@multiplatform.one/platform 7.0.0 → 7.1.0

package/dist/cjs/config/config.cjs

@@ -25,13 +25,14 @@ __export(config_exports, {
   Config: () => Config
 });
 module.exports = __toCommonJS(config_exports);
-const import_meta = {};
+var import_runtimeConfig = require("./runtimeConfig.cjs");
 class Config {
   _config = {};
   _blacklist = /* @__PURE__ */new Set([]);
   _lookupEnv(key) {
     if (this._blacklist.has(key)) return void 0;
-    return process?.env?.[key];
+    if (typeof process === "undefined") return void 0;
+    return process.env?.[key];
   }
   _resolveConfig() {
     return Object.keys(this._config).reduce((config, key) => {
@@ -47,13 +48,18 @@ class Config {
     }, {});
   }
   constructor(config = {}) {
-    let viteConfig = {};
-    try {
-      const raw = typeof import_meta !== "undefined" && import_meta.env?.VITE_MP_CONFIG;
-      viteConfig = JSON.parse(raw || "{}");
-    } catch {}
     this._config = {
-      ...this._reduceConfig(typeof viteConfig === "object" ? viteConfig : {}),
+      // 1. BUILD time: public config baked into the bundle via VITE_MP_CONFIG.
+      //    Kept first (and kept working) so apps that bake their config in —
+      //    native, GNOME, static web — are unchanged.
+      ...this._reduceConfig((0, import_runtimeConfig.bakedPublicConfig)()),
+      // 2. RUNTIME: the public payload the SSR document published into the
+      //    browser (see runtimeConfig.ts). Wins over the bake so a redeployed
+      //    container overrides a stale build-time value, and so an image built
+      //    with an EMPTY build environment can still be configured per
+      //    deployment. `process.env` is not reachable here.
+      ...this._reduceConfig((0, import_runtimeConfig.readRuntimePublicConfig)()),
+      // 3. Explicit values handed to the constructor always win.
       ...this._reduceConfig(config)
     };
   }

package/dist/cjs/config/index.cjs

@@ -28,4 +28,5 @@ __export(config_exports, {
 module.exports = __toCommonJS(config_exports);
 var import_config = require("./config.cjs");
 __reExport(config_exports, require("./config.cjs"), module.exports);
+__reExport(config_exports, require("./runtimeConfig.cjs"), module.exports);
 const config = new import_config.Config();

package/dist/cjs/config/runtimeConfig.cjs

@@ -0,0 +1,100 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all) __defProp(target, name, {
+    get: all[name],
+    enumerable: true
+  });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from)) if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+      get: () => from[key],
+      enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+    });
+  }
+  return to;
+};
+var __toCommonJS = mod => __copyProps(__defProp({}, "__esModule", {
+  value: true
+}), mod);
+var runtimeConfig_exports = {};
+__export(runtimeConfig_exports, {
+  bakedConfigEnvKey: () => bakedConfigEnvKey,
+  bakedPublicConfig: () => bakedPublicConfig,
+  publicConfigKeys: () => publicConfigKeys,
+  publicConfigKeysEnvKey: () => publicConfigKeysEnvKey,
+  readRuntimePublicConfig: () => readRuntimePublicConfig,
+  resolvePublicConfig: () => resolvePublicConfig,
+  runtimePublicConfigKey: () => runtimePublicConfigKey,
+  serializeRuntimePublicConfig: () => serializeRuntimePublicConfig
+});
+module.exports = __toCommonJS(runtimeConfig_exports);
+const import_meta = {};
+const runtimePublicConfigKey = "__mp_public_config__";
+const publicConfigKeysEnvKey = "VITE_MP_PUBLIC_CONFIG_KEYS";
+const bakedConfigEnvKey = "VITE_MP_CONFIG";
+function importMetaEnv() {
+  try {
+    if (typeof import_meta === "undefined") return {};
+    return import_meta.env || {};
+  } catch {
+    return {};
+  }
+}
+function processEnv() {
+  try {
+    if (typeof process === "undefined") return {};
+    return process.env || {};
+  } catch {
+    return {};
+  }
+}
+function readBuildEnv(key) {
+  return importMetaEnv()[key] ?? processEnv()[key];
+}
+function parseJson(raw) {
+  if (!raw) return void 0;
+  try {
+    return JSON.parse(raw);
+  } catch {
+    return void 0;
+  }
+}
+function stringifyValues(source) {
+  return Object.entries(source).reduce((acc, [key, value]) => {
+    if (typeof value !== "undefined" && value !== null) acc[key] = String(value);
+    return acc;
+  }, {});
+}
+function publicConfigKeys() {
+  const parsed = parseJson(readBuildEnv(publicConfigKeysEnvKey));
+  if (!Array.isArray(parsed)) return [];
+  return parsed.filter(key => typeof key === "string" && key.length > 0);
+}
+function bakedPublicConfig() {
+  const parsed = parseJson(readBuildEnv(bakedConfigEnvKey));
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return {};
+  return stringifyValues(parsed);
+}
+function resolvePublicConfig(env = processEnv()) {
+  const baked = bakedPublicConfig();
+  return publicConfigKeys().reduce((acc, key) => {
+    const value = env[key] ?? baked[key];
+    if (typeof value === "string" && value.length > 0) acc[key] = value;
+    return acc;
+  }, {});
+}
+function readRuntimePublicConfig() {
+  const raw = globalThis[runtimePublicConfigKey];
+  if (!raw || typeof raw !== "object" || Array.isArray(raw)) return void 0;
+  return stringifyValues(raw);
+}
+function safeJsonStringify(value) {
+  return JSON.stringify(value ?? {}).replace(/</g, "\\u003c").replace(/>/g, "\\u003e").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
+}
+function serializeRuntimePublicConfig(config = resolvePublicConfig()) {
+  return `globalThis[${JSON.stringify(runtimePublicConfigKey)}]=${safeJsonStringify(config)};`;
+}

package/dist/esm/config/config.mjs

@@ -1,9 +1,11 @@
+import { bakedPublicConfig, readRuntimePublicConfig } from "./runtimeConfig.mjs";
 class Config {
   _config = {};
   _blacklist = /* @__PURE__ */new Set([]);
   _lookupEnv(key) {
     if (this._blacklist.has(key)) return void 0;
-    return process?.env?.[key];
+    if (typeof process === "undefined") return void 0;
+    return process.env?.[key];
   }
   _resolveConfig() {
     return Object.keys(this._config).reduce((config, key) => {
@@ -19,13 +21,18 @@ class Config {
     }, {});
   }
   constructor(config = {}) {
-    let viteConfig = {};
-    try {
-      const raw = typeof import.meta !== "undefined" && import.meta.env?.VITE_MP_CONFIG;
-      viteConfig = JSON.parse(raw || "{}");
-    } catch {}
     this._config = {
-      ...this._reduceConfig(typeof viteConfig === "object" ? viteConfig : {}),
+      // 1. BUILD time: public config baked into the bundle via VITE_MP_CONFIG.
+      //    Kept first (and kept working) so apps that bake their config in —
+      //    native, GNOME, static web — are unchanged.
+      ...this._reduceConfig(bakedPublicConfig()),
+      // 2. RUNTIME: the public payload the SSR document published into the
+      //    browser (see runtimeConfig.ts). Wins over the bake so a redeployed
+      //    container overrides a stale build-time value, and so an image built
+      //    with an EMPTY build environment can still be configured per
+      //    deployment. `process.env` is not reachable here.
+      ...this._reduceConfig(readRuntimePublicConfig()),
+      // 3. Explicit values handed to the constructor always win.
       ...this._reduceConfig(config)
     };
   }

