@volter/twin-googlefonts 1.0.1 → 1.0.2

package/dist/api/src/fetch.ts

@@ -1,16 +0,0 @@
-// GENERATED by scripts/create-pack.ts (--init, --index): a fixed file. The kernel serves the discovery door, the clock,
-// the World's doors, the vendor's screens and the API from the pack's parts (architecture, "The pack contract").
-import { createPackFetch, type DerivedFetch, type DerivedSurface, type PackFetchOptions } from '@volter/world-core';
-import surface from './generated/surface.gen.json' with { type: 'json' };
-import { manifest } from './manifest.ts';
-import * as doors from './semantics/doors.ts';
-import { apiSemantics } from './semantics/index.ts';
-
-export function createApiLaneFetch(options: PackFetchOptions = {}): DerivedFetch {
-  return createPackFetch({
-    manifest,
-    surface: surface as DerivedSurface,
-    handlers: apiSemantics,
-    doors,
-  }, options);
-}

package/dist/api/src/index.ts

@@ -1,3 +0,0 @@
-// The api lane of the googlefonts pack: the vendor's manifest routes its requests here.
-export { createApiLaneFetch } from './fetch.ts';
-export { manifest } from './manifest.ts';

package/dist/api/src/manifest.ts

@@ -1,31 +0,0 @@
-// Vendor wire facts; the surface is derived from the retained spec.
-import type { DerivedManifest } from '@volter/world-core';
-import { states } from './semantics/states.ts';
-export const manifest: DerivedManifest = {
-  vendor: 'googlefonts', service: 'googlefonts', body: { json: 'always' },
-  ids: { template: '{uuid}' }, time: 'iso',
-  error: { error: { code: '{status}', message: '{message}', status: '{kind}' } },
-  readOnly: { status: 403, kind: 'PERMISSION_DENIED', message: 'Read-only World' },
-  notFound: { status: 404, kind: 'NOT_FOUND', message: 'Not Found' },
-  gap: { status: 404, kind: 'NOT_FOUND', message: 'Not Found' },
-  list: { style: 'envelope', envelope: { items: '{data}' }, limit: { param: 'limit', default: 100, max: 100 } },
-  deleted: {},
-  resources: { webfont: { idPrefix: '', ...states.webfont,
-    refresh: { none: 'The selected reference snapshot is publisher data, not an account-owned font mutation; no full-live-catalog refresh is claimed.' } },
-    _project: { idPrefix: '' },
-    _api_key: { idPrefix: '', ...states._api_key } },
-  discovery: { twinOf: 'Google Fonts Developer API', stores: 'Published catalog and font representations in the shared googlefonts store' },
-  // The pinned helper uses the older documented prefix; no app request is rewritten.
-  pathPrefix: '^/webfonts(?=/v1/webfonts$)',
-  // The core reads query keys and gates against actual issued hashes. Doors bypass the API gate.
-  auth: { header: 'x-goog-api-key', scheme: '', also: [{ query: 'key' }], paths: '^/(webfonts/)?v1/webfonts$',
-    missing: { status: 403, kind: 'PERMISSION_DENIED', message: 'The request is missing a valid API key.' },
-    invalid: { status: 400, kind: 'INVALID_ARGUMENT', message: 'API key not valid. Please pass a valid API key.' },
-    invalidKeys: [], gateWhenAbsent: true, held: { storedAs: '_api_key', hashField: 'sha256' } },
-  doors: [{ id: 'appCredentials', method: 'POST', path: '/_twin/app-credentials', note: 'Issue the World application key' },
-    { id: 'publishCatalog', method: 'POST', path: '/_twin/catalog', note: 'Google publishes fonts without a Developer API create operation; import its actual catalog/CSS/blob snapshot' }],
-  descriptor: { protocol: '3', transport: 'rest', archetype: 'crud', bin: 'world-googlefonts-api',
-    resources: [], specSource: 'api/spec/SOURCE.md', description: 'Google Fonts Developer API',
-    adoption: { sdks: [], envStems: [] }, hosts: [{ host: 'webfonts.googleapis.com' }, { host: 'www.googleapis.com', pathPattern: '^/webfonts/v1/webfonts$' }],
-    endpointEnvNone: 'The application hardcodes this vendor lane host.' },
-};

