilisearch:v1.37" },
+      credentials: {
+        "store.index": { user: "oke", password: "meili-master-key", database: "oke" },
+      },
+      app: "skyport",
+    });
+    const yml = result.files.find((f) => f.path === "compose.store.index.yml")!.content;
+    expect(yml).toContain("getmeili/meilisearch:v1.37");
+    expect(yml).toContain("${OKE_STORE_INDEX_KEY}");
+    expect(yml).toContain("meili_data");
+    expect(yml).not.toContain("meili-master-key");
+    expect(result.stackEnv.OKE_STORE_INDEX_URL).toBe("http://127.0.0.1:7700");
+    expect(result.stackEnv.OKE_STORE_INDEX_KEY).toBe("meili-master-key");
+    expect(result.stackEnv.DATABASE_URL).toBeUndefined();
+  });
+
   test("emits protocol-specific env keys plus optional control notes", () => {
     const result = deriveInfrastructure({
       images: {

package/src/docker/recipes/index.ts

@@ -4,15 +4,23 @@
 
 import type { ImageRecipe } from "../types.ts";
 import { mailpit } from "./mailpit.ts";
+import { meilisearch } from "./meilisearch.ts";
 import { openbao } from "./openbao.ts";
 import { postgres } from "./postgres.ts";
 import { redis } from "./redis.ts";
 import { rustfs } from "./rustfs.ts";
 
 /** Default recipe catalogue. */
-export const builtinRecipes: readonly ImageRecipe[] = [postgres, redis, mailpit, rustfs, openbao];
+export const builtinRecipes: readonly ImageRecipe[] = [
+  postgres,
+  redis,
+  mailpit,
+  rustfs,
+  openbao,
+  meilisearch,
+];
 
-export { mailpit, openbao, postgres, redis, rustfs };
+export { mailpit, meilisearch, openbao, postgres, redis, rustfs };
 
 /**
  * Resolve the recipe for an image reference.

package/src/docker/recipes/meilisearch.ts

@@ -0,0 +1,31 @@
+/**
+ * Meilisearch image recipe — full-text search service (`getmeili/meilisearch`).
+ *
+ * Data lives on a named volume under `/meili_data`; the master key is injected
+ * via `${VAR}` (never cleartext in YAML). The official image is Alpine-based
+ * and musl-clean — the glibc binary gap only affects raw host installs.
+ */
+
+import type { ImageRecipe } from "../types.ts";
+
+/** Meilisearch FTS service. API on 7700. */
+export const meilisearch: ImageRecipe = {
+  id: "meilisearch",
+  port: 7700,
+  match: (i) => /meilisearch|getmeili/i.test(i),
+  apply: (s) => ({
+    environment: {
+      MEILI_MASTER_KEY: "${OKE_STORE_INDEX_KEY}",
+      MEILI_ENV: "${OKE_MEILI_ENV:-production}",
+      MEILI_NO_ANALYTICS: "true",
+    },
+    volumes: [`${s.serviceName}-data:/meili_data`],
+    healthcheck: {
+      test: ["CMD-SHELL", "wget -q -O /dev/null http://127.0.0.1:7700/health || exit 1"],
+      interval: "5s",
+      timeout: "3s",
+      retries: 12,
+    },
+  }),
+  url: (_s, c) => `http://${c.host}:${c.port}`,
+};

package/src/drivers/conformance.test.ts

@@ -9,9 +9,14 @@ import {
   runIndexConformance,
   runKvConformance,
   runSqlConformance,
+  runTextIndexConformance,
 } from "./conformance.ts";
 import { fsDriver } from "./fs.ts";
+import { libsqlDriver, libsqlIndexDriver } from "./libsql.ts";
 import { memoryFilesDriver, memoryIndexDriver, memoryKvDriver, memorySqlDriver } from "./memory.ts";
+import { meilisearchDriver } from "./meilisearch.ts";
+import { createMeilisearchFakeFetch } from "./meilisearch.test.ts";
+import { pgliteDriver } from "./pglite.ts";
 import { pgvectorDriver } from "./pgvector.ts";
 import { createPostgresFakeClient, postgresDriver } from "./postgres.ts";
 import { createRedisFakeClient, redisDriver } from "./redis.ts";
@@ -21,6 +26,9 @@ import { sqliteDriver } from "./sqlite.ts";
 describe("sql conformance", () => {
   test("memory", () => runSqlConformance(memorySqlDriver));
   test("sqlite", () => runSqlConformance(sqliteDriver, { url: ":memory:" }));
+  test("libsql", () => runSqlConformance(libsqlDriver, { url: ":memory:" }));
+  // pglite cold-starts WASM + extension load — slow disks / CI need > default 5s
+  test("pglite", () => runSqlConformance(pgliteDriver, { url: "memory://" }), 15_000);
   test("postgres (fake Bun.SQL client)", () =>
     runSqlConformance(postgresDriver, {
       client: createPostgresFakeClient(),
@@ -46,6 +54,16 @@ describe("files conformance", () => {
 describe("index conformance", () => {
   test("memory", () => runIndexConformance(memoryIndexDriver, { dims: 3 }));
   test("pgvector", () => runIndexConformance(pgvectorDriver, { dims: 3 }));
+  test("libsql", () => runIndexConformance(libsqlIndexDriver, { dims: 3 }));
+});
+
+describe("text index conformance", () => {
+  test("meilisearch (injected fetch)", () =>
+    runTextIndexConformance(meilisearchDriver, {
+      url: "http://127.0.0.1:7700",
+      apiKey: "master-key",
+      fetch: createMeilisearchFakeFetch(),
+    }));
 });
 