package/dist/esm/config/config.mjs.map

@@ -1 +1 @@
-{"version":3,"names":["Config","_config","_blacklist","Set","_lookupEnv","key","has","process","env","_resolveConfig","Object","keys","reduce","config","value","_reduceConfig","entries","toString","constructor","viteConfig","raw","import","meta","VITE_MP_CONFIG","JSON","parse","get","defaultValue","set","add","remove"],"sources":["../../../src/config/config.ts"],"sourcesContent":[null],"mappings":"AAEO,MAAMA,MAAA,CAA0B;EAC7BC,OAAA,GAAkC,CAAC;EAEnCC,UAAA,GAA0B,mBAAIC,GAAA,CAAI,EAAE;EAEpCC,WAAWC,GAAA,EAAiC;IAClD,IAAI,KAAKH,UAAA,CAAWI,GAAA,CAAID,GAAG,GAAG,OAAO;IACrC,OAAOE,OAAA,EAASC,GAAA,GAAMH,GAAG;EAC3B;EAEQI,eAAA,EAAiB;IACvB,OAAOC,MAAA,CAAOC,IAAA,CAAK,KAAKV,OAAO,EAAEW,MAAA,CAA+B,CAACC,MAAA,EAAQR,GAAA,KAAQ;MAC/E,MAAMS,KAAA,GAAQ,KAAKV,UAAA,CAAWC,GAAG,KAAK,KAAKJ,OAAA,CAAQI,GAAG;MACtD,IAAI,OAAOS,KAAA,KAAU,aAAaD,MAAA,CAAOR,GAAG,IAAIS,KAAA;MAChD,OAAOD,MAAA;IACT,GAAG,CAAC,CAAC;EACP;EAEQE,cAAcF,MAAA,GAA6C,CAAC,GAAG;IACrE,OAAOH,MAAA,CAAOM,OAAA,CAAQH,MAAM,EAAED,MAAA,CAC5B,CAACC,OAAA,EAAQ,CAACR,GAAA,EAAKS,KAAK,MAAoC;MACtD,IAAI,OAAOA,KAAA,KAAU,aAAaD,OAAA,CAAOR,GAAG,IAAIS,KAAA,CAAMG,QAAA,CAAS;MAC/D,OAAOJ,OAAA;IACT,GACA,CAAC,CACH;EACF;EAEAK,YAAYL,MAAA,GAA6C,CAAC,GAAG;IAC3D,IAAIM,UAAA,GAAiD,CAAC;IACtD,IAAI;MAEF,MAAMC,GAAA,GAAM,OAAOC,MAAA,CAAAC,IAAA,KAAgB,eAAeD,MAAA,CAAAC,IAAA,CAAYd,GAAA,EAAKe,cAAA;MACnEJ,UAAA,GAAaK,IAAA,CAAKC,KAAA,CAAML,GAAA,IAAO,IAAI;IACrC,QAAQ,CAAC;IACT,KAAKnB,OAAA,GAAU;MACb,GAAG,KAAKc,aAAA,CAAc,OAAOI,UAAA,KAAe,WAAWA,UAAA,GAAa,CAAC,CAAC;MACtE,GAAG,KAAKJ,aAAA,CAAcF,MAAM;IAC9B;EACF;EAKAa,IAAIrB,GAAA,EAAcsB,YAAA,EAAoE;IACpF,MAAMd,MAAA,GAAS,KAAKJ,cAAA,CAAe;IACnC,IAAI,CAACJ,GAAA,EAAK,OAAOQ,MAAA;IACjB,OAAOA,MAAA,CAAOR,GAAG,KAAKsB,YAAA;EACxB;EAEAC,IAAIvB,GAAA,EAAaS,KAAA,EAAe;IAC9B,KAAKb,OAAA,CAAQI,GAAG,IAAIS,KAAA;IACpB,OAAOA,KAAA;EACT;EAEAe,IAAIf,KAAA,EAA+B;IACjC,KAAKb,OAAA,GAAU;MACb,GAAG,KAAKA,OAAA;MACR,GAAGa;IACL;IACA,OAAO,KAAKY,GAAA,CAAI;EAClB;EAEAI,OAAOzB,GAAA,EAAiC;IACtC,MAAMS,KAAA,GAAQ,KAAKY,GAAA,CAAIrB,GAAG;IAC1B,OAAO,KAAKJ,OAAA,CAAQI,GAAG;IACvB,OAAOS,KAAA;EACT;AACF","ignoreList":[]}
+{"version":3,"names":["bakedPublicConfig","readRuntimePublicConfig","Config","_config","_blacklist","Set","_lookupEnv","key","has","process","env","_resolveConfig","Object","keys","reduce","config","value","_reduceConfig","entries","toString","constructor","get","defaultValue","set","add","remove"],"sources":["../../../src/config/config.ts"],"sourcesContent":[null],"mappings":"AAAA,SAASA,iBAAA,EAAmBC,uBAAA,QAA+B;AAGpD,MAAMC,MAAA,CAA0B;EAC7BC,OAAA,GAAkC,CAAC;EAEnCC,UAAA,GAA0B,mBAAIC,GAAA,CAAI,EAAE;EAEpCC,WAAWC,GAAA,EAAiC;IAClD,IAAI,KAAKH,UAAA,CAAWI,GAAA,CAAID,GAAG,GAAG,OAAO;IAIrC,IAAI,OAAOE,OAAA,KAAY,aAAa,OAAO;IAC3C,OAAOA,OAAA,CAAQC,GAAA,GAAMH,GAAG;EAC1B;EAEQI,eAAA,EAAiB;IACvB,OAAOC,MAAA,CAAOC,IAAA,CAAK,KAAKV,OAAO,EAAEW,MAAA,CAA+B,CAACC,MAAA,EAAQR,GAAA,KAAQ;MAC/E,MAAMS,KAAA,GAAQ,KAAKV,UAAA,CAAWC,GAAG,KAAK,KAAKJ,OAAA,CAAQI,GAAG;MACtD,IAAI,OAAOS,KAAA,KAAU,aAAaD,MAAA,CAAOR,GAAG,IAAIS,KAAA;MAChD,OAAOD,MAAA;IACT,GAAG,CAAC,CAAC;EACP;EAEQE,cAAcF,MAAA,GAA6C,CAAC,GAAG;IACrE,OAAOH,MAAA,CAAOM,OAAA,CAAQH,MAAM,EAAED,MAAA,CAC5B,CAACC,OAAA,EAAQ,CAACR,GAAA,EAAKS,KAAK,MAAoC;MACtD,IAAI,OAAOA,KAAA,KAAU,aAAaD,OAAA,CAAOR,GAAG,IAAIS,KAAA,CAAMG,QAAA,CAAS;MAC/D,OAAOJ,OAAA;IACT,GACA,CAAC,CACH;EACF;EAEAK,YAAYL,MAAA,GAA6C,CAAC,GAAG;IAC3D,KAAKZ,OAAA,GAAU;MAAA;MAAA;MAAA;MAIb,GAAG,KAAKc,aAAA,CAAcjB,iBAAA,CAAkB,CAAC;MAAA;MAAA;MAAA;MAAA;MAAA;MAMzC,GAAG,KAAKiB,aAAA,CAAchB,uBAAA,CAAwB,CAAC;MAAA;MAE/C,GAAG,KAAKgB,aAAA,CAAcF,MAAM;IAC9B;EACF;EAKAM,IAAId,GAAA,EAAce,YAAA,EAAoE;IACpF,MAAMP,MAAA,GAAS,KAAKJ,cAAA,CAAe;IACnC,IAAI,CAACJ,GAAA,EAAK,OAAOQ,MAAA;IACjB,OAAOA,MAAA,CAAOR,GAAG,KAAKe,YAAA;EACxB;EAEAC,IAAIhB,GAAA,EAAaS,KAAA,EAAe;IAC9B,KAAKb,OAAA,CAAQI,GAAG,IAAIS,KAAA;IACpB,OAAOA,KAAA;EACT;EAEAQ,IAAIR,KAAA,EAA+B;IACjC,KAAKb,OAAA,GAAU;MACb,GAAG,KAAKA,OAAA;MACR,GAAGa;IACL;IACA,OAAO,KAAKK,GAAA,CAAI;EAClB;EAEAI,OAAOlB,GAAA,EAAiC;IACtC,MAAMS,KAAA,GAAQ,KAAKK,GAAA,CAAId,GAAG;IAC1B,OAAO,KAAKJ,OAAA,CAAQI,GAAG;IACvB,OAAOS,KAAA;EACT;AACF","ignoreList":[]}