package/dist/api/src/semantics/doors.ts

@@ -1,131 +0,0 @@
-// Google supplies catalog records and keys outside the read-only Fonts API.
-import type { HandlerContext } from '@volter/world-core';
-import { FONT, CATALOG, CSS, FILE, KEY, object, assetKey, cssKey, css2Key, css2Query, googleError } from './shared.ts';
-
-// source: https://developers.google.com/fonts/docs/developer_api
-export async function appCredentials(ctx: HandlerContext): Promise<Response> {
-  const project = await ctx.tenant('_project', async organization =>
-    String((await ctx.create('_project', { name: organization.label, owner: organization.members[0] }, 'project.create')).id));
-  const value = async (id: string): Promise<string> => 'AIza' + (await ctx.secret(`googlefonts:application-api-key:${id}`)).slice(0, 35);
-  const key = await ctx.accountKey('api-key', KEY, {
-    make: async () => {
-      const row = await ctx.create(KEY, { _project: project.id, name: ctx.deployment() || 'world' }, 'api_key.create');
-      const id = String(row.id), secret = await value(id);
-      await ctx.record(KEY, { sha256: ctx.crypto.digest('sha256', secret) }, id);
-      return id;
-    },
-    read: async row => {
-      if (row._project !== project.id) return undefined;
-      const secret = await value(String(row.id));
-      return row.sha256 === ctx.crypto.digest('sha256', secret) ? secret : undefined;
-    },
-  });
-  return Response.json({ api_key: key.secret });
-}
-
-// source: https://developers.google.com/fonts/docs/developer_api
-export async function publishCatalog(ctx: HandlerContext): Promise<Response> {
-  // There is no Developer API create-font operation. This explicit publisher
-  // door imports real vendor-shaped objects and their representations.
-  const input = object(ctx.body), catalog = object(input.catalog);
-  const fonts = Array.isArray(catalog.items) ? catalog.items.map(object) : [];
-  const sheets = Array.isArray(input.stylesheets) ? input.stylesheets.map(object) : [];
-  const files = Array.isArray(input.assets) ? input.assets.map(object) : [];
-  // CSS2 serves Google's whole library by its query, not only the Developer API items published here.
-  const sheets2 = Array.isArray(input.stylesheets2) ? input.stylesheets2.map(object) : [];
-  if (catalog.kind !== 'webfonts#webfontList' || fonts.length === 0)
-    return googleError(400, 'A webfonts#webfontList catalog is required');
-  const names = new Set<string>();
-  const strings = (value: unknown): value is string[] => Array.isArray(value) && value.length > 0 &&
-    value.every(v => typeof v === 'string' && v.length > 0) && new Set(value).size === value.length;
-  const decoded = new Map<string, { url: string; contentType: string; bytes: Uint8Array; hash: string }>();
-  try {
-    for (const file of files) {
-      if (typeof file.url !== 'string' || typeof file.contentType !== 'string' ||
-          !/^[a-zA-Z0-9.+-]+\/[a-zA-Z0-9.+-]+(?:;[^\r\n]*)?$/.test(file.contentType) ||
-          typeof file.base64 !== 'string' || !file.base64 ||
-          !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(file.base64))
-        throw new Error('Each asset needs its gstatic URL, Content-Type and complete base64 bytes');
-      const key = assetKey(file.url);
-      if (!/^\/s\/[^?]+$|^\/l\/font\?/.test(key) || decoded.has(key)) throw new Error('Invalid or duplicate asset URL');
-      const bytes = Uint8Array.from(atob(file.base64), c => c.charCodeAt(0));
-      if (bytes.length === 0) throw new Error('Font bytes must not be empty');
-      decoded.set(key, { url: file.url, contentType: file.contentType, bytes, hash: ctx.crypto.digest('sha256', bytes) });
-    }
-    for (const font of fonts) {
-      if (typeof font.family !== 'string' || !font.family || names.has(font.family) ||
-          font.kind !== 'webfonts#webfont' || !strings(font.variants) || !strings(font.subsets) ||
-          typeof font.category !== 'string' || typeof font.version !== 'string' ||
-          typeof font.lastModified !== 'string' || !/^\d{4}-\d{2}-\d{2}$/.test(font.lastModified))
-        throw new Error('Invalid or duplicate vendor font item');
-      names.add(font.family);
-      const fileMap = object(font.files);
-      for (const variant of font.variants) {
-        if (typeof fileMap[variant] !== 'string' || !decoded.has(assetKey(fileMap[variant] as string)))
-          throw new Error('Every advertised variant file must have a genuine supplied blob');
-      }
