@multiplatform.one/platform 7.6.3 → 7.7.1

package/dist/cjs/config/runtimeConfig.cjs

@@ -32,14 +32,15 @@ __export(runtimeConfig_exports, {
   serializeRuntimePublicConfig: () => serializeRuntimePublicConfig
 });
 module.exports = __toCommonJS(runtimeConfig_exports);
-const import_meta = {};
 const runtimePublicConfigKey = "__mp_public_config__";
 const publicConfigKeysEnvKey = "VITE_MP_PUBLIC_CONFIG_KEYS";
 const bakedConfigEnvKey = "VITE_MP_CONFIG";
-function importMetaEnv() {
+function bakedEnv() {
   try {
-    if (typeof import_meta === "undefined") return {};
-    return import_meta.env || {};
+    return {
+      VITE_MP_CONFIG: process.env.VITE_MP_CONFIG,
+      VITE_MP_PUBLIC_CONFIG_KEYS: process.env.VITE_MP_PUBLIC_CONFIG_KEYS
+    };
   } catch {
     return {};
   }
@@ -53,7 +54,7 @@ function processEnv() {
   }
 }
 function readBuildEnv(key) {
-  return importMetaEnv()[key] ?? processEnv()[key];
+  return bakedEnv()[key] ?? processEnv()[key];
 }
 function parseJson(raw) {
   if (!raw) return void 0;

package/dist/esm/config/runtimeConfig.mjs

@@ -1,10 +1,12 @@
 const runtimePublicConfigKey = "__mp_public_config__";
 const publicConfigKeysEnvKey = "VITE_MP_PUBLIC_CONFIG_KEYS";
 const bakedConfigEnvKey = "VITE_MP_CONFIG";
-function importMetaEnv() {
+function bakedEnv() {
   try {
-    if (typeof import.meta === "undefined") return {};
-    return import.meta.env || {};
+    return {
+      VITE_MP_CONFIG: process.env.VITE_MP_CONFIG,
+      VITE_MP_PUBLIC_CONFIG_KEYS: process.env.VITE_MP_PUBLIC_CONFIG_KEYS
+    };
   } catch {
     return {};
   }
@@ -18,7 +20,7 @@ function processEnv() {
   }
 }
 function readBuildEnv(key) {
-  return importMetaEnv()[key] ?? processEnv()[key];
+  return bakedEnv()[key] ?? processEnv()[key];
 }
 function parseJson(raw) {
   if (!raw) return void 0;

