@volter/twin-openai 2.0.1 → 2.0.3

package/dist/src/openai-server.js

@@ -10,7 +10,7 @@
 // The surface is a plain `fetch` (`createOpenAITwinFetch`) and the SERVER is one line of
 // `Bun.serve` around it — see that factory's docstring for why (a serverless entry has no
 // port to bind, so it mounts the fetch in-process).
-import { bindSemantics, coreFor, createDerivedFetch, crossCutting, semanticsContext, serveHttp, vendorError } from '@volter/world-core';
+import { bindSemantics, coreFor, createDerivedFetch, crossCutting, derivedRequestScopes, runAsVendorMove, semanticsContext, serveHttp, vendorError } from '@volter/world-core';
 import surface from './generated/surface.gen.json' with { type: 'json' };
 import { manifest } from "./manifest.js";
 import { openaiSemantics } from "./semantics/index.js";
@@ -89,21 +89,24 @@ export function createOpenAITwinFetch(options) {
     const useKey = projectKeyUse(scope);
     // and a read of the files observes the work whose outputs are files (a batch's output, a fine-tuning job's results)
     // first, as a read of that batch or job does: the files a read lists never depend on which other read came before it
-    const catchUp = async (request) => {
+    // time's moves and a key's recorded use are OpenAI's own, not the caller's: they land under a read-only request
+    // too (runAsVendorMove)
+    const catchUp = (request) => runAsVendorMove(async () => {
         const ctx = await semanticsContext(manifest, new Request(request.url), filesClock, scope);
         await expireFiles(ctx);
         if (request.method === 'GET' && /^\/v1\/files(\/|$)/.test(new URL(request.url).pathname))
             for (const observe of [observeBatches, observeJobs])
                 await observe(ctx);
-    };
-    return Object.assign(async (request) => {
+    });
+    // a read-only request (x-volter-read-only) writes nothing, answered with OpenAI's read-only error
+    return derivedRequestScopes(manifest, Object.assign(async (request) => {
         const opened = door(request);
         if (opened)
             return opened;
         if (!readOnly)
             await catchUp(request);
         if (!readOnly) {
-            const refused = await useKey(request);
+            const refused = await runAsVendorMove(() => useKey(request));
             if (refused)
                 return refused;
         }
@@ -114,7 +117,7 @@ export function createOpenAITwinFetch(options) {
                     return page;
             }
         return handle(request);
-    }, { owners: inner.owners });
+    }, { owners: inner.owners }));
 }
 export async function createOpenAITwinServer(options) {
     const server = await serveHttp({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/twin-openai",
-  "version": "2.0.1",
+  "version": "2.0.3",
   "description": "Local OpenAI twin — a faithful, stateful local OpenAI API your real `openai` SDK talks to unmodified. The model is stubbed (deterministic) and embeddings are deterministic pseudo-vectors, but the protocol envelope (chat completions/streaming/tool_calls, the Responses API, embeddings, models, files, batches, moderations, fine-tuning, vector stores) is vendor-faithful. Built on @volter/world-core.",
   "keywords": [
     "twin",
@@ -54,10 +54,10 @@
     "postpack": "node ../../../scripts/publish/prepare-publish.mjs postpack"
   },
   "peerDependencies": {
-    "@volter/world-core": "2.0.1"
+    "@volter/world-core": "2.0.3"
   },
   "devDependencies": {
-    "@volter/world-core": "2.0.1",
+    "@volter/world-core": "2.0.3",
     "@volter/world-tooling": "0.1.0",
     "openai": "^4.104.0",
     "@types/bun": "^1.2.20",
@@ -68,6 +68,6 @@
     "node": ">=22.3"
   },
   "dependencies": {
-    "@volter/world-ui": "0.1.1"
+    "@volter/world-ui": "0.1.3"
   }
 }

package/src/openai-server.ts

@@ -10,7 +10,7 @@
 // The surface is a plain `fetch` (`createOpenAITwinFetch`) and the SERVER is one line of
 // `Bun.serve` around it — see that factory's docstring for why (a serverless entry has no
 // port to bind, so it mounts the fetch in-process).
-import { bindSemantics, coreFor, createDerivedFetch, crossCutting, semanticsContext, serveHttp, vendorError } from '@volter/world-core';
+import { bindSemantics, coreFor, createDerivedFetch, crossCutting, derivedRequestScopes, runAsVendorMove, semanticsContext, serveHttp, vendorError } from '@volter/world-core';
 import surface from './generated/surface.gen.json' with { type: 'json' };
 import { manifest } from './manifest.ts';
 import { openaiSemantics } from './semantics/index.ts';
@@ -99,19 +99,22 @@ export function createOpenAITwinFetch(options: OpenAITwinFetchOptions): (request
   const useKey = projectKeyUse(scope);
   // and a read of the files observes the work whose outputs are files (a batch's output, a fine-tuning job's results)
   // first, as a read of that batch or job does: the files a read lists never depend on which other read came before it
-  const catchUp = async (request: Request): Promise<void> => {
+  // time's moves and a key's recorded use are OpenAI's own, not the caller's: they land under a read-only request
+  // too (runAsVendorMove)
+  const catchUp = (request: Request): Promise<void> => runAsVendorMove(async () => {
     const ctx = await semanticsContext(manifest, new Request(request.url), filesClock, scope);
     await expireFiles(ctx);
     if (request.method === 'GET' && /^\/v1\/files(\/|$)/.test(new URL(request.url).pathname)) for (const observe of [observeBatches, observeJobs]) await observe(ctx);
-  };
-  return Object.assign(async (request: Request): Promise<Response> => {
+  });
+  // a read-only request (x-volter-read-only) writes nothing, answered with OpenAI's read-only error
+  return derivedRequestScopes(manifest, Object.assign(async (request: Request): Promise<Response> => {
     const opened = door(request);
     if (opened) return opened;
     if (!readOnly) await catchUp(request);
-    if (!readOnly) { const refused = await useKey(request); if (refused) return refused; }
+    if (!readOnly) { const refused = await runAsVendorMove(() => useKey(request)); if (refused) return refused; }
     if (!readOnly) for (const screen of screens) { const page = await screen(request); if (page) return page; }
     return handle(request);
-  }, { owners: inner.owners });
+  }, { owners: inner.owners }));
 }
 
 export async function createOpenAITwinServer(options: { root?: string; port?: number; readOnly?: boolean; scenarioPath?: string }): Promise<{ port: number; stop: () => void }> {