package/dist/esm/config/index.mjs

@@ -1,5 +1,6 @@
 import { Config } from "./config.mjs";
 export * from "./config.mjs";
+export * from "./runtimeConfig.mjs";
 const config = new Config();
 export { config };
 //# sourceMappingURL=index.mjs.map

package/dist/esm/config/index.mjs.map

@@ -1 +1 @@
-{"version":3,"names":["Config","config"],"sources":["../../../src/config/index.ts"],"sourcesContent":[null],"mappings":"AAAA,SAASA,MAAA,QAAc;AAKvB,cAAc;AAHd,MAAMC,MAAA,GAAS,IAAID,MAAA,CAAO","ignoreList":[]}
+{"version":3,"names":["Config","config"],"sources":["../../../src/config/index.ts"],"sourcesContent":[null],"mappings":"AAAA,SAASA,MAAA,QAAc;AAKvB,cAAc;AACd,cAAc;AAJd,MAAMC,MAAA,GAAS,IAAID,MAAA,CAAO","ignoreList":[]}

package/dist/esm/config/runtimeConfig.mjs

@@ -0,0 +1,67 @@
+const runtimePublicConfigKey = "__mp_public_config__";
+const publicConfigKeysEnvKey = "VITE_MP_PUBLIC_CONFIG_KEYS";
+const bakedConfigEnvKey = "VITE_MP_CONFIG";
+function importMetaEnv() {
+  try {
+    if (typeof import.meta === "undefined") return {};
+    return import.meta.env || {};
+  } catch {
+    return {};
+  }
+}
+function processEnv() {
+  try {
+    if (typeof process === "undefined") return {};
+    return process.env || {};
+  } catch {
+    return {};
+  }
+}
+function readBuildEnv(key) {
+  return importMetaEnv()[key] ?? processEnv()[key];
+}
+function parseJson(raw) {
+  if (!raw) return void 0;
+  try {
+    return JSON.parse(raw);
+  } catch {
+    return void 0;
+  }
+}
+function stringifyValues(source) {
+  return Object.entries(source).reduce((acc, [key, value]) => {
+    if (typeof value !== "undefined" && value !== null) acc[key] = String(value);
+    return acc;
+  }, {});
+}
+function publicConfigKeys() {
+  const parsed = parseJson(readBuildEnv(publicConfigKeysEnvKey));
+  if (!Array.isArray(parsed)) return [];
+  return parsed.filter(key => typeof key === "string" && key.length > 0);
+}
+function bakedPublicConfig() {
+  const parsed = parseJson(readBuildEnv(bakedConfigEnvKey));
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return {};
+  return stringifyValues(parsed);
+}
+function resolvePublicConfig(env = processEnv()) {
+  const baked = bakedPublicConfig();
+  return publicConfigKeys().reduce((acc, key) => {
+    const value = env[key] ?? baked[key];
+    if (typeof value === "string" && value.length > 0) acc[key] = value;
+    return acc;
+  }, {});
+}
+function readRuntimePublicConfig() {
+  const raw = globalThis[runtimePublicConfigKey];
+  if (!raw || typeof raw !== "object" || Array.isArray(raw)) return void 0;
+  return stringifyValues(raw);
+}
+function safeJsonStringify(value) {
+  return JSON.stringify(value ?? {}).replace(/</g, "\\u003c").replace(/>/g, "\\u003e").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
+}
+function serializeRuntimePublicConfig(config = resolvePublicConfig()) {
+  return `globalThis[${JSON.stringify(runtimePublicConfigKey)}]=${safeJsonStringify(config)};`;
+}
+export { bakedConfigEnvKey, bakedPublicConfig, publicConfigKeys, publicConfigKeysEnvKey, readRuntimePublicConfig, resolvePublicConfig, runtimePublicConfigKey, serializeRuntimePublicConfig };
+//# sourceMappingURL=runtimeConfig.mjs.map