package/dist/esm/config/runtimeConfig.mjs.map

@@ -1 +1 @@
-{"version":3,"names":["runtimePublicConfigKey","publicConfigKeysEnvKey","bakedConfigEnvKey","importMetaEnv","import","meta","env","processEnv","process","readBuildEnv","key","parseJson","raw","JSON","parse","stringifyValues","source","Object","entries","reduce","acc","value","String","publicConfigKeys","parsed","Array","isArray","filter","length","bakedPublicConfig","resolvePublicConfig","baked","readRuntimePublicConfig","globalThis","safeJsonStringify","stringify","replace","serializeRuntimePublicConfig","config"],"sources":["../../../src/config/runtimeConfig.ts"],"sourcesContent":[null],"mappings":"AAiCO,MAAMA,sBAAA,GAAyB;AAO/B,MAAMC,sBAAA,GAAyB;AAO/B,MAAMC,iBAAA,GAAoB;AAEjC,SAASC,cAAA,EAAoD;EAC3D,IAAI;IACF,IAAI,OAAOC,MAAA,CAAAC,IAAA,KAAgB,aAAa,OAAO,CAAC;IAChD,OAAQD,MAAA,CAAAC,IAAA,CAAYC,GAAA,IAAO,CAAC;EAC9B,QAAQ;IACN,OAAO,CAAC;EACV;AACF;AAEA,SAASC,WAAA,EAAiD;EACxD,IAAI;IAGF,IAAI,OAAOC,OAAA,KAAY,aAAa,OAAO,CAAC;IAC5C,OAAQA,OAAA,CAAQF,GAAA,IAAO,CAAC;EAC1B,QAAQ;IACN,OAAO,CAAC;EACV;AACF;AAEA,SAASG,aAAaC,GAAA,EAAiC;EACrD,OAAOP,aAAA,CAAc,EAAEO,GAAG,KAAKH,UAAA,CAAW,EAAEG,GAAG;AACjD;AAEA,SAASC,UAAUC,GAAA,EAAkC;EACnD,IAAI,CAACA,GAAA,EAAK,OAAO;EACjB,IAAI;IACF,OAAOC,IAAA,CAAKC,KAAA,CAAMF,GAAG;EACvB,QAAQ;IACN,OAAO;EACT;AACF;AAEA,SAASG,gBAAgBC,MAAA,EAAyD;EAChF,OAAOC,MAAA,CAAOC,OAAA,CAAQF,MAAM,EAAEG,MAAA,CAA+B,CAACC,GAAA,EAAK,CAACV,GAAA,EAAKW,KAAK,MAAM;IAClF,IAAI,OAAOA,KAAA,KAAU,eAAeA,KAAA,KAAU,MAAMD,GAAA,CAAIV,GAAG,IAAIY,MAAA,CAAOD,KAAK;IAC3E,OAAOD,GAAA;EACT,GAAG,CAAC,CAAC;AACP;AAQO,SAASG,iBAAA,EAA6B;EAC3C,MAAMC,MAAA,GAASb,SAAA,CAAUF,YAAA,CAAaR,sBAAsB,CAAC;EAC7D,IAAI,CAACwB,KAAA,CAAMC,OAAA,CAAQF,MAAM,GAAG,OAAO,EAAC;EACpC,OAAOA,MAAA,CAAOG,MAAA,CAAQjB,GAAA,IAAuB,OAAOA,GAAA,KAAQ,YAAYA,GAAA,CAAIkB,MAAA,GAAS,CAAC;AACxF;AAGO,SAASC,kBAAA,EAA4C;EAC1D,MAAML,MAAA,GAASb,SAAA,CAAUF,YAAA,CAAaP,iBAAiB,CAAC;EACxD,IAAI,CAACsB,MAAA,IAAU,OAAOA,MAAA,KAAW,YAAYC,KAAA,CAAMC,OAAA,CAAQF,MAAM,GAAG,OAAO,CAAC;EAC5E,OAAOT,eAAA,CAAgBS,MAAiC;AAC1D;AASO,SAASM,oBACdxB,GAAA,GAA0CC,UAAA,CAAW,GAC7B;EACxB,MAAMwB,KAAA,GAAQF,iBAAA,CAAkB;EAChC,OAAON,gBAAA,CAAiB,EAAEJ,MAAA,CAA+B,CAACC,GAAA,EAAKV,GAAA,KAAQ;IACrE,MAAMW,KAAA,GAAQf,GAAA,CAAII,GAAG,KAAKqB,KAAA,CAAMrB,GAAG;IACnC,IAAI,OAAOW,KAAA,KAAU,YAAYA,KAAA,CAAMO,MAAA,GAAS,GAAGR,GAAA,CAAIV,GAAG,IAAIW,KAAA;IAC9D,OAAOD,GAAA;EACT,GAAG,CAAC,CAAC;AACP;AAMO,SAASY,wBAAA,EAA8D;EAC5E,MAAMpB,GAAA,GAAOqB,UAAA,CAAkDjC,sBAAsB;EACrF,IAAI,CAACY,GAAA,IAAO,OAAOA,GAAA,KAAQ,YAAYa,KAAA,CAAMC,OAAA,CAAQd,GAAG,GAAG,OAAO;EAClE,OAAOG,eAAA,CAAgBH,GAA8B;AACvD;AAOA,SAASsB,kBAAkBb,KAAA,EAAwB;EACjD,OAAOR,IAAA,CAAKsB,SAAA,CAAUd,KAAA,IAAS,CAAC,CAAC,EAC9Be,OAAA,CAAQ,MAAM,SAAS,EACvBA,OAAA,CAAQ,MAAM,SAAS,EACvBA,OAAA,CAAQ,WAAW,SAAS,EAC5BA,OAAA,CAAQ,WAAW,SAAS;AACjC;AAOO,SAASC,6BACdC,MAAA,GAAiCR,mBAAA,CAAoB,GAC7C;EACR,OAAO,cAAcjB,IAAA,CAAKsB,SAAA,CAAUnC,sBAAsB,CAAC,KAAKkC,iBAAA,CAAkBI,MAAM,CAAC;AAC3F","ignoreList":[]}
