@volter/twin-googlefonts 1.0.1 → 1.0.2

package/dist/journeys/decisions.json

@@ -19,14 +19,14 @@
       "operation": "getStylesheet2",
       "lane": "css",
       "mechanism": "handler",
-      "demand": "Dub's Inter weights and Rallly's CJK text subsets, both from a server",
+      "demand": "Dub's Inter weights and Rallly's CJK text subsets, both from a server; Rallly's and Cal.diy's next/font/google build of Inter's variable weights, with next/font's browser User-Agent",
       "why": "Use the exact published CSS per ordered CSS2 query and User-Agent; a non-browser agent without its own representation reads the one published for no agent, as Google answered the same CSS to none, node and undici. Unpublished families, text subsets and browser representations answer a refusal; text= and display= given twice, or another parameter, are a bad request."
     },
     {
       "operation": "getFontFile",
       "lane": "assets",
       "mechanism": "handler",
-      "demand": "Archive stream for returned /s URL",
+      "demand": "Archive stream for returned /s URL; the woff2 faces next/font/google self-hosts at build",
       "why": "Resolve the actual vendor URL to its resource blob and preserve Content-Type/bytes; no conversion or placeholder font."
     },
     {
@@ -41,7 +41,17 @@
       "lane": "api",
       "mechanism": "door",
       "demand": "World boot credential fill",
-      "why": "Google key issuance is outside the Fonts read-only API. ctx.secret supplies the opaque per-World key; only its hash is recorded. Repeated boot retains that key."
+      "why": "Google issues the key outside the Fonts read-only API: a standard API key belongs to a Google Cloud project, made on that project's Credentials page, and associates each request with the project for billing and quota; the Developer API takes it as key= and nothing else. The door keeps a project per World organization (ctx.tenant) and one key per deployment under it (ctx.accountKey), drawn from the World's seed so a World returned to its seed issues the same key; only its hash is recorded.",
+      "sourceRules": [
+        {
+          "source": "https://developers.google.com/fonts/docs/developer_api",
+          "means": "the Developer API identifies the application by an API key, key= on every request, made on the Cloud console's Credentials page"
+        },
+        {
+          "source": "https://docs.cloud.google.com/docs/authentication/api-keys",
+          "means": "a standard API key associates a request with a project for billing and quota; keys are listed and created per project (console, gcloud services api-keys, keys.create)"
+        }
+      ]
     },
     {
       "operation": "door:publishCatalog",

package/dist/journeys/demand.json

@@ -61,6 +61,40 @@
           "evidence": "apps/landing/src/app/[locale]/opengraph-image.tsx:38"
         }
       ]
+    },
+    {
+      "name": "lukevella/rallly",
+      "commit": "195877a38de4fb96bce921011668871da1121174",
+      "client": "next build (Next.js 16.1.6, Turbopack's next/font: crates/next-core/src/next_font/google, User-Agent USER_AGENT_FOR_GOOGLE_FONTS)",
+      "backend": [
+        {
+          "call": "GET fonts.googleapis.com/css2?family=Inter:wght@100..900&display=swap",
+          "operation": "getStylesheet2",
+          "evidence": "apps/web/src/app/[locale]/layout.tsx:8,31-34 (Inter, subsets latin, display swap); also at 65fb551012078fc3058d8a23b3fa4be1846fd056 (layout.tsx:8,28-31)"
+        },
+        {
+          "call": "GET fonts.gstatic.com/s/inter/v20/... woff2, each URL returned in the CSS",
+          "operation": "getFontFile",
+          "evidence": "the same build"
+        }
+      ]
+    },
+    {
+      "name": "calcom/cal.diy",
+      "commit": "5918e66cc56b3a36c1e7205c7fc00eaad50dece8",
+      "client": "next build (Next.js 15.5.8, next/font's packages/font/src/google/fetch-resource.ts, the same User-Agent)",
+      "backend": [
+        {
+          "call": "GET fonts.googleapis.com/css2?family=Inter:wght@100..900&display=swap",
+          "operation": "getStylesheet2",
+          "evidence": "apps/web/app/layout.tsx:2,18; apps/web/components/PageWrapper.tsx:13,36"
+        },
+        {
+          "call": "GET fonts.gstatic.com/s/inter/v20/... woff2, each URL returned in the CSS",
+          "operation": "getFontFile",
+          "evidence": "the same build"
+        }
+      ]
     }
   ],
   "notDemanded": "OAuth, font submission/publishing UI, effects and advanced catalog capabilities are outside these client paths."

