0.7

Every published okengine release, newest first.

all series · 0.8 · 0.6

v0.7.0

✨ Added

  • oke docker clean — discover leftover oke-dev-* compose stacks and remove containers, networks, and volumes (down -v). Inside a project: current stack (+ optional other stacks); outside: pick any. Non-TTY: --yes / --all --yes.
  • Signal emit(…, { key }) — optional per-key serialization for once: same (signal, key) is never claimed by two consumers at once; the in-flight message's visibility lease is the lock (no second timeout). Omit key for unchanged competing-consumer behavior.
  • Signal schema enforced at emit via Standard Schema (validate(), same path as Flow in) — invalid payloads throw **OKE1043** before stage / commit; valid payloads succeed.
  • create-oke TTY wizard: template (standard|advanced) · recommended defaults · customize (local|docker first, then optional other side + AI; saved to ~/.oke/create-defaults.json) · reuse when saved for that template. Non-TTY / --yes stay zero-prompt.
  • oke ai setup — interactive AI provider + curated Ollama catalog (detect / recommend / pull chat·vision·embed); thin paths for OpenAI-compatible and Anthropic. Writes drivers.ai, .env.local, and src/ai.ts.
  • Native Ollama embed via POST /api/embeddings (no openai-compatible shim required for local RAG).
  • create-oke --ai / --no-ai — force or skip the AI model wizard (models selected before install).
  • fx.store(files).image(key\|bytes) — Bun.Image pipeline (resize / rotate / flip / modulate → jpeg/png/webp, plus heic/avif with WebP fallback) with metadata / bytes / blob / placeholder / put terminals; and putImage(key, data, { variants, placeholder }) that writes the original plus {stem}.{variant}.{ext} derivatives and optional ThumbHash LQIP. Requires Bun >=1.3.14. Image decode defaults to a **16 MP** (4096×4096) maxPixels ceiling (raise or pass false to opt out).
  • Signal once visibility leases (leaseExpiresAt, default 30s) with **lazy reclaim at claim time** — expired inflight rows are taken by the next consumer query (memory + postgres); no background sweeper. Chaos proof: SIGKILL after claim still redelivers after the lease expires.
  • createFileCronStore — file-backed CronStore with process-safe lease CAS for multi-instance Clock leader election (chaos-proven with two OS processes).
  • Clock chaos harness: two processes share one store and fire a schedule once; SIGKILL mid-lease takeover measured (~120ms at leaseMs=120); SIGKILL mid durable step resumes without re-running completed steps (file-backed journal in the chaos harness — not the in-process memory journal used by a booted app).