-      if (font.menu !== undefined && (typeof font.menu !== 'string' || !decoded.has(assetKey(font.menu))))
-        throw new Error('An advertised menu URL must have a supplied blob');
-    }
-    const representations = new Set<string>();
-    for (const sheet of sheets) {
-      if (typeof sheet.family !== 'string' || typeof sheet.subset !== 'string' ||
-          typeof sheet.userAgent !== 'string' || !sheet.userAgent || typeof sheet.css !== 'string' ||
-          !sheet.css.includes('@font-face')) throw new Error('Invalid stylesheet representation');
-      const split = sheet.family.lastIndexOf(':');
-      const family = split < 0 ? sheet.family : sheet.family.slice(0, split);
-      const variant = split < 0 ? 'regular' : sheet.family.slice(split + 1);
-      const font = fonts.find(f => f.family === family);
-      if (!font || !(font.variants as string[]).includes(variant) ||
-          sheet.subset.split(',').some(s => !(font.subsets as string[]).includes(s)))
-        throw new Error('Stylesheet request must name a published font, variant and subset');
-      const key = cssKey(ctx, sheet.family, sheet.subset, sheet.userAgent);
-      if (representations.has(key)) throw new Error('Duplicate stylesheet request');
-      representations.add(key);
-      const urls = [...sheet.css.matchAll(/url\((https?:\/\/[^)]+)\)/g)].map(m => m[1]!);
-      if (urls.length === 0 || urls.some(url => !decoded.has(assetKey(url))))
-        throw new Error('Every stylesheet src URL must have a supplied blob');
-    }
-    for (const sheet of sheets2) {
-      const pairs = typeof sheet.query === 'string' ? css2Query(new URLSearchParams(sheet.query)) : undefined;
-      if (!pairs || typeof sheet.userAgent !== 'string' || typeof sheet.css !== 'string' || !sheet.css.includes('@font-face'))
-        throw new Error('Invalid CSS2 stylesheet representation');
-      const key = css2Key(ctx, pairs, sheet.userAgent);
-      if (representations.has(key)) throw new Error('Duplicate stylesheet request');
-      representations.add(key);
-      const urls = [...sheet.css.matchAll(/url\((https?:\/\/[^)]+)\)/g)].map(m => m[1]!);
-      if (urls.length === 0 || urls.some(url => !decoded.has(assetKey(url))))
-        throw new Error('Every stylesheet src URL must have a supplied blob');
-    }
-    // A content-addressed font URL keeps its bytes across publications.
-    for (const [key, file] of decoded) {
-      const prior = ctx.row(FILE, key);
-      if (prior && prior.sha256 !== file.hash) return googleError(409, 'Published font URL already names other bytes', 'ALREADY_EXISTS');
-    }
-  } catch (cause) { return googleError(400, cause instanceof Error ? cause.message : 'Invalid catalog publication'); }
-  const fingerprint = ctx.crypto.digest('sha256', JSON.stringify(input));
-  if (ctx.row(CATALOG, 'published')?.fingerprint === fingerprint) return Response.json({ families: [...names] });
-  // Validation precedes all writes. Publish the catalog pointer last: readers
-  // select only this generation's metadata and stylesheet records.
-  for (const [key, file] of decoded) {
-    const blob = 'font-' + file.hash;
-    await ctx.blobs.put(blob, file.bytes);
-    await ctx.record(FILE, { url: file.url, contentType: file.contentType, sha256: file.hash, blob }, key);
-  }
-  // A font item is the vendor's resource, not bookkeeping: written as the publication that made it.
-  for (const font of fonts) await ctx.write(FONT, fingerprint + ':' + font.family, font, 'webfont.publish');
-  for (const sheet of sheets) {
-    const key = cssKey(ctx, sheet.family as string, sheet.subset as string, sheet.userAgent as string);
-    const blob = 'css-' + ctx.crypto.digest('sha256', sheet.css as string);
-    await ctx.blobs.put(blob, new TextEncoder().encode(sheet.css as string));
-    await ctx.record(CSS, { family: sheet.family, subset: sheet.subset, userAgent: sheet.userAgent, blob }, fingerprint + ':' + key);
-  }
-  for (const sheet of sheets2) {
-    const key = css2Key(ctx, css2Query(new URLSearchParams(sheet.query as string))!, sheet.userAgent as string);
-    const blob = 'css-' + ctx.crypto.digest('sha256', sheet.css as string);
-    await ctx.blobs.put(blob, new TextEncoder().encode(sheet.css as string));
-    await ctx.record(CSS, { query: sheet.query, userAgent: sheet.userAgent, blob }, fingerprint + ':' + key);
-  }
-  await ctx.record(CATALOG, { families: [...names], fingerprint }, 'published');
-  return Response.json({ families: [...names] }, { status: 201 });
-}

