@saastemly/voidcommerce 0.10.0 → 0.11.0

package/dist/cli.js

@@ -21,7 +21,7 @@ import {
   runVoid,
   version,
   voidAppsIn
-} from "./index-mb1p1rh0.js";
+} from "./index-964eqtx0.js";
 import {
   LOCAL_KEY_FILE,
   PRIVATE_KEY_VAR,
@@ -50,7 +50,7 @@ import {
   setVariable,
   variableNames,
   verifyCloudflareToken
-} from "./index-vhsq8jpy.js";
+} from "./index-62q6669q.js";
 import {
   LAYOUTS,
   oneOrigin,

package/dist/generate/env.d.ts

@@ -3,6 +3,16 @@ import { type Manifest, has } from "../manifest";
 export declare function allEnvKeys(manifest: Manifest): EnvKey[];
 export declare function renderEnvTs(manifest: Manifest): string;
 export declare function renderEnvExample(manifest: Manifest): string;
+/**
+ * Keys whose value is the MANIFEST'S to decide, not the operator's.
+ *
+ * These are the shop's identity. Preserving whatever was already on disk is
+ * right for a credential and wrong for these: a shop copied from another one
+ * kept `SHOP_DOMAIN=tshirt.test` and an EMAIL_FROM at the wrong domain, which
+ * is how a storefront ends up quietly addressing the wrong business. If you
+ * want a different domain, change the manifest — that is what it is for.
+ */
+export declare const MANIFEST_OWNED_ENV: Set<string>;
 export declare function renderEnvLocal(manifest: Manifest): string;
 export declare function renderEnvProduction(manifest: Manifest): string;
 /** So the generator can say what it decided. */

package/dist/{index-vhsq8jpy.js → index-62q6669q.js}

@@ -233,6 +233,7 @@ function renderEnvExample(manifest) {
   ].join(`
 `);
 }
+var MANIFEST_OWNED_ENV = new Set(["SHOP_DOMAIN", "SHOP_ZONE", "EMAIL_FROM", "GITHUB_PAGES_HOST"]);
 function renderEnvLocal(manifest) {
   const keys = allEnvKeys(manifest);
   const local = {
@@ -385,7 +386,7 @@ async function decryptSecrets(project) {
   }
   const expected = committedPublicKey(root);
   if (expected) {
-    const { publicKeyFor } = await import("./keys-2q3qzntw.js");
+    const { publicKeyFor } = await import("./keys-1cqepd69.js");
     const derived = await publicKeyFor(privateKey);
     if (derived && derived.toLowerCase() !== expected.toLowerCase()) {
       return {
@@ -912,4 +913,4 @@ ${color2.green("✓")} re-keyed under ${made.publicKey.slice(0, 20)}… and ${PR
   return 0;
 }
 
-export { allEnvKeys, renderEnvTs, renderEnvExample, renderEnvLocal, renderEnvProduction, envSummary, ghAuth, repoSlug, setSecret, secretNames, setVariable, variableNames, verifyCloudflareToken, cloudflareAccounts, LOCAL_KEY_FILE, localPrivateKey, committedPublicKey, generateKeypair, publicKeyFor, keyState, provisionKey, ignoresKeyFile, keysCommand, SECRETS_FILE, PRIVATE_KEY_VAR, run2 as run, committedPublicKeyInto, declaredSecretNames, plaintextSecretNames, plaintextSecretEntries, decryptSecrets, secretsCommand, initSecrets, encryptInto };
+export { allEnvKeys, renderEnvTs, renderEnvExample, MANIFEST_OWNED_ENV, renderEnvLocal, renderEnvProduction, envSummary, ghAuth, repoSlug, setSecret, secretNames, setVariable, variableNames, verifyCloudflareToken, cloudflareAccounts, LOCAL_KEY_FILE, localPrivateKey, committedPublicKey, generateKeypair, publicKeyFor, keyState, provisionKey, ignoresKeyFile, keysCommand, SECRETS_FILE, PRIVATE_KEY_VAR, run2 as run, committedPublicKeyInto, declaredSecretNames, plaintextSecretNames, plaintextSecretEntries, decryptSecrets, secretsCommand, initSecrets, encryptInto };