♻️ Changed

  • Install docs list bun install -g okengine for a global oke on PATH (package name is okengine; there is no separate oke npm package).
  • create-oke ships two Notes starters under templates/{standard,advanced} (named flows — no flow_1). TTY: pick template first; customize asks **local|docker** once, walks facets for that side, then optionally the other (defaults if no). Reuse only when saved template matches. .oke/mode follows primary (recommended: standard → local, advanced → docker).
  • create-oke TTY menu offers **reuse previous settings** only when ~/.oke/create-defaults.json already exists for the selected template; customize always saves there (user-global) so the next matching project can inherit the same picks.
  • create-oke rejects a non-empty target directory at the **project name** step (TTY) or before scaffold (flags / --yes), with a clear "name" already exists message — not after the full wizard.
  • create-oke customize wizard offers **← Back** on each driver / yes-no step (first-step Back returns to the recommended / reuse / customize question).
  • create-oke customize asks AI after both env passes; when both sides are in play, **AI Provider — local** and **AI Provider — docker** stay available.
  • oke ai setup Ollama path: short needs quiz (use case · speed/quality · vision) → panel that separates **machine RAM** from **≈GB-class model tier** (comfortable / tight / too large, ~4GB OS/IDE headroom) → recommended / installed / manual picks with **← Back** between steps. Catalog ramGb is machine tier, not download size — a 24GB laptop is never offered a “24GB model.” create-oke passes --provider ollama when either env uses Ollama (even if local is mock).
  • oke ai setup cloud providers (OpenAI, Anthropic, Gemini, OpenRouter, …) offer short curated **Select Chat Model** lists with ⭐ Recommended, plus **Other…** to type any model id (also on Ollama manual picks).
  • AI docs visuals match Flow/Signal/Store quality: AiBlocks (model / prompt / embed / agent ambient demos), upgraded AiGuardrails with per-card mini physics, and AiPiiEgress (anthropic build-fail vs ollama on-premise) under the PII heading.
  • Channel docs visual ChannelPhysics rebuilt as a Gate/Vault-quality chain demo: one fx.send walks consent → locale → same-medium via drivers → receipt, cycling clean send / opted-out suppression / catalog body miss / smtp→resend failover (status: "fallback"). Page prose corrected to match runtime (via is driver ids, not SMS→WhatsApp; locale then catalog fallback; dry-run is would-have-fired, not a receipt).
  • Clock docs visuals match Flow/Signal quality: ClockSchedules (every + named clock → one Flow), ClockCatchUp (missedRuns counted, fire once), ClockSleep (durable sleep journals wakeAt across restart).
  • Signal docs visuals raised to the Store/Flow quality bar: SignalDelivery mode-spotlight (competing claim / every-subscriber copy / late bus.live() history), plus SignalOnceLease (claim → 30s lease → reclaim) and SignalLiveReplay (retain then full-history replay) under the headings that teach those claims.
  • Flow docs visuals: FlowTriggers upgraded (fan-in packet, contract chips, real CDC syntax) and new FlowDurable contrast demo — kill mid-run with durable: true resumes without re-running completed fx.steps.
  • Gate docs visual GatePipeline rebuilt as a Vault-quality chain demo: .gate(member, canBook, fair) evaluates left to right, later gates skip after the first denial, and the outcome cycles do runs / Unauthorized / Forbidden / RateLimited from real principal states.
  • Vault docs visuals: VaultRedacted (hold Redacted vs .reveal() at the provider boundary) plus polished VaultResolution using real VaultResolutionSource ids; mask placeholder corrected to [redacted] / [redacted:secret].
  • Store docs reorganized around **four facets, one handle** (sql · kv · files · index) with separate Advanced sections for cross-facet and cross-element composition; KV + basic Files CRUD examples added from the real runtime API; meilisearch and image pipeline re-homed under Index and Files.
  • Store docs visuals match Flow/Signal quality: ambient physics demos per facet (SQL op cycle, KV TTL expire, Files put→get, Index search fan-out) on StoreFacets and each section StoreFacetMark.
  • Store docs: KV / Files / Index sections expanded to SQL-level depth (Quick start Steps, handle tables, drivers/env, examples, image options, meilisearch search opts, AI cross-link, facet Troubleshooting).
  • Store docs physics visuals: StoreKvTtl (redis vs memory TTL), StoreFilesVariants (putImage fan-out), StoreIndexModes (vector vs meilisearch) — ambient demos for claims tables under-teach.
  • Agent skill oke-docs-visuals — element-docs micro-interaction standard (FlowTriggers/SignalDelivery quality bar, wire checklist, RevealItem as constraints); linked from oke-docs.
  • Engine requirement bumped to Bun >=1.3.14 (root + create-oke) for Bun.Image on store.files.
  • Homepage Store card blurb mentions image transforms on the files facet.
  • Signal docs and delivery cards state real physics: **at-least-once** (not exactly-once), retries means dead-letter when attempts > retries, live replays full retained history (unbounded), and slow handlers that outlive leaseMs can double-deliver without a crash (no heartbeat yet).
  • Signal docs: one coherent order-lifecycle example covering once / broadcast / live together (fulfillment + fan-out + status feed), with an explicit note that createClient does not yet subscribe to live.
  • Orphan signal config stays recoverable by re-declaring; pending/DLQ rows are not deleted when a signal disappears from code.
  • Root README.md redesigned for scan + first success: sently-style outline badges, starter health Flow + typed client (matches create-oke / Basic usage), ten-export vocabulary, eight-element table, Next links into the handbook; Charts and broken/duplicate shields removed.
  • Clock docs match proven physics: catch-up "one" (health counts gaps, runtime fires once), DST is Console warn-only (not doctor / not rewritten), leader election requires a shared CronStore, overridable gates **edit** only, and boot clock drivers are memory · file · frozen (postgres rejected — no CronStore impl).
  • Standard template / config docs: signal docker/prod → redis, clock docker/prod → file, vault local label env (was mislabeled dotenv).
  • Hero banner shows Gate’s kv backend (drivers.store.kv); compose image planning no longer pulls SQL solely for fictional signal/clock postgres.
  • create-oke runs AI **model** selection in the customize wizard (and --ai) **before** bun install — writes .env.local + src/ai.ts without spawning oke ai setup after install. Per-env drivers.ai pins from customize are preserved. Standalone oke ai setup remains for existing apps.
  • oke dev --docker stops Compose containers on SIGINT / SIGTERM / SIGHUP / session stop (docker compose … stop) — volumes stay; next oke dev brings them back up.

🐛 Fixed

  • oke dev parses again when linked to a local okengine checkout — a JSDoc glob (templates/*/drizzle…) closed the block comment early and broke ensure-drizzle-config.ts.
  • Ollama docker recipe escapes shell $pid / $i as $$ so Compose no longer warns The "i"/"pid" variable is not set on oke dev --docker.
  • OpenBao missing-keys error names the usual cause (orphaned vault volume after project recreate) and prints the exact docker compose … down -v recovery for local docker.
  • create-oke / oke ai setup no longer nest drivers.ai inside channel — the banner showed ai: — even after picking Ollama. AI pins are written as a sibling of channel under drivers.
  • Console first-admin claim no longer returns an opaque **500 /** TransportError for weak passwords. The form requires ≥ 12 characters (letter + number), policy failures return ClaimFailed with a clear message, the wizard shows that message (not the bare code), structured 5xx envelopes survive the client transport, and oke dev request logs print the failure detail under the status line.
  • create-oke seeds project .oke/mode from the wizard profile (local-only / recommended → local, docker-ready → docker) so oke dev does not re-ask “Run against” after scaffold.
  • create-oke customize no longer poisons images with driver pins (e.g. libsql) leaked from comments / env maps — fixes oke docker: no image recipe matches "libsql" after picking store.index drivers that are not compose services.
  • oke dev auto oke db push no longer loops when emit rewrites schema.generated.ts — the watcher triggers only on declaration inputs (schema.decl.ts / schema.ts / app.ts / drizzle config), never the generated output.
  • Emitting a non-optional signal with zero subscribers now throws **OKE1042** (previously silent success despite docs claiming a loud fail).
  • Surfaces strip and install docs now include docs MCP on **:6536** alongside app / Console / MCP (the fourth oke dev port was missing from the cards).
  • Docs site next dev no longer 500s on unknown /docs/... paths under output: "export" — export is production-only so missing pages hit notFound() instead of "missing param in generateStaticParams".
  • App boot binders now honour drivers.* instead of silently ignoring config: **Vault** resolves env / openbao / memory / managed via the shared chain builder (same as Console); **Signal** binds memory / redis and fails loud for postgres / nats; **Clock** binds memory / file / frozen and rejects postgres; **Gate** rate KV uses drivers.store.kv (oke:gates namespace) instead of a private memory bag.