+{"version":3,"names":["runtimePublicConfigKey","publicConfigKeysEnvKey","bakedConfigEnvKey","bakedEnv","VITE_MP_CONFIG","process","env","VITE_MP_PUBLIC_CONFIG_KEYS","processEnv","readBuildEnv","key","parseJson","raw","JSON","parse","stringifyValues","source","Object","entries","reduce","acc","value","String","publicConfigKeys","parsed","Array","isArray","filter","length","bakedPublicConfig","resolvePublicConfig","baked","readRuntimePublicConfig","globalThis","safeJsonStringify","stringify","replace","serializeRuntimePublicConfig","config"],"sources":["../../../src/config/runtimeConfig.ts"],"sourcesContent":[null],"mappings":"AA4BO,MAAMA,sBAAA,GAAyB;AAO/B,MAAMC,sBAAA,GAAyB;AAO/B,MAAMC,iBAAA,GAAoB;AAajC,SAASC,SAAA,EAA+C;EACtD,IAAI;IACF,OAAO;MACLC,cAAA,EAAgBC,OAAA,CAAQC,GAAA,CAAIF,cAAA;MAC5BG,0BAAA,EAA4BF,OAAA,CAAQC,GAAA,CAAIC;IAC1C;EACF,QAAQ;IACN,OAAO,CAAC;EACV;AACF;AAEA,SAASC,WAAA,EAAiD;EACxD,IAAI;IAGF,IAAI,OAAOH,OAAA,KAAY,aAAa,OAAO,CAAC;IAC5C,OAAQA,OAAA,CAAQC,GAAA,IAAO,CAAC;EAC1B,QAAQ;IACN,OAAO,CAAC;EACV;AACF;AAEA,SAASG,aAAaC,GAAA,EAAiC;EACrD,OAAOP,QAAA,CAAS,EAAEO,GAAG,KAAKF,UAAA,CAAW,EAAEE,GAAG;AAC5C;AAEA,SAASC,UAAUC,GAAA,EAAkC;EACnD,IAAI,CAACA,GAAA,EAAK,OAAO;EACjB,IAAI;IACF,OAAOC,IAAA,CAAKC,KAAA,CAAMF,GAAG;EACvB,QAAQ;IACN,OAAO;EACT;AACF;AAEA,SAASG,gBAAgBC,MAAA,EAAyD;EAChF,OAAOC,MAAA,CAAOC,OAAA,CAAQF,MAAM,EAAEG,MAAA,CAA+B,CAACC,GAAA,EAAK,CAACV,GAAA,EAAKW,KAAK,MAAM;IAClF,IAAI,OAAOA,KAAA,KAAU,eAAeA,KAAA,KAAU,MAAMD,GAAA,CAAIV,GAAG,IAAIY,MAAA,CAAOD,KAAK;IAC3E,OAAOD,GAAA;EACT,GAAG,CAAC,CAAC;AACP;AAQO,SAASG,iBAAA,EAA6B;EAC3C,MAAMC,MAAA,GAASb,SAAA,CAAUF,YAAA,CAAaR,sBAAsB,CAAC;EAC7D,IAAI,CAACwB,KAAA,CAAMC,OAAA,CAAQF,MAAM,GAAG,OAAO,EAAC;EACpC,OAAOA,MAAA,CAAOG,MAAA,CAAQjB,GAAA,IAAuB,OAAOA,GAAA,KAAQ,YAAYA,GAAA,CAAIkB,MAAA,GAAS,CAAC;AACxF;AAGO,SAASC,kBAAA,EAA4C;EAC1D,MAAML,MAAA,GAASb,SAAA,CAAUF,YAAA,CAAaP,iBAAiB,CAAC;EACxD,IAAI,CAACsB,MAAA,IAAU,OAAOA,MAAA,KAAW,YAAYC,KAAA,CAAMC,OAAA,CAAQF,MAAM,GAAG,OAAO,CAAC;EAC5E,OAAOT,eAAA,CAAgBS,MAAiC;AAC1D;AASO,SAASM,oBACdxB,GAAA,GAA0CE,UAAA,CAAW,GAC7B;EACxB,MAAMuB,KAAA,GAAQF,iBAAA,CAAkB;EAChC,OAAON,gBAAA,CAAiB,EAAEJ,MAAA,CAA+B,CAACC,GAAA,EAAKV,GAAA,KAAQ;IACrE,MAAMW,KAAA,GAAQf,GAAA,CAAII,GAAG,KAAKqB,KAAA,CAAMrB,GAAG;IACnC,IAAI,OAAOW,KAAA,KAAU,YAAYA,KAAA,CAAMO,MAAA,GAAS,GAAGR,GAAA,CAAIV,GAAG,IAAIW,KAAA;IAC9D,OAAOD,GAAA;EACT,GAAG,CAAC,CAAC;AACP;AAGO,SAASY,wBAAA,EAA8D;EAC5E,MAAMpB,GAAA,GAAOqB,UAAA,CAAkDjC,sBAAsB;EACrF,IAAI,CAACY,GAAA,IAAO,OAAOA,GAAA,KAAQ,YAAYa,KAAA,CAAMC,OAAA,CAAQd,GAAG,GAAG,OAAO;EAClE,OAAOG,eAAA,CAAgBH,GAA8B;AACvD;AAEA,SAASsB,kBAAkBb,KAAA,EAAwB;EACjD,OAAOR,IAAA,CAAKsB,SAAA,CAAUd,KAAA,IAAS,CAAC,CAAC,EAC9Be,OAAA,CAAQ,MAAM,SAAS,EACvBA,OAAA,CAAQ,MAAM,SAAS,EACvBA,OAAA,CAAQ,WAAW,SAAS,EAC5BA,OAAA,CAAQ,WAAW,SAAS;AACjC;AAGO,SAASC,6BACdC,MAAA,GAAiCR,mBAAA,CAAoB,GAC7C;EACR,OAAO,cAAcjB,IAAA,CAAKsB,SAAA,CAAUnC,sBAAsB,CAAC,KAAKkC,iBAAA,CAAkBI,MAAM,CAAC;AAC3F","ignoreList":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@multiplatform.one/platform",
-  "version": "7.6.3",
+  "version": "7.7.1",
   "description": "Platform detection flags and utilities for multiplatform.one",
   "keywords": [
     "detection",
@@ -50,13 +50,12 @@
     "@tamagui/build": "2.7.6",
     "@types/chrome": "^0.1.40",
     "@types/firefox-webext-browser": "^143.0.0",
-    "@types/react": "~19.2.14",
     "@vitest/coverage-v8": "^4.1.5",
     "happy-dom": "^20.9.0",
     "react": "19.2.5",
     "typescript": "~5.9.3",
     "vitest": "^4.1.5",
-    "@multiplatform.one/config": "7.6.3"
+    "@multiplatform.one/config": "7.7.1"
   },
   "peerDependencies": {
     "expo-constants": "~55.0.15",