package/dist/api/src/semantics/index.ts

@@ -1,8 +0,0 @@
-// GENERATED by scripts/create-pack.ts --index: the handler map, by operationId, from the families' files (each
-// handler named as its operation). Do not edit; add a handler to its family's file and generate again.
-import type { Handler } from '@volter/world-core';
-import * as webfonts from './webfonts.ts';
-
-export const apiSemantics: Record<string, Handler> = {
-  "webfonts.webfonts.list": webfonts.webfonts_webfonts_list,
-};

package/dist/api/src/semantics/shared.ts

@@ -1 +0,0 @@
-export * from '../../../src/semantics/shared.ts';

package/dist/api/src/semantics/states.ts

@@ -1,6 +0,0 @@
-// The catalog and its immutable representations have no status transition.
-// Keys are issued once and stored as hashes; this scope has no key revocation API.
-export const states = {
-  webfont: { notState: ['family', 'variants', 'subsets', 'category', 'version', 'lastModified'] },
-  _api_key: { notState: ['sha256'] },
-};

package/dist/api/src/semantics/webfonts.ts

@@ -1,32 +0,0 @@
-import type { HandlerContext } from '@volter/world-core';
-import { FONT, CATALOG, googleError } from './shared.ts';
-
-// source: spec:webfonts.webfonts.list "Retrieves the list of fonts currently served by the Google Fonts Developer API."
-export async function webfonts_webfonts_list(ctx: HandlerContext): Promise<Response> {
-  const query = new URL(ctx.call.request.url).searchParams;
-  // Where this scope stops: the demand selects the default static-TTF catalog.
-  // VF/WOFF2/FAMILY_TAGS need an independently published capability snapshot.
-  if (query.getAll('capability').some(c => c && c !== 'CAPABILITY_UNSPECIFIED'))
-    return googleError(400, 'This published catalog does not provide the requested capability');
-  const published = ctx.row(CATALOG, 'published');
-  const names = Array.isArray(published?.families) ? published.families : [];
-  let items = names.flatMap(family => {
-    const row = ctx.row(FONT, String(published?.fingerprint) + ':' + String(family));
-    return row ? [ctx.own(row)] : [];
-  });
-  for (const field of ['family', 'subset', 'category']) {
-    const asked = query.getAll(field);
-    if (asked.length) items = items.filter(item => asked.some(value => field === 'subset'
-      ? Array.isArray(item.subsets) && item.subsets.includes(value) : item[field] === value));
-  }
-  // source: https://developers.google.com/fonts/docs/developer_api
-  const sort = (query.get('sort') ?? 'alpha').toLowerCase();
-  if (!['sort_undefined', 'alpha', 'date', 'popularity', 'style', 'trending'].includes(sort))
-    return googleError(400, 'Invalid sort value');
-  if (sort === 'alpha' || sort === 'sort_undefined') items.sort((a,b) => String(a.family).localeCompare(String(b.family), 'en'));
-  else if (sort === 'date') items.sort((a,b) => String(b.lastModified).localeCompare(String(a.lastModified)));
-  else if (sort === 'style') items.sort((a,b) => (Array.isArray(b.variants) ? b.variants.length : 0) - (Array.isArray(a.variants) ? a.variants.length : 0));
-  // Popularity/trending retain the publisher's catalog order. The reference
-  // snapshot is one actual font, not a manufactured global popularity ranking.
-  return Response.json({ kind: 'webfonts#webfontList', items });
-}