package/dist/src/cli.js

@@ -1,21 +1,22 @@
 #!/usr/bin/env node
 // world-googlefonts: serve the googlefonts twin.
-import { hasFlag, optionValue } from '@volter/world-core/args';
+import { parseArgs } from 'node:util';
 import { keepProcessAlive } from '@volter/world-core/lifecycle';
 import { createGooglefontsTwinServer } from "./server.js";
-const [cmd, ...rest] = process.argv.slice(2);
-const port = Number(optionValue(rest, '--port', '0')) || undefined;
-const root = optionValue(rest, '--root') || undefined;
-const readOnly = hasFlag(rest, '--read-only');
+const { values, positionals } = parseArgs({ options: { port: { type: 'string' }, root: { type: 'string' }, 'read-only': { type: 'boolean' }, database: { type: 'string' } }, allowPositionals: true, strict: true });
+if (positionals.length > 1)
+    throw new Error('Expected one command');
+const [cmd] = positionals;
+const port = Number(values.port ?? '0') || undefined;
+const root = values.root;
+const readOnly = Boolean(values['read-only']);
 // the selected twin's private Postgres, which the runtime binds a pack declaring managedDatabase to
-const database = optionValue(rest, '--database') || undefined;
-// the World's scenario file, for a model vendor's turns
-const scenarioPath = optionValue(rest, '--scenario') || undefined;
+const database = values.database;
 if (cmd === 'serve' || cmd === undefined) {
-    const s = await createGooglefontsTwinServer({ readOnly, ...(root ? { root } : {}), ...(port ? { port } : {}), ...(database ? { database } : {}), ...(scenarioPath ? { scenarioPath } : {}) });
+    const s = await createGooglefontsTwinServer({ readOnly, ...(root ? { root } : {}), ...(port ? { port } : {}), ...(database ? { database } : {}) });
     process.stdout.write(`googlefonts twin${readOnly ? ' [read-only]' : ''} at http://127.0.0.1:${s.port}\n`);
     await keepProcessAlive();
 }
 else {
-    process.stdout.write('Usage: world-googlefonts serve [--port N] [--root DIR] [--read-only] [--database URL] [--scenario FILE]\n');
+    process.stdout.write('Usage: world-googlefonts serve [--port N] [--root DIR] [--read-only] [--database URL]\n');
 }

package/dist/src/manifest.js

@@ -12,14 +12,16 @@ export const manifest = {
         resources: ['webfont', '_api_key', '_font_catalog', '_stylesheet', '_font_file'],
         specSource: 'api/spec/SOURCE.md: unchanged Google Discovery; css/spec/SOURCE.md and assets/spec/SOURCE.md: Google documentation and retained font responses',
         description: 'Google Fonts catalog, exact published CSS representations and genuine font bytes; a World-issued query API key. Seed data is the attributed Antic reference catalog and the CSS2 weights 500-700 of Inter, not the complete live Google catalog.',
-        adoption: { sdks: [], envStems: ['GOOGLE_FONTS'] },
+        // next/font/google fetches the font's stylesheet and files from Google at an app's build (twin-world architecture,
+        // Selection: a module that reaches the vendor by itself is evidence, as an SDK is)
+        adoption: { sdks: [], envStems: ['GOOGLE_FONTS'], modules: ['next/font/google'] },
         hosts: [
             { host: 'www.googleapis.com', pathPattern: '^/webfonts/v1/webfonts$' },
             { host: 'webfonts.googleapis.com', pathPattern: '^/v1/webfonts$' },
             { host: 'fonts.googleapis.com', pathPattern: '^/css2?$' },
             { host: 'fonts.gstatic.com', pathPattern: '^/(s/|l/font$)' },
         ],
-        credentialDoor: { path: '/_twin/app-credentials', body: {}, account: { field: 'account', tenancy: 'Google Cloud project', source: 'https://developers.google.com/fonts/docs/developer_api' }, deployment: { field: 'deployment', object: 'Project API key', source: 'https://cloud.google.com/docs/authentication/api-keys' }, fill: { GOOGLE_FONTS_API_KEY: 'api_key' } },
+        credentialDoor: { path: '/_twin/app-credentials', body: {}, account: { field: 'account', tenancy: 'Google Cloud project', source: 'https://developers.google.com/fonts/docs/developer_api' }, deployment: { field: 'deployment', object: 'Project API key', source: 'https://docs.cloud.google.com/docs/authentication/api-keys' }, fill: { GOOGLE_FONTS_API_KEY: 'api_key' } },
         endpointEnvNone: 'Pinned helper hardcodes the vendor API and CSS hosts, then downloads their returned gstatic URLs. Scoped host routing preserves these URLs.',
     },
 };