package/dist/esm/config/runtimeConfig.mjs.map

@@ -0,0 +1 @@
+{"version":3,"names":["runtimePublicConfigKey","publicConfigKeysEnvKey","bakedConfigEnvKey","importMetaEnv","import","meta","env","processEnv","process","readBuildEnv","key","parseJson","raw","JSON","parse","stringifyValues","source","Object","entries","reduce","acc","value","String","publicConfigKeys","parsed","Array","isArray","filter","length","bakedPublicConfig","resolvePublicConfig","baked","readRuntimePublicConfig","globalThis","safeJsonStringify","stringify","replace","serializeRuntimePublicConfig","config"],"sources":["../../../src/config/runtimeConfig.ts"],"sourcesContent":[null],"mappings":"AAiCO,MAAMA,sBAAA,GAAyB;AAO/B,MAAMC,sBAAA,GAAyB;AAO/B,MAAMC,iBAAA,GAAoB;AAEjC,SAASC,cAAA,EAAoD;EAC3D,IAAI;IACF,IAAI,OAAOC,MAAA,CAAAC,IAAA,KAAgB,aAAa,OAAO,CAAC;IAChD,OAAQD,MAAA,CAAAC,IAAA,CAAYC,GAAA,IAAO,CAAC;EAC9B,QAAQ;IACN,OAAO,CAAC;EACV;AACF;AAEA,SAASC,WAAA,EAAiD;EACxD,IAAI;IAGF,IAAI,OAAOC,OAAA,KAAY,aAAa,OAAO,CAAC;IAC5C,OAAQA,OAAA,CAAQF,GAAA,IAAO,CAAC;EAC1B,QAAQ;IACN,OAAO,CAAC;EACV;AACF;AAEA,SAASG,aAAaC,GAAA,EAAiC;EACrD,OAAOP,aAAA,CAAc,EAAEO,GAAG,KAAKH,UAAA,CAAW,EAAEG,GAAG;AACjD;AAEA,SAASC,UAAUC,GAAA,EAAkC;EACnD,IAAI,CAACA,GAAA,EAAK,OAAO;EACjB,IAAI;IACF,OAAOC,IAAA,CAAKC,KAAA,CAAMF,GAAG;EACvB,QAAQ;IACN,OAAO;EACT;AACF;AAEA,SAASG,gBAAgBC,MAAA,EAAyD;EAChF,OAAOC,MAAA,CAAOC,OAAA,CAAQF,MAAM,EAAEG,MAAA,CAA+B,CAACC,GAAA,EAAK,CAACV,GAAA,EAAKW,KAAK,MAAM;IAClF,IAAI,OAAOA,KAAA,KAAU,eAAeA,KAAA,KAAU,MAAMD,GAAA,CAAIV,GAAG,IAAIY,MAAA,CAAOD,KAAK;IAC3E,OAAOD,GAAA;EACT,GAAG,CAAC,CAAC;AACP;AAQO,SAASG,iBAAA,EAA6B;EAC3C,MAAMC,MAAA,GAASb,SAAA,CAAUF,YAAA,CAAaR,sBAAsB,CAAC;EAC7D,IAAI,CAACwB,KAAA,CAAMC,OAAA,CAAQF,MAAM,GAAG,OAAO,EAAC;EACpC,OAAOA,MAAA,CAAOG,MAAA,CAAQjB,GAAA,IAAuB,OAAOA,GAAA,KAAQ,YAAYA,GAAA,CAAIkB,MAAA,GAAS,CAAC;AACxF;AAGO,SAASC,kBAAA,EAA4C;EAC1D,MAAML,MAAA,GAASb,SAAA,CAAUF,YAAA,CAAaP,iBAAiB,CAAC;EACxD,IAAI,CAACsB,MAAA,IAAU,OAAOA,MAAA,KAAW,YAAYC,KAAA,CAAMC,OAAA,CAAQF,MAAM,GAAG,OAAO,CAAC;EAC5E,OAAOT,eAAA,CAAgBS,MAAiC;AAC1D;AASO,SAASM,oBACdxB,GAAA,GAA0CC,UAAA,CAAW,GAC7B;EACxB,MAAMwB,KAAA,GAAQF,iBAAA,CAAkB;EAChC,OAAON,gBAAA,CAAiB,EAAEJ,MAAA,CAA+B,CAACC,GAAA,EAAKV,GAAA,KAAQ;IACrE,MAAMW,KAAA,GAAQf,GAAA,CAAII,GAAG,KAAKqB,KAAA,CAAMrB,GAAG;IACnC,IAAI,OAAOW,KAAA,KAAU,YAAYA,KAAA,CAAMO,MAAA,GAAS,GAAGR,GAAA,CAAIV,GAAG,IAAIW,KAAA;IAC9D,OAAOD,GAAA;EACT,GAAG,CAAC,CAAC;AACP;AAMO,SAASY,wBAAA,EAA8D;EAC5E,MAAMpB,GAAA,GAAOqB,UAAA,CAAkDjC,sBAAsB;EACrF,IAAI,CAACY,GAAA,IAAO,OAAOA,GAAA,KAAQ,YAAYa,KAAA,CAAMC,OAAA,CAAQd,GAAG,GAAG,OAAO;EAClE,OAAOG,eAAA,CAAgBH,GAA8B;AACvD;AAOA,SAASsB,kBAAkBb,KAAA,EAAwB;EACjD,OAAOR,IAAA,CAAKsB,SAAA,CAAUd,KAAA,IAAS,CAAC,CAAC,EAC9Be,OAAA,CAAQ,MAAM,SAAS,EACvBA,OAAA,CAAQ,MAAM,SAAS,EACvBA,OAAA,CAAQ,WAAW,SAAS,EAC5BA,OAAA,CAAQ,WAAW,SAAS;AACjC;AAOO,SAASC,6BACdC,MAAA,GAAiCR,mBAAA,CAAoB,GAC7C;EACR,OAAO,cAAcjB,IAAA,CAAKsB,SAAA,CAAUnC,sBAAsB,CAAC,KAAKkC,iBAAA,CAAkBI,MAAM,CAAC;AAC3F","ignoreList":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@multiplatform.one/platform",
-  "version": "7.0.0",
+  "version": "7.1.0",
   "description": "Platform detection flags and utilities for multiplatform.one",
   "keywords": [
     "detection",
@@ -51,9 +51,12 @@
     "@types/chrome": "^0.1.40",
     "@types/firefox-webext-browser": "^143.0.0",
     "@types/react": "~19.2.14",
+    "@vitest/coverage-v8": "^4.1.5",
+    "happy-dom": "^20.9.0",
     "react": "19.2.5",
     "typescript": "~5.9.3",
-    "@multiplatform.one/config": "7.0.0"
+    "vitest": "^4.1.5",
+    "@multiplatform.one/config": "7.1.0"
   },
   "peerDependencies": {
     "expo-constants": "~55.0.15",

package/src/config/config.spec.ts

@@ -1,9 +1,23 @@
-import { beforeEach, describe, expect, it, vi } from "vitest";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 import { Config } from "./config";
+import { bakedConfigEnvKey, runtimePublicConfigKey } from "./runtimeConfig";
+
+function setRuntimePayload(payload: Record<string, string>) {
+  (globalThis as unknown as Record<string, unknown>)[runtimePublicConfigKey] = payload;
+}
+
+function clearRuntimePayload() {
+  delete (globalThis as unknown as Record<string, unknown>)[runtimePublicConfigKey];
+}
 
 describe("Config", () => {
   beforeEach(() => {
     vi.unstubAllEnvs();
+    clearRuntimePayload();
+  });
+
+  afterEach(() => {
+    clearRuntimePayload();
   });
 