package/dist/assets/src/fetch.ts

@@ -1,14 +0,0 @@
-// GENERATED by scripts/create-pack.ts (--init, --index): a fixed file. The kernel serves the discovery door, the clock,
-// the World's doors, the vendor's screens and the API from the pack's parts (architecture, "The pack contract").
-import { createPackFetch, type DerivedFetch, type DerivedSurface, type PackFetchOptions } from '@volter/world-core';
-import surface from './generated/surface.gen.json' with { type: 'json' };
-import { manifest } from './manifest.ts';
-import { assetsSemantics } from './semantics/index.ts';
-
-export function createAssetsLaneFetch(options: PackFetchOptions = {}): DerivedFetch {
-  return createPackFetch({
-    manifest,
-    surface: surface as DerivedSurface,
-    handlers: assetsSemantics,
-  }, options);
-}

package/dist/assets/src/index.ts

@@ -1,3 +0,0 @@
-// The assets lane of the googlefonts pack: the vendor's manifest routes its requests here.
-export { createAssetsLaneFetch } from './fetch.ts';
-export { manifest } from './manifest.ts';

package/dist/assets/src/manifest.ts

@@ -1,19 +0,0 @@
-// Vendor wire facts; the surface is derived from the retained spec.
-import type { DerivedManifest } from '@volter/world-core';
-export const manifest: DerivedManifest = {
-  vendor: 'googlefonts', service: 'googlefonts', body: { json: 'always' },
-  ids: { template: '{uuid}' }, time: 'iso',
-  error: { error: { code: '{status}', message: '{message}', status: '{kind}' } },
-  readOnly: { status: 403, kind: 'PERMISSION_DENIED', message: 'Read-only World' },
-  notFound: { status: 404, kind: 'NOT_FOUND', message: 'Not Found' },
-  gap: { status: 404, kind: 'NOT_FOUND', message: 'Not Found' },
-  list: { style: 'envelope', envelope: { items: '{data}' }, limit: { param: 'limit', default: 100, max: 100 } },
-  deleted: {},
-  resources: {},
-  discovery: { twinOf: 'Google Fonts font bytes', stores: 'Published catalog and font representations in the shared googlefonts store' },
-  spanning: ['file'],
-  descriptor: { protocol: '3', transport: 'rest', archetype: 'crud', bin: 'world-googlefonts-assets',
-    resources: [], specSource: 'assets/spec/SOURCE.md', description: 'Google Fonts font bytes',
-    adoption: { sdks: [], envStems: [] }, hosts: [{ host: 'fonts.gstatic.com', pathPattern: '^/(s/|l/font$)' }],
-    endpointEnvNone: 'The application hardcodes this vendor lane host.' },
-};

package/dist/assets/src/semantics/index.ts

@@ -1,10 +0,0 @@
-// GENERATED by scripts/create-pack.ts --index: the handler map, by operationId, from the families' files (each
-// handler named as its operation). Do not edit; add a handler to its family's file and generate again.
-import type { Handler } from '@volter/world-core';
-import * as l from './l.ts';
-import * as s from './s.ts';
-
-export const assetsSemantics: Record<string, Handler> = {
-  getFontFile: s.getFontFile,
-  getLegacyFontFile: l.getLegacyFontFile,
-};

package/dist/assets/src/semantics/l.ts

@@ -1,4 +0,0 @@
-import type { HandlerContext } from '@volter/world-core';
-import { downloadFont } from './shared.ts';
-// source: spec:getLegacyFontFile "Download the font-file bytes named by a Google Fonts stylesheet src URL for a legacy browser."
-export async function getLegacyFontFile(ctx: HandlerContext): Promise<Response> { return downloadFont(ctx); }

package/dist/assets/src/semantics/s.ts

@@ -1,4 +0,0 @@
-import type { HandlerContext } from '@volter/world-core';
-import { downloadFont } from './shared.ts';
-// source: spec:getFontFile "Download the font-file bytes named by a Google Fonts stylesheet src URL."
-export async function getFontFile(ctx: HandlerContext): Promise<Response> { return downloadFont(ctx); }