package/dist/{index-mb1p1rh0.js → index-964eqtx0.js}

@@ -1,4 +1,5 @@
 import {
+  MANIFEST_OWNED_ENV,
   PRIVATE_KEY_VAR,
   SECRETS_FILE,
   allEnvKeys,
@@ -9,7 +10,7 @@ import {
   renderEnvLocal,
   renderEnvProduction,
   renderEnvTs
-} from "./index-vhsq8jpy.js";
+} from "./index-62q6669q.js";
 import {
   MANIFEST_FILE,
   has,
@@ -1370,7 +1371,7 @@ import color from "picocolors";
 // package.json
 var package_default = {
   name: "@saastemly/voidcommerce",
-  version: "0.10.0",
+  version: "0.11.0",
   description: "Void, with a shop in it. `vc init` walks you through Better Auth, betterCommerce and every plugin; everything else passes through to `void`.",
   type: "module",
   license: "MIT",
@@ -2344,6 +2345,8 @@ async function putEnv(root, file, rendered, result) {
     const match = /^\s*([A-Z][A-Z0-9_]*)\s*=\s*(.*)$/.exec(line2);
     if (!match)
       return line2;
+    if (MANIFEST_OWNED_ENV.has(match[1]))
+      return line2;
     const had = existing.get(match[1]);
     return had !== undefined && had !== "" && had !== "unset" ? `${match[1]}=${had}` : line2;
   }).join(`

package/dist/index.js

@@ -52,7 +52,7 @@ import {
   routeProblem,
   strictDependencies,
   upsertJsonc
-} from "./index-mb1p1rh0.js";
+} from "./index-964eqtx0.js";
 import {
   allEnvKeys,
   envSummary,
@@ -60,7 +60,7 @@ import {
   renderEnvLocal,
   renderEnvProduction,
   renderEnvTs
-} from "./index-vhsq8jpy.js";
+} from "./index-62q6669q.js";
 import {
   LAYOUTS,
   MANIFEST_FILE,

package/dist/{keys-2q3qzntw.js → keys-1cqepd69.js}

@@ -8,7 +8,7 @@ import {
   localPrivateKey,
   provisionKey,
   publicKeyFor
-} from "./index-vhsq8jpy.js";
+} from "./index-62q6669q.js";
 import"./index-tjy6yygc.js";
 import"./index-mnb7fz2t.js";
 import"./index-0v6na3yp.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@saastemly/voidcommerce",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "description": "Void, with a shop in it. `vc init` walks you through Better Auth, betterCommerce and every plugin; everything else passes through to `void`.",
   "type": "module",
   "license": "MIT",

package/src/generate/env.ts

@@ -105,6 +105,17 @@ export function renderEnvExample(manifest: Manifest): string {
 	].join("\n");
 }
 
+/**
+ * Keys whose value is the MANIFEST'S to decide, not the operator's.
+ *
+ * These are the shop's identity. Preserving whatever was already on disk is
+ * right for a credential and wrong for these: a shop copied from another one
+ * kept `SHOP_DOMAIN=tshirt.test` and an EMAIL_FROM at the wrong domain, which
+ * is how a storefront ends up quietly addressing the wrong business. If you
+ * want a different domain, change the manifest — that is what it is for.
+ */
+export const MANIFEST_OWNED_ENV = new Set(["SHOP_DOMAIN", "SHOP_ZONE", "EMAIL_FROM", "GITHUB_PAGES_HOST"]);
+
 export function renderEnvLocal(manifest: Manifest): string {
 	const keys = allEnvKeys(manifest);
 	const local: Record<string, string> = {

package/src/generate/index.ts

@@ -8,6 +8,7 @@ import {
 	envSummary,
 	renderEnvExample,
 	renderEnvLocal,
+	MANIFEST_OWNED_ENV,
 	renderEnvProduction,
 	renderEnvTs,
 } from "./env";
@@ -128,6 +129,9 @@ async function putEnv(root: string, file: string, rendered: string, result: Gene
 		.map((line) => {
 			const match = /^\s*([A-Z][A-Z0-9_]*)\s*=\s*(.*)$/.exec(line);
 			if (!match) return line;
+			// The shop's identity is the manifest's to decide; a value carried
+			// over from a shop this one was copied from is not a preference.
+			if (MANIFEST_OWNED_ENV.has(match[1]!)) return line;
 			const had = existing.get(match[1]!);
 			// A real value the operator set beats the template's placeholder.
 			// `unset` and empty are placeholders, not answers.