package/src/config/runtimeConfig.spec.ts

@@ -126,3 +126,36 @@ describe("readRuntimePublicConfig", () => {
     expect(readRuntimePublicConfig()).toBeUndefined();
   });
 });
+
+// ---------------------------------------------------------------------------
+// Twin parity (MPO-192)
+// ---------------------------------------------------------------------------
+import { existsSync, readFileSync } from "node:fs";
+import { resolve } from "node:path";
+import * as esm from "./runtimeConfig";
+
+describe("runtimeConfig has no import.meta and bakes through static process.env reads", () => {
+  // vitest runs this package with cwd at its root and a browser-like
+  // environment where import.meta.url is not a file: URL, so anchor on cwd.
+  const here = resolve(process.cwd(), "src/config");
+  const source = readFileSync(`${here}/runtimeConfig.ts`, "utf8").replace(/\/\*[\s\S]*?\*\//g, "");
+
+  it("contains no import.meta token, because a classic script (Expo DOM component, Hermes) cannot even parse one", () => {
+    expect(source).not.toMatch(/import\.meta/);
+  });
+
+  it("reads each baked key as a static process.env member expression, the only spelling bundlers inline", () => {
+    expect(source).toMatch(/process\.env\.VITE_MP_CONFIG\b/);
+    expect(source).toMatch(/process\.env\.VITE_MP_PUBLIC_CONFIG_KEYS\b/);
+  });
+
+  it("has no platform twin, because One's web build and tamagui-build resolve .web.ts like Metro and a twin replaced the bake once", () => {
+    for (const twin of [
+      "runtimeConfig.web.ts",
+      "runtimeConfig.native.ts",
+      "runtimeConfig.classic.ts",
+    ]) {
+      expect(existsSync(`${here}/${twin}`), twin).toBe(false);
+    }
+  });
+});

package/src/config/runtimeConfig.ts

@@ -1,42 +1,37 @@
 /**
- * RUNTIME public-config seam: SSR document -> browser.
+ * Build-time and runtime public config, with no `import.meta` anywhere.
  *
- * Why this exists: `VITE_MP_CONFIG` is resolved by `@multiplatform.one/config`
- * at BUILD time (createViteConfig sets `process.env.VITE_MP_CONFIG` from the
- * build environment, and vite bakes it into `import.meta.env`). A container
- * image built by CI therefore ships whatever the CI job happened to export —
- * usually nothing — and no amount of runtime container env reaches the
- * browser, because `Config._lookupEnv` reads `process.env`, which does not
- * exist there. The measured failure: the marketplace storefront had
- * MARKETPLACE_API_URL on its container and still rendered "MARKETPLACE_API_URL
- * is not configured", issuing ZERO catalog requests.
+ * Why no `import.meta`: two bundles execute mpo as a CLASSIC script rather
+ * than an ES module, and in a classic script `import.meta` is a PARSE-time
+ * SyntaxError, so no `typeof import.meta` guard ever runs: the vxrn/rolldown
+ * native bundle for Hermes, and any Metro bundle for platform=web, which is
+ * what an Expo DOM component (`'use dom'`) and Expo web are (MPO-192: a
+ * knob-driven component inside a DOM component blanked the whole WebView with
+ * no diagnostics). A `.web.ts` / `.native.ts` twin is not a way out either:
+ * One's web build and tamagui-build both resolve `.web.ts` exactly as Metro
+ * does, so a web twin replaced this module in the Vite web build too and the
+ * bake vanished there. One file, one behaviour.
  *
- * The fix keeps the image environment-agnostic: the BUILD bakes only the
- * NAMES of the public keys (`VITE_MP_PUBLIC_CONFIG_KEYS`), and the SSR node
- * process resolves their VALUES from its own `process.env` at request time and
- * publishes them into the served document.
- *
- * Transport: one inline `<script>` in `<head>` assigning a `globalThis` key —
- * the SAME mechanism one uses for `__one_server_context__` (see one's
- * `server/ServerContextScript`), deliberately sitting ALONGSIDE it rather
- * than being a second, differently-shaped invention.
+ * Baking: `createViteConfig` sets `VITE_MP_CONFIG` (values) and
+ * `VITE_MP_PUBLIC_CONFIG_KEYS` (names) on `process.env` and defines both as
+ * `process.env.<KEY>` for the bundle; `bakedEnv` below reads exactly those two
+ * static expressions. The SSR document path (`readRuntimePublicConfig`) is
+ * unchanged: the node process resolves the allowlisted names from its own
+ * environment at request time and publishes them under
+ * `globalThis.__mp_public_config__`.
  *
  * Safety: `resolvePublicConfig` walks the BUILD-TIME PUBLIC ALLOWLIST, never
- * the environment. A key that is not on `config.json`'s `public` list can not
- * be serialized even if it is present in the SSR process env, so server-only
- * secrets never reach the document.
+ * the environment, so a private key present in `env` can not reach the
+ * returned object.
  */
 