 describe("protocol naming", () => {
@@ -53,6 +71,8 @@ describe("protocol naming", () => {
     const ids = [
       memorySqlDriver.id,
       sqliteDriver.id,
+      libsqlDriver.id,
+      pgliteDriver.id,
       postgresDriver.id,
       memoryKvDriver.id,
       redisDriver.id,
@@ -61,10 +81,14 @@ describe("protocol naming", () => {
       s3Driver.id,
       memoryIndexDriver.id,
       pgvectorDriver.id,
+      libsqlIndexDriver.id,
+      meilisearchDriver.id,
     ];
     expect(ids).toEqual([
       "memory",
       "sqlite",
+      "libsql",
+      "pglite",
       "postgres",
       "memory",
       "redis",
@@ -73,6 +97,8 @@ describe("protocol naming", () => {
       "s3",
       "memory",
       "pgvector",
+      "libsql",
+      "meilisearch",
     ]);
     for (const id of ids) {
       expect(id).not.toMatch(/neon|dragonfly|minio|upstash|cloudflare/i);

package/src/drivers/conformance.ts

@@ -8,7 +8,14 @@
 import { expect } from "bun:test";
 import { createSqlStoreHandle } from "../elements/store/sql-session.ts";
 import { defineTable } from "../elements/store/table.ts";
-import type { FilesDriver, IndexDriver, KvDriver, SqlDriver, SqlConnectOptions } from "./types.ts";
+import type {
+  FilesDriver,
+  KvDriver,
+  SqlDriver,
+  SqlConnectOptions,
+  TextIndexDriver,
+  VectorIndexDriver,
+} from "./types.ts";
 
 /** SQL conformance against one driver. */
 export async function runSqlConformance(
@@ -118,9 +125,9 @@ export async function runFilesConformance(
   }
 }
 
-/** Index conformance against one driver. */
+/** Vector index conformance against one driver. */
 export async function runIndexConformance(
-  driver: IndexDriver,
+  driver: VectorIndexDriver,
   openOpts: {
     name?: string;
     dims?: number;
@@ -147,3 +154,33 @@ export async function runIndexConformance(
     await index.close();
   }
 }
+
+/** Full-text index conformance against one driver. */
+export async function runTextIndexConformance(
+  driver: TextIndexDriver,
+  openOpts: {
+    name?: string;
+    url?: string;
+    apiKey?: string;
+    fetch?: typeof fetch;
+  } = {},
+): Promise<void> {
+  const index = await driver.open({
+    name: openOpts.name ?? "conf-text",
+    dims: 0,
+    url: openOpts.url,
+    apiKey: openOpts.apiKey,
+    fetch: openOpts.fetch,
+  });
+  try {
+    await index.upsert("d1", { id: "d1", title: "hello world" });
+    await index.upsert("d2", { id: "d2", title: "goodbye world" });
+    const found = await index.search("hello", { topK: 1 });
+    expect(found.hits.length).toBeGreaterThan(0);
+    expect(found.hits[0]?.id).toBe("d1");
+    expect(await index.delete("d1")).toBe(true);
+    expect(index.driverId).toBe(driver.id);
+  } finally {
+    await index.close();
+  }
+}