   describe("constructor", () => {
@@ -130,4 +144,51 @@ describe("Config", () => {
       expect(c.get("ADDED_KEY")).toBe("env-wins");
     });
   });
+
+  describe("runtime public config published by the SSR document", () => {
+    it("resolves MARKETPLACE_API_URL from the runtime payload with no build-time VITE_MP_CONFIG", () => {
+      // The exact production shape: an image built by CI with an EMPTY build
+      // environment (no VITE_MP_CONFIG baked), configured per deployment by
+      // the container env, which the SSR document publishes to the browser.
+      setRuntimePayload({ MARKETPLACE_API_URL: "https://api.marketplace.example.org" });
+      const c = new Config();
+      expect(c.get("MARKETPLACE_API_URL")).toBe("https://api.marketplace.example.org");
+    });
+
+    it("resolves FRAPPE_ENABLED from the runtime payload so the frappe provider can mount", () => {
+      // CreateApp.tsx gates FrappeProvider on config.get("FRAPPE_ENABLED") === "1".
+      setRuntimePayload({ FRAPPE_ENABLED: "1" });
+      const c = new Config();
+      expect(c.get("FRAPPE_ENABLED")).toBe("1");
+    });
+
+    // These use MARKETPLACE_API_URL rather than BASE_URL on purpose: vite (and
+    // therefore vitest) publishes its own BASE_URL="/" into process.env, and
+    // _lookupEnv still outranks everything on the SERVER — so a BASE_URL
+    // fixture would measure vite's value, not the precedence under test.
+    it("prefers the runtime payload over a stale build-time baked value", () => {
+      vi.stubEnv(
+        bakedConfigEnvKey,
+        JSON.stringify({ MARKETPLACE_API_URL: "https://stale.example.org" }),
+      );
+      setRuntimePayload({ MARKETPLACE_API_URL: "https://fresh.example.org" });
+      const c = new Config();
+      expect(c.get("MARKETPLACE_API_URL")).toBe("https://fresh.example.org");
+    });
+
+    it("still resolves the build-time baked value when no runtime payload exists", () => {
+      vi.stubEnv(
+        bakedConfigEnvKey,
+        JSON.stringify({ MARKETPLACE_API_URL: "https://baked.example.org" }),
+      );
+      const c = new Config();
+      expect(c.get("MARKETPLACE_API_URL")).toBe("https://baked.example.org");
+    });
+
+    it("lets explicit constructor values win over the runtime payload", () => {
+      setRuntimePayload({ MARKETPLACE_API_URL: "https://runtime.example.org" });
+      const c = new Config({ MARKETPLACE_API_URL: "https://explicit.example.org" });
+      expect(c.get("MARKETPLACE_API_URL")).toBe("https://explicit.example.org");
+    });
+  });
 });

package/src/config/config.ts

@@ -1,3 +1,4 @@
+import { bakedPublicConfig, readRuntimePublicConfig } from "./runtimeConfig";
 import type { IConfig } from "./types";
 
 export class Config implements IConfig {
@@ -7,7 +8,11 @@ export class Config implements IConfig {
 
   private _lookupEnv(key: string): string | undefined {
     if (this._blacklist.has(key)) return undefined;
-    return process?.env?.[key];
+    // `process` is UNDECLARED in the browser, where `process?.env` throws a
+    // ReferenceError rather than short-circuiting — this is why env lookup
+    // could never be the browser's only path to config.
+    if (typeof process === "undefined") return undefined;
+    return process.env?.[key];
   }
 
   private _resolveConfig() {
@@ -29,14 +34,18 @@ export class Config implements IConfig {
   }
 
   constructor(config: Record<string, string | undefined> = {}) {
-    let viteConfig: Record<string, string | undefined> = {};
-    try {
-      // Read public config injected by Vite at build time via VITE_MP_CONFIG
-      const raw = typeof import.meta !== "undefined" && import.meta.env?.VITE_MP_CONFIG;
-      viteConfig = JSON.parse(raw || "{}");
-    } catch {}
     this._config = {
-      ...this._reduceConfig(typeof viteConfig === "object" ? viteConfig : {}),
+      // 1. BUILD time: public config baked into the bundle via VITE_MP_CONFIG.
+      //    Kept first (and kept working) so apps that bake their config in —
+      //    native, GNOME, static web — are unchanged.
+      ...this._reduceConfig(bakedPublicConfig()),
+      // 2. RUNTIME: the public payload the SSR document published into the
+      //    browser (see runtimeConfig.ts). Wins over the bake so a redeployed
+      //    container overrides a stale build-time value, and so an image built
+      //    with an EMPTY build environment can still be configured per
+      //    deployment. `process.env` is not reachable here.
+      ...this._reduceConfig(readRuntimePublicConfig()),
+      // 3. Explicit values handed to the constructor always win.
       ...this._reduceConfig(config),
     };
   }

package/src/config/index.ts

@@ -4,3 +4,4 @@ const config = new Config();
 
 export { config };
 export * from "./config";
+export * from "./runtimeConfig";

package/src/config/runtimeConfig.native.ts

@@ -0,0 +1,84 @@
+/**
+ * Native twin of `runtimeConfig.ts`.
+ *
+ * Identical API, minus `import.meta`: the vxrn/rolldown native bundle is a
+ * CLASSIC script for Hermes, where `import.meta` is a syntax error (the same
+ * reason `config.native.ts` exists as a hand-written twin of `config.ts`).
+ *
+ * Native has no SSR document, so `readRuntimePublicConfig` normally returns
+ * undefined and native keeps resolving through `expo-constants` +
+ * `process.env` exactly as before. The exports are kept so that shared code
+ * importing from `@multiplatform.one/platform` compiles on every target.
+ */
+
+export const runtimePublicConfigKey = "__mp_public_config__";
+export const publicConfigKeysEnvKey = "VITE_MP_PUBLIC_CONFIG_KEYS";
+export const bakedConfigEnvKey = "VITE_MP_CONFIG";
+
+function processEnv(): Record<string, string | undefined> {
+  try {
+    if (typeof process === "undefined") return {};
+    return (process.env || {}) as Record<string, string | undefined>;
+  } catch {
+    return {};
+  }
+}
+
+function parseJson(raw: string | undefined): unknown {
+  if (!raw) return undefined;
+  try {
+    return JSON.parse(raw);
+  } catch {
+    return undefined;
+  }
+}
+
+function stringifyValues(source: Record<string, unknown>): Record<string, string> {
+  return Object.entries(source).reduce<Record<string, string>>((acc, [key, value]) => {
+    if (typeof value !== "undefined" && value !== null) acc[key] = String(value);
+    return acc;
+  }, {});
+}
+
+export function publicConfigKeys(): string[] {
+  const parsed = parseJson(processEnv()[publicConfigKeysEnvKey]);
+  if (!Array.isArray(parsed)) return [];
+  return parsed.filter((key): key is string => typeof key === "string" && key.length > 0);
+}
+
+export function bakedPublicConfig(): Record<string, string> {
+  const parsed = parseJson(processEnv()[bakedConfigEnvKey]);
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return {};
+  return stringifyValues(parsed as Record<string, unknown>);
+}
+
+export function resolvePublicConfig(
+  env: Record<string, string | undefined> = processEnv(),
+): Record<string, string> {
+  const baked = bakedPublicConfig();
+  return publicConfigKeys().reduce<Record<string, string>>((acc, key) => {
+    const value = env[key] ?? baked[key];
+    if (typeof value === "string" && value.length > 0) acc[key] = value;
+    return acc;
+  }, {});
+}
+
+export function readRuntimePublicConfig(): Record<string, string> | undefined {
+  const raw = (globalThis as unknown as Record<string, unknown>)[runtimePublicConfigKey];
+  if (!raw || typeof raw !== "object" || Array.isArray(raw)) return undefined;
+  return stringifyValues(raw as Record<string, unknown>);
+}
+
+function safeJsonStringify(value: unknown): string {
+  return JSON.stringify(value ?? {})
+    .replace(/</g, "\\u003c")
+    .replace(/>/g, "\\u003e")
+    .replace(/\u2028/g, "\\u2028")
+    .replace(/\u2029/g, "\\u2029");
+}
+
+export function serializeRuntimePublicConfig(
+  config: Record<string, string> = resolvePublicConfig(),
+): string {
+  return `globalThis[${JSON.stringify(runtimePublicConfigKey)}]=${safeJsonStringify(config)};`;
+}