-/**
- * Global key the SSR document assigns the resolved public config to.
- * Sibling of one's `__one_server_context__`.
- */
+/** Global the SSR document publishes the resolved public config under. */
 export const runtimePublicConfigKey = "__mp_public_config__";
 
 /**
- * Build-time env key carrying the JSON array of PUBLIC config key names
- * (written by `createViteConfig` in `@multiplatform.one/config/vite`).
- * Only the NAMES are baked — values stay environment-agnostic.
+ * Build-time env key carrying the JSON array of PUBLIC config key names. Names
+ * only, never a value: the SSR node process resolves values from its own
+ * environment at request time, so one build deploys to every environment.
  */
 export const publicConfigKeysEnvKey = "VITE_MP_PUBLIC_CONFIG_KEYS";
 
@@ -47,10 +42,23 @@ export const publicConfigKeysEnvKey = "VITE_MP_PUBLIC_CONFIG_KEYS";
  */
 export const bakedConfigEnvKey = "VITE_MP_CONFIG";
 
-function importMetaEnv(): Record<string, string | undefined> {
+/**
+ * The two baked keys, read as STATIC `process.env.<KEY>` member expressions.
+ * That exact spelling is what every bundler on the way to a browser inlines:
+ * `createViteConfig` defines both keys (like `process.env.VITE_FRAPPE_ENABLED`),
+ * vxrn's loadEnv under One defines every public key the same way, and Metro's
+ * babel does the same for `EXPO_PUBLIC_*`. A dynamic `env[key]` read is never
+ * inlined, and One's client build folds `typeof process` to "undefined", so
+ * anything that consults the environment first returns `{}` before the bake
+ * is ever seen. Where nothing defined the keys and `process` does not exist,
+ * the reads throw and the catch returns `{}`.
+ */
+function bakedEnv(): Record<string, string | undefined> {
   try {
-    if (typeof import.meta === "undefined") return {};
-    return (import.meta.env || {}) as Record<string, string | undefined>;
+    return {
+      VITE_MP_CONFIG: process.env.VITE_MP_CONFIG,
+      VITE_MP_PUBLIC_CONFIG_KEYS: process.env.VITE_MP_PUBLIC_CONFIG_KEYS,
+    };
   } catch {
     return {};
   }
@@ -68,7 +76,7 @@ function processEnv(): Record<string, string | undefined> {
 }
 
 function readBuildEnv(key: string): string | undefined {
-  return importMetaEnv()[key] ?? processEnv()[key];
+  return bakedEnv()[key] ?? processEnv()[key];
 }
 
 function parseJson(raw: string | undefined): unknown {
@@ -89,7 +97,7 @@ function stringifyValues(source: Record<string, unknown>): Record<string, string
 
 /**
  * The PUBLIC key allowlist baked at build time. Empty when the app was not
- * built through `createViteConfig` (tests, storybook, plain node) — in which
+ * built through `createViteConfig` (tests, storybook, plain node), in which
  * case nothing is publishable and the payload stays empty, which is the safe
  * direction to fail.
  */
@@ -109,8 +117,8 @@ export function bakedPublicConfig(): Record<string, string> {
 /**
  * Resolve the public config the SSR document should publish.
  *
- * Iterates the ALLOWLIST — never the environment — so a private key present
- * in `env` can not reach the returned object. Runtime env wins over the
+ * Iterates the ALLOWLIST, never the environment, so a private key present in
+ * `env` can not reach the returned object. Runtime env wins over the
  * build-time bake, so a redeployed container overrides a stale baked value.
  */
 export function resolvePublicConfig(
@@ -124,21 +132,13 @@ export function resolvePublicConfig(
   }, {});
 }
 