package/src/drivers/drizzle-dialect.test.ts

@@ -10,11 +10,15 @@ describe("SQL_DRIVER_TO_DRIZZLE_DIALECT", () => {
     expect(SQL_DRIVER_TO_DRIZZLE_DIALECT).toEqual({
       sqlite: "sqlite",
       postgres: "postgresql",
+      libsql: "sqlite",
+      pglite: "postgresql",
     });
   });
 
   test("drizzleDialectFromSqlDriver resolves", () => {
     expect(drizzleDialectFromSqlDriver("sqlite")).toBe("sqlite");
     expect(drizzleDialectFromSqlDriver("postgres")).toBe("postgresql");
+    expect(drizzleDialectFromSqlDriver("libsql")).toBe("sqlite");
+    expect(drizzleDialectFromSqlDriver("pglite")).toBe("postgresql");
   });
 });

package/src/drivers/drizzle-dialect.ts

@@ -4,7 +4,9 @@
  * drizzle-kit `1.0.0-rc.4` dialects (from its schema validator):
  * `postgresql` · `mysql` · `sqlite` · `turso` · `singlestore` · `mssql` ·
  * `cockroach` · `duckdb`. OKE owns kit-facing SQL drivers `sqlite` /
- * `postgres` only — map those, never infer from connection URLs.
+ * `postgres` / `libsql` / `pglite` only — map those, never infer from
+ * connection URLs. `libsql` speaks the sqlite wire dialect; `pglite` speaks
+ * postgresql (same dialect as `postgres`, different transport).
  */
 
 import type { StoreDriverId } from "./types.ts";
@@ -18,20 +20,22 @@ export type OkeDrizzleKitDialect = "sqlite" | "postgresql";
  * dialect months later.
  */
 export const SQL_DRIVER_TO_DRIZZLE_DIALECT: Record<
-  Extract<StoreDriverId, "sqlite" | "postgres">,
+  Extract<StoreDriverId, "sqlite" | "postgres" | "libsql" | "pglite">,
   OkeDrizzleKitDialect
 > = {
   sqlite: "sqlite",
   postgres: "postgresql",
+  libsql: "sqlite",
+  pglite: "postgresql",
 };
 
 /**
  * Resolve the drizzle-kit dialect for an OKE SQL driver id.
  *
- * @param driverId - Protocol driver id (`sqlite` | `postgres`)
+ * @param driverId - Protocol driver id (`sqlite` | `postgres` | `libsql` | `pglite`)
  */
 export function drizzleDialectFromSqlDriver(
-  driverId: Extract<StoreDriverId, "sqlite" | "postgres">,
+  driverId: Extract<StoreDriverId, "sqlite" | "postgres" | "libsql" | "pglite">,
 ): OkeDrizzleKitDialect {
   return SQL_DRIVER_TO_DRIZZLE_DIALECT[driverId];
 }

package/src/drivers/index.ts

@@ -23,12 +23,18 @@ export type {
   FilesDriver,
   IndexHit,
   IndexStore,
+  VectorIndexStore,
+  TextIndexStore,
+  TextIndexSearchOptions,
+  TextIndexSearchResult,
   IndexOpenOptions,
   IndexDriver,
+  VectorIndexDriver,
+  TextIndexDriver,
   StoreDriver,
   ClassificationMap,
 } from "./types.ts";
-export { classificationKey } from "./types.ts";
+export { classificationKey, indexDriverNeedsSql } from "./types.ts";
 
 export type {
   SignalDriverId,
@@ -77,6 +83,17 @@ export { s3Driver, openS3Bucket, createS3FakeClient } from "./s3.ts";
 
 export { pgvectorDriver, openPgvectorIndex } from "./pgvector.ts";
 
+export { libsqlDriver, connectLibsql, libsqlIndexDriver, openLibsqlIndex } from "./libsql.ts";
+
+export {
+  meilisearchDriver,
+  openMeilisearchIndex,
+  MeilisearchUnavailableError,
+  type MeilisearchIndexOptions,
+} from "./meilisearch.ts";
+
+export { pgliteDriver, connectPglite } from "./pglite.ts";
+
 export { memorySignalDriver, openMemorySignal } from "./signal-memory.ts";
 
 export {
@@ -103,7 +120,6 @@ export type { VaultDriverId, VaultOpenOptions, VaultBag, VaultDriver } from "./v
 export { memoryVaultDriver } from "./vault-memory.ts";
 export { envVaultDriver } from "./vault-env.ts";
 export { openbaoVaultDriver, OpenBaoUnavailableError } from "./vault-openbao.ts";
-export { infisicalVaultDriver } from "./vault-infisical.ts";
 export { managedVaultDriver } from "./vault-managed.ts";
 
 export type {