package/src/config/runtimeConfig.spec.ts

@@ -0,0 +1,128 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import {
+  bakedConfigEnvKey,
+  publicConfigKeysEnvKey,
+  readRuntimePublicConfig,
+  resolvePublicConfig,
+  runtimePublicConfigKey,
+  serializeRuntimePublicConfig,
+} from "./runtimeConfig";
+
+function stubAllowlist(keys: string[]) {
+  vi.stubEnv(publicConfigKeysEnvKey, JSON.stringify(keys));
+}
+
+function stubBaked(config: Record<string, string>) {
+  vi.stubEnv(bakedConfigEnvKey, JSON.stringify(config));
+}
+
+function clearRuntimePayload() {
+  delete (globalThis as unknown as Record<string, unknown>)[runtimePublicConfigKey];
+}
+
+afterEach(() => {
+  vi.unstubAllEnvs();
+  clearRuntimePayload();
+});
+
+describe("resolvePublicConfig", () => {
+  it("resolves a public key from the RUNTIME environment, not the build", () => {
+    stubAllowlist(["MARKETPLACE_API_URL"]);
+    expect(
+      resolvePublicConfig({ MARKETPLACE_API_URL: "https://api.marketplace.example.org" }),
+    ).toEqual({
+      MARKETPLACE_API_URL: "https://api.marketplace.example.org",
+    });
+  });
+
+  it("lets the runtime environment override a stale baked value", () => {
+    stubAllowlist(["MARKETPLACE_API_URL"]);
+    stubBaked({ MARKETPLACE_API_URL: "https://stale.example.org" });
+    expect(resolvePublicConfig({ MARKETPLACE_API_URL: "https://fresh.example.org" })).toEqual({
+      MARKETPLACE_API_URL: "https://fresh.example.org",
+    });
+  });
+
+  it("falls back to the baked value when the runtime environment is empty", () => {
+    stubAllowlist(["MARKETPLACE_API_URL"]);
+    stubBaked({ MARKETPLACE_API_URL: "https://baked.example.org" });
+    expect(resolvePublicConfig({})).toEqual({
+      MARKETPLACE_API_URL: "https://baked.example.org",
+    });
+  });
+
+  it("resolves nothing when the build baked no public allowlist", () => {
+    expect(resolvePublicConfig({ MARKETPLACE_API_URL: "https://api.example.org" })).toEqual({});
+  });
+});
+
+describe("public allowlist enforcement", () => {
+  it("never resolves a key that is absent from the build-time public allowlist", () => {
+    stubAllowlist(["MARKETPLACE_API_URL"]);
+    const resolved = resolvePublicConfig({
+      MARKETPLACE_API_URL: "https://api.example.org",
+      SECRET: "hunter2",
+      DATABASE_PASSWORD: "hunter2",
+    });
+    expect(resolved).toEqual({ MARKETPLACE_API_URL: "https://api.example.org" });
+    expect(resolved).not.toHaveProperty("SECRET");
+    expect(resolved).not.toHaveProperty("DATABASE_PASSWORD");
+  });
+
+  it("never serializes a private key into the document payload", () => {
+    stubAllowlist(["MARKETPLACE_API_URL", "FRAPPE_ENABLED"]);
+    const payload = serializeRuntimePublicConfig(
+      resolvePublicConfig({
+        MARKETPLACE_API_URL: "https://api.example.org",
+        FRAPPE_ENABLED: "1",
+        SECRET: "hunter2",
+      }),
+    );
+    expect(payload).toContain("MARKETPLACE_API_URL");
+    expect(payload).toContain("FRAPPE_ENABLED");
+    expect(payload).not.toContain("SECRET");
+    expect(payload).not.toContain("hunter2");
+  });
+});
+
+describe("serializeRuntimePublicConfig", () => {
+  it("assigns the payload to the runtime global key", () => {
+    stubAllowlist(["FRAPPE_ENABLED"]);
+    expect(serializeRuntimePublicConfig(resolvePublicConfig({ FRAPPE_ENABLED: "1" }))).toBe(
+      `globalThis["${runtimePublicConfigKey}"]={"FRAPPE_ENABLED":"1"};`,
+    );
+  });
+
+  it("escapes characters that could break out of the inline script", () => {
+    stubAllowlist(["BASE_URL"]);
+    const payload = serializeRuntimePublicConfig(
+      resolvePublicConfig({ BASE_URL: "</script><script>alert(1)</script>" }),
+    );
+    expect(payload).not.toContain("</script>");
+    expect(payload).toContain("\\u003c");
+  });
+
+  it("emits an empty object rather than throwing when nothing resolves", () => {
+    expect(serializeRuntimePublicConfig({})).toBe(`globalThis["${runtimePublicConfigKey}"]={};`);
+  });
+});
+
+describe("readRuntimePublicConfig", () => {
+  it("reads the payload the SSR document published", () => {
+    (globalThis as unknown as Record<string, unknown>)[runtimePublicConfigKey] = {
+      MARKETPLACE_API_URL: "https://api.example.org",
+    };
+    expect(readRuntimePublicConfig()).toEqual({
+      MARKETPLACE_API_URL: "https://api.example.org",
+    });
+  });
+
+  it("returns undefined when no document published a payload", () => {
+    expect(readRuntimePublicConfig()).toBeUndefined();
+  });
+
+  it("ignores a payload that is not a plain object", () => {
+    (globalThis as unknown as Record<string, unknown>)[runtimePublicConfigKey] = ["nope"];
+    expect(readRuntimePublicConfig()).toBeUndefined();
+  });
+});