-/**
- * Read the payload the SSR document published. Returns undefined anywhere the
- * document never ran (native, SSR itself, tests).
- */
+/** The config the served document published, when there is one. */
 export function readRuntimePublicConfig(): Record<string, string> | undefined {
   const raw = (globalThis as unknown as Record<string, unknown>)[runtimePublicConfigKey];
   if (!raw || typeof raw !== "object" || Array.isArray(raw)) return undefined;
   return stringifyValues(raw as Record<string, unknown>);
 }
 
-/**
- * HTML-safe JSON: an inline `<script>` body must not be able to close its own
- * tag, and U+2028/U+2029 are line terminators to a JS parser but legal inside
- * a JSON string.
- */
 function safeJsonStringify(value: unknown): string {
   return JSON.stringify(value ?? {})
     .replace(/</g, "\\u003c")
@@ -147,11 +147,7 @@ function safeJsonStringify(value: unknown): string {
     .replace(/\u2029/g, "\\u2029");
 }
 
-/**
- * The inline `<script>` body that publishes the public config to the browser.
- * Runs during document parse, so it lands before the deferred app bundle
- * constructs its `Config`.
- */
+/** The inline script the SSR document carries so the client can read the config. */
 export function serializeRuntimePublicConfig(
   config: Record<string, string> = resolvePublicConfig(),
 ): string {

package/types/config/runtimeConfig.d.ts

@@ -1,40 +1,35 @@
 /**
- * RUNTIME public-config seam: SSR document -> browser.
+ * Build-time and runtime public config, with no `import.meta` anywhere.
  *
- * Why this exists: `VITE_MP_CONFIG` is resolved by `@multiplatform.one/config`
- * at BUILD time (createViteConfig sets `process.env.VITE_MP_CONFIG` from the
- * build environment, and vite bakes it into `import.meta.env`). A container
- * image built by CI therefore ships whatever the CI job happened to export —
- * usually nothing — and no amount of runtime container env reaches the
- * browser, because `Config._lookupEnv` reads `process.env`, which does not
- * exist there. The measured failure: the marketplace storefront had
- * MARKETPLACE_API_URL on its container and still rendered "MARKETPLACE_API_URL
- * is not configured", issuing ZERO catalog requests.
+ * Why no `import.meta`: two bundles execute mpo as a CLASSIC script rather
+ * than an ES module, and in a classic script `import.meta` is a PARSE-time
+ * SyntaxError, so no `typeof import.meta` guard ever runs: the vxrn/rolldown
+ * native bundle for Hermes, and any Metro bundle for platform=web, which is
+ * what an Expo DOM component (`'use dom'`) and Expo web are (MPO-192: a
+ * knob-driven component inside a DOM component blanked the whole WebView with
+ * no diagnostics). A `.web.ts` / `.native.ts` twin is not a way out either:
+ * One's web build and tamagui-build both resolve `.web.ts` exactly as Metro
+ * does, so a web twin replaced this module in the Vite web build too and the
+ * bake vanished there. One file, one behaviour.
  *
- * The fix keeps the image environment-agnostic: the BUILD bakes only the
- * NAMES of the public keys (`VITE_MP_PUBLIC_CONFIG_KEYS`), and the SSR node
- * process resolves their VALUES from its own `process.env` at request time and
- * publishes them into the served document.
- *
- * Transport: one inline `<script>` in `<head>` assigning a `globalThis` key —
- * the SAME mechanism one uses for `__one_server_context__` (see one's
- * `server/ServerContextScript`), deliberately sitting ALONGSIDE it rather
- * than being a second, differently-shaped invention.
+ * Baking: `createViteConfig` sets `VITE_MP_CONFIG` (values) and
+ * `VITE_MP_PUBLIC_CONFIG_KEYS` (names) on `process.env` and defines both as
+ * `process.env.<KEY>` for the bundle; `bakedEnv` below reads exactly those two
+ * static expressions. The SSR document path (`readRuntimePublicConfig`) is
+ * unchanged: the node process resolves the allowlisted names from its own
+ * environment at request time and publishes them under
+ * `globalThis.__mp_public_config__`.
  *
  * Safety: `resolvePublicConfig` walks the BUILD-TIME PUBLIC ALLOWLIST, never
- * the environment. A key that is not on `config.json`'s `public` list can not
- * be serialized even if it is present in the SSR process env, so server-only
- * secrets never reach the document.
- */
-/**
- * Global key the SSR document assigns the resolved public config to.
- * Sibling of one's `__one_server_context__`.
+ * the environment, so a private key present in `env` can not reach the
+ * returned object.
  */
+/** Global the SSR document publishes the resolved public config under. */
 export declare const runtimePublicConfigKey = "__mp_public_config__";
 /**
- * Build-time env key carrying the JSON array of PUBLIC config key names
- * (written by `createViteConfig` in `@multiplatform.one/config/vite`).
- * Only the NAMES are baked — values stay environment-agnostic.
+ * Build-time env key carrying the JSON array of PUBLIC config key names. Names
+ * only, never a value: the SSR node process resolves values from its own
+ * environment at request time, so one build deploys to every environment.
  */
 export declare const publicConfigKeysEnvKey = "VITE_MP_PUBLIC_CONFIG_KEYS";
 /**
@@ -45,7 +40,7 @@ export declare const publicConfigKeysEnvKey = "VITE_MP_PUBLIC_CONFIG_KEYS";
 export declare const bakedConfigEnvKey = "VITE_MP_CONFIG";
 /**
  * The PUBLIC key allowlist baked at build time. Empty when the app was not
- * built through `createViteConfig` (tests, storybook, plain node) — in which
+ * built through `createViteConfig` (tests, storybook, plain node), in which
  * case nothing is publishable and the payload stays empty, which is the safe
  * direction to fail.
  */
@@ -55,20 +50,13 @@ export declare function bakedPublicConfig(): Record<string, string>;
 /**
  * Resolve the public config the SSR document should publish.
  *
- * Iterates the ALLOWLIST — never the environment — so a private key present
- * in `env` can not reach the returned object. Runtime env wins over the
+ * Iterates the ALLOWLIST, never the environment, so a private key present in
+ * `env` can not reach the returned object. Runtime env wins over the
  * build-time bake, so a redeployed container overrides a stale baked value.
  */
 export declare function resolvePublicConfig(env?: Record<string, string | undefined>): Record<string, string>;
-/**
- * Read the payload the SSR document published. Returns undefined anywhere the
- * document never ran (native, SSR itself, tests).
- */
+/** The config the served document published, when there is one. */
 export declare function readRuntimePublicConfig(): Record<string, string> | undefined;
-/**
- * The inline `<script>` body that publishes the public config to the browser.
- * Runs during document parse, so it lands before the deferred app bundle
- * constructs its `Config`.
- */
+/** The inline script the SSR document carries so the client can read the config. */
 export declare function serializeRuntimePublicConfig(config?: Record<string, string>): string;
 //# sourceMappingURL=runtimeConfig.d.ts.map