package/dist/assets/src/semantics/shared.ts

@@ -1,13 +0,0 @@
-import type { HandlerContext } from '@volter/world-core';
-import { FILE, assetKey, htmlError } from '../../../src/semantics/shared.ts';
-
-export async function downloadFont(ctx: HandlerContext): Promise<Response> {
-  const request = new URL(ctx.call.request.url);
-  const vendorUrl = new URL(request.pathname + request.search, 'https://fonts.gstatic.com');
-  const row = ctx.row(FILE, assetKey(vendorUrl.href));
-  if (!row) return htmlError(404, 'Font file not found');
-  const body = await ctx.blobs.get(String(row.blob));
-  if (!body) return htmlError(404, 'Font file not found');
-  return new Response(Uint8Array.from(body).buffer, { headers: { 'content-type': String(row.contentType), 'content-length': String(body.length),
-    'access-control-allow-origin': '*', 'cache-control': 'public, max-age=31536000, immutable' } });
-}

package/dist/css/src/fetch.ts

@@ -1,14 +0,0 @@
-// GENERATED by scripts/create-pack.ts (--init, --index): a fixed file. The kernel serves the discovery door, the clock,
-// the World's doors, the vendor's screens and the API from the pack's parts (architecture, "The pack contract").
-import { createPackFetch, type DerivedFetch, type DerivedSurface, type PackFetchOptions } from '@volter/world-core';
-import surface from './generated/surface.gen.json' with { type: 'json' };
-import { manifest } from './manifest.ts';
-import { cssSemantics } from './semantics/index.ts';
-
-export function createCssLaneFetch(options: PackFetchOptions = {}): DerivedFetch {
-  return createPackFetch({
-    manifest,
-    surface: surface as DerivedSurface,
-    handlers: cssSemantics,
-  }, options);
-}

package/dist/css/src/index.ts

@@ -1,3 +0,0 @@
-// The css lane of the googlefonts pack: the vendor's manifest routes its requests here.
-export { createCssLaneFetch } from './fetch.ts';
-export { manifest } from './manifest.ts';

package/dist/css/src/manifest.ts

@@ -1,19 +0,0 @@
-// Vendor wire facts; the surface is derived from the retained spec.
-import type { DerivedManifest } from '@volter/world-core';
-export const manifest: DerivedManifest = {
-  vendor: 'googlefonts', service: 'googlefonts', body: { json: 'always' },
-  ids: { template: '{uuid}' }, time: 'iso',
-  error: { error: { code: '{status}', message: '{message}', status: '{kind}' } },
-  readOnly: { status: 403, kind: 'PERMISSION_DENIED', message: 'Read-only World' },
-  notFound: { status: 404, kind: 'NOT_FOUND', message: 'Not Found' },
-  gap: { status: 404, kind: 'NOT_FOUND', message: 'Not Found' },
-  list: { style: 'envelope', envelope: { items: '{data}' }, limit: { param: 'limit', default: 100, max: 100 } },
-  deleted: {},
-  resources: {},
-  discovery: { twinOf: 'Google Fonts browser-selected CSS', stores: 'Published catalog and font representations in the shared googlefonts store' },
-  
-  descriptor: { protocol: '3', transport: 'rest', archetype: 'crud', bin: 'world-googlefonts-css',
-    resources: [], specSource: 'css/spec/SOURCE.md', description: 'Google Fonts browser-selected CSS',
-    adoption: { sdks: [], envStems: [] }, hosts: [{ host: 'fonts.googleapis.com', pathPattern: '^/css2?$' }],
-    endpointEnvNone: 'The application hardcodes this vendor lane host.' },
-};

package/dist/css/src/semantics/css.ts

@@ -1,19 +0,0 @@
-import type { HandlerContext } from '@volter/world-core';
-import { CATALOG, CSS, cssKey, htmlError } from './shared.ts';
-
-// source: spec:getStylesheet "The representation is selected for the requesting browser."
-export async function getStylesheet(ctx: HandlerContext): Promise<Response> {
-  const query = new URL(ctx.call.request.url).searchParams;
-  const family = query.get('family'), subset = query.get('subset') ?? 'latin';
-  if (!family || [...query.keys()].some(k => !['family','subset'].includes(k)))
-    return htmlError(400, 'Bad font request');
-  const generation = ctx.row(CATALOG, 'published')?.fingerprint;
-  const key = cssKey(ctx, family, subset, ctx.call.request.headers.get('user-agent') ?? '');
-  const row = generation === undefined ? undefined : ctx.row(CSS, String(generation) + ':' + key);
-  // Where the documentation stops: no supplied representation is a named
-  // refusal, not an invented conversion or another browser's font format.
-  if (!row) return htmlError(400, 'Font family or browser representation is not published');
-  const body = await ctx.blobs.get(String(row.blob));
-  if (!body) return htmlError(404, 'Font stylesheet not found');
-  return new Response(Uint8Array.from(body).buffer, { headers: { 'content-type': 'text/css; charset=utf-8', 'content-length': String(body.length), 'vary': 'User-Agent' } });
-}