package/src/config/runtimeConfig.ts

@@ -0,0 +1,159 @@
+/**
+ * RUNTIME public-config seam: SSR document -> browser.
+ *
+ * Why this exists: `VITE_MP_CONFIG` is resolved by `@multiplatform.one/config`
+ * at BUILD time (createViteConfig sets `process.env.VITE_MP_CONFIG` from the
+ * build environment, and vite bakes it into `import.meta.env`). A container
+ * image built by CI therefore ships whatever the CI job happened to export —
+ * usually nothing — and no amount of runtime container env reaches the
+ * browser, because `Config._lookupEnv` reads `process.env`, which does not
+ * exist there. The measured failure: the marketplace storefront had
+ * MARKETPLACE_API_URL on its container and still rendered "MARKETPLACE_API_URL
+ * is not configured", issuing ZERO catalog requests.
+ *
+ * The fix keeps the image environment-agnostic: the BUILD bakes only the
+ * NAMES of the public keys (`VITE_MP_PUBLIC_CONFIG_KEYS`), and the SSR node
+ * process resolves their VALUES from its own `process.env` at request time and
+ * publishes them into the served document.
+ *
+ * Transport: one inline `<script>` in `<head>` assigning a `globalThis` key —
+ * the SAME mechanism one uses for `__one_server_context__` (see one's
+ * `server/ServerContextScript`), deliberately sitting ALONGSIDE it rather
+ * than being a second, differently-shaped invention.
+ *
+ * Safety: `resolvePublicConfig` walks the BUILD-TIME PUBLIC ALLOWLIST, never
+ * the environment. A key that is not on `config.json`'s `public` list can not
+ * be serialized even if it is present in the SSR process env, so server-only
+ * secrets never reach the document.
+ */
+
+/**
+ * Global key the SSR document assigns the resolved public config to.
+ * Sibling of one's `__one_server_context__`.
+ */
+export const runtimePublicConfigKey = "__mp_public_config__";
+
+/**
+ * Build-time env key carrying the JSON array of PUBLIC config key names
+ * (written by `createViteConfig` in `@multiplatform.one/config/vite`).
+ * Only the NAMES are baked — values stay environment-agnostic.
+ */
+export const publicConfigKeysEnvKey = "VITE_MP_PUBLIC_CONFIG_KEYS";
+
+/**
+ * Build-time env key carrying the JSON object of public config values
+ * resolved from the BUILD environment. Still honored so apps that bake their
+ * config in (native, GNOME, static web) keep working unchanged.
+ */
+export const bakedConfigEnvKey = "VITE_MP_CONFIG";
+
+function importMetaEnv(): Record<string, string | undefined> {
+  try {
+    if (typeof import.meta === "undefined") return {};
+    return (import.meta.env || {}) as Record<string, string | undefined>;
+  } catch {
+    return {};
+  }
+}
+
+function processEnv(): Record<string, string | undefined> {
+  try {
+    // `process` is undefined in the browser; a bare `process?.env` would
+    // still throw ReferenceError on an undeclared identifier.
+    if (typeof process === "undefined") return {};
+    return (process.env || {}) as Record<string, string | undefined>;
+  } catch {
+    return {};
+  }
+}
+
+function readBuildEnv(key: string): string | undefined {
+  return importMetaEnv()[key] ?? processEnv()[key];
+}
+
+function parseJson(raw: string | undefined): unknown {
+  if (!raw) return undefined;
+  try {
+    return JSON.parse(raw);
+  } catch {
+    return undefined;
+  }
+}
+
+function stringifyValues(source: Record<string, unknown>): Record<string, string> {
+  return Object.entries(source).reduce<Record<string, string>>((acc, [key, value]) => {
+    if (typeof value !== "undefined" && value !== null) acc[key] = String(value);
+    return acc;
+  }, {});
+}
+
+/**
+ * The PUBLIC key allowlist baked at build time. Empty when the app was not
+ * built through `createViteConfig` (tests, storybook, plain node) — in which
+ * case nothing is publishable and the payload stays empty, which is the safe
+ * direction to fail.
+ */
+export function publicConfigKeys(): string[] {
+  const parsed = parseJson(readBuildEnv(publicConfigKeysEnvKey));
+  if (!Array.isArray(parsed)) return [];
+  return parsed.filter((key): key is string => typeof key === "string" && key.length > 0);
+}
+
+/** Public config values baked into the bundle at BUILD time. */
+export function bakedPublicConfig(): Record<string, string> {
+  const parsed = parseJson(readBuildEnv(bakedConfigEnvKey));
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return {};
+  return stringifyValues(parsed as Record<string, unknown>);
+}
+
+/**
+ * Resolve the public config the SSR document should publish.
+ *
+ * Iterates the ALLOWLIST — never the environment — so a private key present
+ * in `env` can not reach the returned object. Runtime env wins over the
+ * build-time bake, so a redeployed container overrides a stale baked value.
+ */
+export function resolvePublicConfig(
+  env: Record<string, string | undefined> = processEnv(),
+): Record<string, string> {
+  const baked = bakedPublicConfig();
+  return publicConfigKeys().reduce<Record<string, string>>((acc, key) => {
+    const value = env[key] ?? baked[key];
+    if (typeof value === "string" && value.length > 0) acc[key] = value;
+    return acc;
+  }, {});
+}
+
+/**
+ * Read the payload the SSR document published. Returns undefined anywhere the
+ * document never ran (native, SSR itself, tests).
+ */
+export function readRuntimePublicConfig(): Record<string, string> | undefined {
+  const raw = (globalThis as unknown as Record<string, unknown>)[runtimePublicConfigKey];
+  if (!raw || typeof raw !== "object" || Array.isArray(raw)) return undefined;
+  return stringifyValues(raw as Record<string, unknown>);
+}
+
+/**
+ * HTML-safe JSON: an inline `<script>` body must not be able to close its own
+ * tag, and U+2028/U+2029 are line terminators to a JS parser but legal inside
+ * a JSON string.
+ */
+function safeJsonStringify(value: unknown): string {
+  return JSON.stringify(value ?? {})
+    .replace(/</g, "\\u003c")
+    .replace(/>/g, "\\u003e")
+    .replace(/\u2028/g, "\\u2028")
+    .replace(/\u2029/g, "\\u2029");
+}
+
+/**
+ * The inline `<script>` body that publishes the public config to the browser.
+ * Runs during document parse, so it lands before the deferred app bundle
+ * constructs its `Config`.
+ */
+export function serializeRuntimePublicConfig(
+  config: Record<string, string> = resolvePublicConfig(),
+): string {
+  return `globalThis[${JSON.stringify(runtimePublicConfigKey)}]=${safeJsonStringify(config)};`;
+}

package/types/config/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEvC,qBAAa,MAAO,YAAW,OAAO;IACpC,OAAO,CAAC,OAAO,CAA8B;IAE7C,OAAO,CAAC,UAAU,CAA4B;IAE9C,OAAO,CAAC,UAAU;IAKlB,OAAO,CAAC,cAAc;IAQtB,OAAO,CAAC,aAAa;gBAUT,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAM;IAa3D,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAC7B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IACpC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM;IAO9C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;IAK9B,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAQjC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;CAKxC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config/config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEvC,qBAAa,MAAO,YAAW,OAAO;IACpC,OAAO,CAAC,OAAO,CAA8B;IAE7C,OAAO,CAAC,UAAU,CAA4B;IAE9C,OAAO,CAAC,UAAU;IASlB,OAAO,CAAC,cAAc;IAQtB,OAAO,CAAC,aAAa;gBAUT,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAM;IAiB3D,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAC7B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IACpC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM;IAO9C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;IAK9B,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAQjC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;CAKxC"}

package/types/config/index.d.ts

@@ -2,4 +2,5 @@ import { Config } from "./config";
 declare const config: Config;
 export { config };
 export * from "./config";
+export * from "./runtimeConfig";
 //# sourceMappingURL=index.d.ts.map