package/types/config/runtimeConfig.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtimeConfig.d.ts","sourceRoot":"","sources":["../../src/config/runtimeConfig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH;;;GAGG;AACH,eAAO,MAAM,sBAAsB,yBAAyB,CAAC;AAE7D;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,+BAA+B,CAAC;AAEnE;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,mBAAmB,CAAC;AA0ClD;;;;;GAKG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,EAAE,CAI3C;AAED,gEAAgE;AAChE,wBAAgB,iBAAiB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAI1D;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAgB,GACrD,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOxB;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAI5E;AAeD;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAyB,GACrD,MAAM,CAER"}
+{"version":3,"file":"runtimeConfig.d.ts","sourceRoot":"","sources":["../../src/config/runtimeConfig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,0EAA0E;AAC1E,eAAO,MAAM,sBAAsB,yBAAyB,CAAC;AAE7D;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,+BAA+B,CAAC;AAEnE;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,mBAAmB,CAAC;AAuDlD;;;;;GAKG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,EAAE,CAI3C;AAED,gEAAgE;AAChE,wBAAgB,iBAAiB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAI1D;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAgB,GACrD,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOxB;AAED,mEAAmE;AACnE,wBAAgB,uBAAuB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAI5E;AAUD,oFAAoF;AACpF,wBAAgB,4BAA4B,CAC1C,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAyB,GACrD,MAAM,CAER"}