package/dist/css/src/semantics/css2.ts

@@ -1,20 +0,0 @@
-import type { HandlerContext } from '@volter/world-core';
-import { CATALOG, CSS, css2Key, css2Query, htmlError } from './shared.ts';
-
-// source: spec:getStylesheet2 "To request multiple families, specify the family= param for each family."
-export async function getStylesheet2(ctx: HandlerContext): Promise<Response> {
-  const pairs = css2Query(new URL(ctx.call.request.url).searchParams);
-  if (!pairs) return htmlError(400, 'Bad font request');
-  const generation = ctx.row(CATALOG, 'published')?.fingerprint;
-  const userAgent = ctx.call.request.headers.get('user-agent') ?? '';
-  const sheet = (agent: string) => generation === undefined ? undefined : ctx.row(CSS, String(generation) + ':' + css2Key(ctx, pairs, agent));
-  // Where the evidence stops: Google answered the same truetype stylesheet to no User-Agent, "node" and "undici"
-  // (vendor/inter.json). A request whose agent is not a browser's ("Mozilla/...") and has no representation of its
-  // own reads the one published for no agent; a browser without its own representation is refused, never sent
-  // another browser's format.
-  const row = sheet(userAgent) ?? (userAgent.startsWith('Mozilla/') ? undefined : sheet(''));
-  if (!row) return htmlError(400, 'Font family or browser representation is not published');
-  const body = await ctx.blobs.get(String(row.blob));
-  if (!body) return htmlError(404, 'Font stylesheet not found');
-  return new Response(Uint8Array.from(body).buffer, { headers: { 'content-type': 'text/css; charset=utf-8', 'content-length': String(body.length), 'access-control-allow-origin': '*' } });
-}

package/dist/css/src/semantics/index.ts

@@ -1,10 +0,0 @@
-// GENERATED by scripts/create-pack.ts --index: the handler map, by operationId, from the families' files (each
-// handler named as its operation). Do not edit; add a handler to its family's file and generate again.
-import type { Handler } from '@volter/world-core';
-import * as css from './css.ts';
-import * as css2 from './css2.ts';
-
-export const cssSemantics: Record<string, Handler> = {
-  getStylesheet: css.getStylesheet,
-  getStylesheet2: css2.getStylesheet2,
-};

package/dist/css/src/semantics/shared.ts

@@ -1 +0,0 @@
-export * from '../../../src/semantics/shared.ts';

package/dist/journeys/customer-life.outline.md

@@ -1,24 +0,0 @@
-# Google Fonts used by google-webfonts-helper, Dub and Rallly
-
-1. Google publishes the attributed Antic reference snapshot via the publisher
-   door (no Developer API font-creation endpoint exists). Actual item fields,
-   browser CSS and font bytes enter the shared World store.
-2. The World asks appCredentials for its issued key.
-3. The unchanged helper fetches the popularity-sorted catalog with that query
-   key; it consumes family/variants/subsets/category/version/lastModified and
-   chooses the returned Antic regular/latin record.
-4. Each of its five exact UAs asks for Antic:regular/latin. The twin returns the
-   corresponding real CSS, preserving @font-face style/weight and gstatic URL.
-5. Download every returned URL. The genuine EOT/WOFF/WOFF2/SVG/TTF bytes can feed
-   its ordinary JSZip archive.
-6. Dub's Open Graph route asks CSS2 for Inter at one weight from its server; the
-   twin answers Google's retained truetype CSS and the returned gstatic URL
-   downloads the genuine Inter bytes.
-7. Rallly's Open Graph image asks CSS2 for the glyphs of its CJK title (text=) from
-   its server; the twin answers Google's retained CSS for that request and the
-   returned URL downloads the genuine truetype subset.
-
-The customer entry uses its pinned axios 1.20.0 and the ordinary env name.
-Its prerequisite publisher operation uses the included actual source snapshot.
-No journey, customer entry or application execution has been performed while
-building; executable recipe data is retained for the final qualification phase.