package/types/config/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAElC,QAAA,MAAM,MAAM,QAAe,CAAC;AAE5B,OAAO,EAAE,MAAM,EAAE,CAAC;AAClB,cAAc,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAElC,QAAA,MAAM,MAAM,QAAe,CAAC;AAE5B,OAAO,EAAE,MAAM,EAAE,CAAC;AAClB,cAAc,UAAU,CAAC;AACzB,cAAc,iBAAiB,CAAC"}

package/types/config/runtimeConfig.d.ts

@@ -0,0 +1,74 @@
+/**
+ * RUNTIME public-config seam: SSR document -> browser.
+ *
+ * Why this exists: `VITE_MP_CONFIG` is resolved by `@multiplatform.one/config`
+ * at BUILD time (createViteConfig sets `process.env.VITE_MP_CONFIG` from the
+ * build environment, and vite bakes it into `import.meta.env`). A container
+ * image built by CI therefore ships whatever the CI job happened to export —
+ * usually nothing — and no amount of runtime container env reaches the
+ * browser, because `Config._lookupEnv` reads `process.env`, which does not
+ * exist there. The measured failure: the marketplace storefront had
+ * MARKETPLACE_API_URL on its container and still rendered "MARKETPLACE_API_URL
+ * is not configured", issuing ZERO catalog requests.
+ *
+ * The fix keeps the image environment-agnostic: the BUILD bakes only the
+ * NAMES of the public keys (`VITE_MP_PUBLIC_CONFIG_KEYS`), and the SSR node
+ * process resolves their VALUES from its own `process.env` at request time and
+ * publishes them into the served document.
+ *
+ * Transport: one inline `<script>` in `<head>` assigning a `globalThis` key —
+ * the SAME mechanism one uses for `__one_server_context__` (see one's
+ * `server/ServerContextScript`), deliberately sitting ALONGSIDE it rather
+ * than being a second, differently-shaped invention.
+ *
+ * Safety: `resolvePublicConfig` walks the BUILD-TIME PUBLIC ALLOWLIST, never
+ * the environment. A key that is not on `config.json`'s `public` list can not
+ * be serialized even if it is present in the SSR process env, so server-only
+ * secrets never reach the document.
+ */
+/**
+ * Global key the SSR document assigns the resolved public config to.
+ * Sibling of one's `__one_server_context__`.
+ */
+export declare const runtimePublicConfigKey = "__mp_public_config__";
+/**
+ * Build-time env key carrying the JSON array of PUBLIC config key names
+ * (written by `createViteConfig` in `@multiplatform.one/config/vite`).
+ * Only the NAMES are baked — values stay environment-agnostic.
+ */
+export declare const publicConfigKeysEnvKey = "VITE_MP_PUBLIC_CONFIG_KEYS";
+/**
+ * Build-time env key carrying the JSON object of public config values
+ * resolved from the BUILD environment. Still honored so apps that bake their
+ * config in (native, GNOME, static web) keep working unchanged.
+ */
+export declare const bakedConfigEnvKey = "VITE_MP_CONFIG";
+/**
+ * The PUBLIC key allowlist baked at build time. Empty when the app was not
+ * built through `createViteConfig` (tests, storybook, plain node) — in which
+ * case nothing is publishable and the payload stays empty, which is the safe
+ * direction to fail.
+ */
+export declare function publicConfigKeys(): string[];
+/** Public config values baked into the bundle at BUILD time. */
+export declare function bakedPublicConfig(): Record<string, string>;
+/**
+ * Resolve the public config the SSR document should publish.
+ *
+ * Iterates the ALLOWLIST — never the environment — so a private key present
+ * in `env` can not reach the returned object. Runtime env wins over the
+ * build-time bake, so a redeployed container overrides a stale baked value.
+ */
+export declare function resolvePublicConfig(env?: Record<string, string | undefined>): Record<string, string>;
+/**
+ * Read the payload the SSR document published. Returns undefined anywhere the
+ * document never ran (native, SSR itself, tests).
+ */
+export declare function readRuntimePublicConfig(): Record<string, string> | undefined;
+/**
+ * The inline `<script>` body that publishes the public config to the browser.
+ * Runs during document parse, so it lands before the deferred app bundle
+ * constructs its `Config`.
+ */
+export declare function serializeRuntimePublicConfig(config?: Record<string, string>): string;
+//# sourceMappingURL=runtimeConfig.d.ts.map

package/types/config/runtimeConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeConfig.d.ts","sourceRoot":"","sources":["../../src/config/runtimeConfig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH;;;GAGG;AACH,eAAO,MAAM,sBAAsB,yBAAyB,CAAC;AAE7D;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,+BAA+B,CAAC;AAEnE;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,mBAAmB,CAAC;AA0ClD;;;;;GAKG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,EAAE,CAI3C;AAED,gEAAgE;AAChE,wBAAgB,iBAAiB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAI1D;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAgB,GACrD,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOxB;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAI5E;AAeD;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAyB,GACrD,MAAM,CAER"}

package/types/config/runtimeConfig.native.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Native twin of `runtimeConfig.ts`.
+ *
+ * Identical API, minus `import.meta`: the vxrn/rolldown native bundle is a
+ * CLASSIC script for Hermes, where `import.meta` is a syntax error (the same
+ * reason `config.native.ts` exists as a hand-written twin of `config.ts`).
+ *
+ * Native has no SSR document, so `readRuntimePublicConfig` normally returns
+ * undefined and native keeps resolving through `expo-constants` +
+ * `process.env` exactly as before. The exports are kept so that shared code
+ * importing from `@multiplatform.one/platform` compiles on every target.
+ */
+export declare const runtimePublicConfigKey = "__mp_public_config__";
+export declare const publicConfigKeysEnvKey = "VITE_MP_PUBLIC_CONFIG_KEYS";
+export declare const bakedConfigEnvKey = "VITE_MP_CONFIG";
+export declare function publicConfigKeys(): string[];
+export declare function bakedPublicConfig(): Record<string, string>;
+export declare function resolvePublicConfig(env?: Record<string, string | undefined>): Record<string, string>;
+export declare function readRuntimePublicConfig(): Record<string, string> | undefined;
+export declare function serializeRuntimePublicConfig(config?: Record<string, string>): string;
+//# sourceMappingURL=runtimeConfig.native.d.ts.map

package/types/config/runtimeConfig.native.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeConfig.native.d.ts","sourceRoot":"","sources":["../../src/config/runtimeConfig.native.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,eAAO,MAAM,sBAAsB,yBAAyB,CAAC;AAC7D,eAAO,MAAM,sBAAsB,+BAA+B,CAAC;AACnE,eAAO,MAAM,iBAAiB,mBAAmB,CAAC;AA2BlD,wBAAgB,gBAAgB,IAAI,MAAM,EAAE,CAI3C;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAI1D;AAED,wBAAgB,mBAAmB,CACjC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAgB,GACrD,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOxB;AAED,wBAAgB,uBAAuB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAI5E;AAUD,wBAAgB,4BAA4B,CAC1C,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAyB,GACrD,MAAM,CAER"}