package/src/config/runtimeConfig.native.ts

@@ -1,84 +0,0 @@
-/**
- * Native twin of `runtimeConfig.ts`.
- *
- * Identical API, minus `import.meta`: the vxrn/rolldown native bundle is a
- * CLASSIC script for Hermes, where `import.meta` is a syntax error (the same
- * reason `config.native.ts` exists as a hand-written twin of `config.ts`).
- *
- * Native has no SSR document, so `readRuntimePublicConfig` normally returns
- * undefined and native keeps resolving through `expo-constants` +
- * `process.env` exactly as before. The exports are kept so that shared code
- * importing from `@multiplatform.one/platform` compiles on every target.
- */
-
-export const runtimePublicConfigKey = "__mp_public_config__";
-export const publicConfigKeysEnvKey = "VITE_MP_PUBLIC_CONFIG_KEYS";
-export const bakedConfigEnvKey = "VITE_MP_CONFIG";
-
-function processEnv(): Record<string, string | undefined> {
-  try {
-    if (typeof process === "undefined") return {};
-    return (process.env || {}) as Record<string, string | undefined>;
-  } catch {
-    return {};
-  }
-}
-
-function parseJson(raw: string | undefined): unknown {
-  if (!raw) return undefined;
-  try {
-    return JSON.parse(raw);
-  } catch {
-    return undefined;
-  }
-}
-
-function stringifyValues(source: Record<string, unknown>): Record<string, string> {
-  return Object.entries(source).reduce<Record<string, string>>((acc, [key, value]) => {
-    if (typeof value !== "undefined" && value !== null) acc[key] = String(value);
-    return acc;
-  }, {});
-}
-
-export function publicConfigKeys(): string[] {
-  const parsed = parseJson(processEnv()[publicConfigKeysEnvKey]);
-  if (!Array.isArray(parsed)) return [];
-  return parsed.filter((key): key is string => typeof key === "string" && key.length > 0);
-}
-
-export function bakedPublicConfig(): Record<string, string> {
-  const parsed = parseJson(processEnv()[bakedConfigEnvKey]);
-  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return {};
-  return stringifyValues(parsed as Record<string, unknown>);
-}
-
-export function resolvePublicConfig(
-  env: Record<string, string | undefined> = processEnv(),
-): Record<string, string> {
-  const baked = bakedPublicConfig();
-  return publicConfigKeys().reduce<Record<string, string>>((acc, key) => {
-    const value = env[key] ?? baked[key];
-    if (typeof value === "string" && value.length > 0) acc[key] = value;
-    return acc;
-  }, {});
-}
-
-export function readRuntimePublicConfig(): Record<string, string> | undefined {
-  const raw = (globalThis as unknown as Record<string, unknown>)[runtimePublicConfigKey];
-  if (!raw || typeof raw !== "object" || Array.isArray(raw)) return undefined;
-  return stringifyValues(raw as Record<string, unknown>);
-}
-
-function safeJsonStringify(value: unknown): string {
-  return JSON.stringify(value ?? {})
-    .replace(/</g, "\\u003c")
-    .replace(/>/g, "\\u003e")
-    .replace(/\u2028/g, "\\u2028")
-    .replace(/\u2029/g, "\\u2029");
-}
-
-export function serializeRuntimePublicConfig(
-  config: Record<string, string> = resolvePublicConfig(),
-): string {
-  return `globalThis[${JSON.stringify(runtimePublicConfigKey)}]=${safeJsonStringify(config)};`;
-}

package/types/config/runtimeConfig.native.d.ts

@@ -1,21 +0,0 @@
-/**
- * Native twin of `runtimeConfig.ts`.
- *
- * Identical API, minus `import.meta`: the vxrn/rolldown native bundle is a
- * CLASSIC script for Hermes, where `import.meta` is a syntax error (the same
- * reason `config.native.ts` exists as a hand-written twin of `config.ts`).
- *
- * Native has no SSR document, so `readRuntimePublicConfig` normally returns
- * undefined and native keeps resolving through `expo-constants` +
- * `process.env` exactly as before. The exports are kept so that shared code
- * importing from `@multiplatform.one/platform` compiles on every target.
- */
-export declare const runtimePublicConfigKey = "__mp_public_config__";
-export declare const publicConfigKeysEnvKey = "VITE_MP_PUBLIC_CONFIG_KEYS";
-export declare const bakedConfigEnvKey = "VITE_MP_CONFIG";
-export declare function publicConfigKeys(): string[];
-export declare function bakedPublicConfig(): Record<string, string>;
-export declare function resolvePublicConfig(env?: Record<string, string | undefined>): Record<string, string>;
-export declare function readRuntimePublicConfig(): Record<string, string> | undefined;
-export declare function serializeRuntimePublicConfig(config?: Record<string, string>): string;
-//# sourceMappingURL=runtimeConfig.native.d.ts.map

package/types/config/runtimeConfig.native.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtimeConfig.native.d.ts","sourceRoot":"","sources":["../../src/config/runtimeConfig.native.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,eAAO,MAAM,sBAAsB,yBAAyB,CAAC;AAC7D,eAAO,MAAM,sBAAsB,+BAA+B,CAAC;AACnE,eAAO,MAAM,iBAAiB,mBAAmB,CAAC;AA2BlD,wBAAgB,gBAAgB,IAAI,MAAM,EAAE,CAI3C;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAI1D;AAED,wBAAgB,mBAAmB,CACjC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAgB,GACrD,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOxB;AAED,wBAAgB,uBAAuB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAI5E;AAUD,wBAAgB,4BAA4B,CAC1C,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAyB,GACrD,MAAM,CAER"}