package/dist/journeys/customer-life.outline.verdict.json

@@ -1,82 +0,0 @@
-{
-  "judge": {
-    "agent": "Claude journey judge (Opus)",
-    "name": "Independent journey judge"
-  },
-  "authors": [
-    "yueranyuan",
-    "Aaron (A-001)",
-    "Claude Opus 5.5",
-    "Codex"
-  ],
-  "sha256": "0eac01045d8500b03363a11644b863adf041b345d6f3edf1e11bd8a3944d80e3",
-  "judgedAt": "2026-10-15",
-  "plausible": true,
-  "rulings": [
-    {
-      "id": "refusals-without-cause",
-      "steps": [
-        "act 2",
-        "act 5",
-        "act 6",
-        "act 7"
-      ],
-      "barItem": "a refusal without a cause the story shows, or the same cause drawn twice; a run of refusals",
-      "reason": "Act 2 refuses 'a key never issued by this World', act 5 refuses 'a URL without a published blob', act 6 refuses text= given twice and act 7 keeps 'an unpublished CSS representation' as a refused gap, but no actor in the story sends any of these: the pinned helper always sends the World's issued key (demand.json, fetchGoogleFonts.ts:62) and downloads only URLs Google's CSS returned, Dub sends no text= and Rallly sends one (https://developers.google.com/fonts/docs/css2: \"the 'text=' parameter can only be specified once\", so nobody here sends two). Together with act 6's other refusals they make a closing run of refusals.",
-      "correction": "Remove these four refusals from acts 2, 5, 6 and 7; keep a refusal only where an actor in the story has a reason to send that request."
-    },
-    {
-      "id": "refusals-google-answers",
-      "steps": [
-        "act 6"
-      ],
-      "barItem": "vendor behaviour the vendor's documentation contradicts",
-      "reason": "Act 6 says a browser asking CSS2 and Rallly's CJK text subset 'are refused'. Google documents text= for exactly this case: \"This feature also works for international fonts, allowing you to specify UTF-8 characters\" (https://developers.google.com/fonts/docs/css2, https://developers.google.com/fonts/docs/getting_started). It also documents the stylesheet link as something placed in an HTML document for the browser to fetch (getting_started: 'add a special stylesheet link to your HTML document'). Google answers both requests with a stylesheet, and Rallly, named in the outline's title, is left with no successful call.",
-      "correction": "In act 6, have Rallly's Noto Sans SC wght@700 text= request answered with Google's retained CSS2 response and its truetype file (published in act 1), or take Rallly out of the title and story. Drop the browser refusal."
-    },
-    {
-      "id": "read-backs-without-need",
-      "steps": [
-        "act 2",
-        "act 6"
-      ],
-      "barItem": "a read-back with no need: a list or get of what the story already holds, unless someone who does not hold it reads it",
-      "reason": "In act 2 the World asks for the key it was just issued again in the same sitting, before any resume. In act 6 the same CSS2 stylesheet is read a second time under a second server agent ('the same for node and undici'), but Dub is the only CSS2 caller and already holds it. That the two agents get the same answer is evidence for vendor/inter.json, not an act of anyone in the story.",
-      "correction": "Move the repeated key read into act 7's resume, where a re-booted World genuinely asks again, and drop the undici comparison from act 6."
-    }
-  ],
-  "applied": {
-    "from": "7aa0eb6d1749ce9a2a716d778332a6a61257c666bcb5c50a4c89ecd333182ec4",
-    "wasPlausible": false,
-    "steps": [
-      "act 2",
-      "act 5",
-      "act 6",
-      "act 7"
-    ],
-    "rulings": [
-      {
-        "steps": [
-          "act 2",
-          "act 5",
-          "act 6",
-          "act 7"
-        ],
-        "why": "Remove these four refusals from acts 2, 5, 6 and 7; keep a refusal only where an actor in the story has a reason to send that request."
-      },
-      {
-        "steps": [
-          "act 6"
-        ],
-        "why": "In act 6, have Rallly's Noto Sans SC wght@700 text= request answered with Google's retained CSS2 response and its truetype file (published in act 1), or take Rallly out of the title and story. Drop the browser refusal."
-      },
-      {
-        "steps": [
-          "act 2",
-          "act 6"
-        ],
-        "why": "Move the repeated key read into act 7's resume, where a re-booted World genuinely asks again, and drop the undici comparison from act 6."
-      }
-    ]
-  }
-}