@volter/world-core 3.0.160 → 3.0.162

package/dist/src/sockets.js

@@ -1,3 +1,4 @@
+import { runWithStorageTenant, storageTenant } from "./request-scope.js";
 // A vendor's persistent wire (architecture, "Other wires: sockets"): a WebSocket its clients hold open, on which the
 // vendor sends what happens as it happens (Discord's Gateway: a bot identifies, is told the guilds it is in, and is sent
 // each message, member and interaction as it lands). The manifest declares the socket (`sockets`); the pack's engine
@@ -14,7 +15,7 @@ const nextSession = new Map();
 const keyOf = (service, root) => `${service}\0${root ?? ''}`;
 /** The open sessions of one socket of the vendor in a World (a handler reaches them as `ctx.sockets(id)`). */
 export function openSessions(service, root, socket) {
-    return [...(sessions.get(keyOf(service, root)) ?? [])].filter((o) => o.session.socket === socket).map((o) => o.session);
+    return [...(sessions.get(keyOf(service, root)) ?? [])].filter((o) => o.session.socket === socket && o.tenant === storageTenant(service)).map((o) => o.session);
 }
 /** What a session awaits that the World's clock has run out (a life's `wait` past a relay's timeout), rejected as the
  *  machine's clock would reject it; called as the vendor serves a request ("A request answered by a session"). */
@@ -39,9 +40,11 @@ export function socketWrite(service, root, write) {
         return;
     for (const o of open) {
         const { engine } = o;
+        if (o.tenant !== storageTenant(service))
+            continue;
         if (!engine.write)
             continue;
-        o.queue = o.queue.then(async () => engine.write(o.session, write, await o.context())).catch((error) => o.session.close(1011, String(error.message ?? error).slice(0, 120)));
+        o.queue = o.queue.then(() => o.run(async () => engine.write(o.session, write, await o.context()))).catch((error) => o.session.close(1011, String(error.message ?? error).slice(0, 120)));
     }
 }
 /** A declared socket path's parameters for a request's path, or undefined when it does not match: a `{name}` segment
@@ -66,7 +69,7 @@ function socketParams(declared, path) {
     }
 }
 /** The upgrade the serve seam takes: a request to a declared socket's path (and host) opens a session of its engine. */
-export function socketUpgrade(service, root, decls, engines, context, hostOf, pathOf = (request) => new URL(request.url).pathname, decide = async () => undefined) {
+export function socketUpgrade(service, root, decls, engines, context, hostOf, pathOf, decide) {
     const matchFor = (request) => {
         const path = pathOf(request).replace(/\/+$/, '') || '/';
         for (const d of decls) {
@@ -113,18 +116,19 @@ export function socketUpgrade(service, root, decls, engines, context, hostOf, pa
                 },
                 decide,
             };
-            const o = { session, engine, context: () => context(request.clone(), decl, params), queue: Promise.resolve(), pending };
+            const tenant = storageTenant(service), run = (fn) => runWithStorageTenant(service, tenant, fn);
+            const o = { tenant, run, session, engine, context: () => context(request.clone(), decl, params), queue: Promise.resolve(), pending };
             byPeer.set(peer, o);
             (sessions.get(key) ?? sessions.set(key, new Set()).get(key)).add(o);
             if (engine.open)
-                o.queue = o.queue.then(async () => engine.open(session, await o.context())).catch((error) => session.close(1011, String(error.message ?? error).slice(0, 120)));
+                o.queue = o.queue.then(() => o.run(async () => engine.open(session, await o.context()))).catch((error) => session.close(1011, String(error.message ?? error).slice(0, 120)));
         },
         message: (peer, data) => {
             const o = byPeer.get(peer);
             if (!o)
                 return;
             const text = typeof data === 'string' ? data : new TextDecoder().decode(data);
-            o.queue = o.queue.then(async () => o.engine.message(o.session, text, await o.context())).catch((error) => o.session.close(1011, String(error.message ?? error).slice(0, 120)));
+            o.queue = o.queue.then(() => o.run(async () => o.engine.message(o.session, text, await o.context()))).catch((error) => o.session.close(1011, String(error.message ?? error).slice(0, 120)));
         },
         close: (peer) => {
             const o = byPeer.get(peer);
@@ -140,7 +144,7 @@ export function socketUpgrade(service, root, decls, engines, context, hostOf, pa
             // the end is written after what the session is still doing, over its own context
             // the session is gone, so a failure has no frame to go in: it is reported, never swallowed
             if (o.engine.close)
-                o.queue = o.queue.then(async () => o.engine.close(o.session, await o.context())).catch((error) => {
+                o.queue = o.queue.then(() => o.run(async () => o.engine.close(o.session, await o.context()))).catch((error) => {
                     console.error(`${service}: the ${o.session.socket} socket's end was not written: ${String(error?.message ?? error)}`);
                 });
         },

package/dist/src/world-account-name.d.ts

@@ -0,0 +1,2 @@
+/** The retained World-account name grammar, shared by registration and read-only authority selection. */
+export declare function isWorldAccountName(value: unknown): value is string;

package/dist/src/world-account-name.js

@@ -0,0 +1,4 @@
+/** The retained World-account name grammar, shared by registration and read-only authority selection. */
+export function isWorldAccountName(value) {
+    return typeof value === 'string' && /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(value);
+}

package/generated/pack-facts.json

@@ -25,6 +25,9 @@
       "resources": [],
       "endpointEnvNone": "@ai-sdk/gateway calls https://ai-gateway.vercel.sh/v4/ai and an OpenAI client is given https://ai-gateway.vercel.sh/v1 in code; the World claims the host",
       "credentialDoor": {
+        "account": {
+          "field": "account"
+        },
         "path": "/_twin/app-credentials",
         "body": {},
         "fill": {
@@ -110,6 +113,9 @@
         "note": "the SDKs' base URL (the TypeScript and Python SDKs and Claude Code read ANTHROPIC_BASE_URL)"
       },
       "credentialDoor": {
+        "account": {
+          "field": "account"
+        },
         "path": "/_twin/app-credentials",
         "body": {},
         "fill": {
@@ -174,6 +180,9 @@
         "note": "The AWS SDKs read AWS_ENDPOINT_URL as every service's endpoint (https://docs.aws.amazon.com/sdkref/latest/guide/feature-ss-endpoints.html)."
       },
       "credentialDoor": {
+        "account": {
+          "field": "account"
+        },
         "path": "/_twin/app-credentials",
         "body": {},
         "fill": {
@@ -360,6 +369,9 @@
       "credentialDoor": {
         "path": "/_twin/app-credentials",
         "body": {},
+        "account": {
+          "field": "account"
+        },
         "fill": {
           "CLERK_SECRET_KEY": "secret_key",
           "CLERK_API_KEY": "secret_key",
@@ -782,6 +794,9 @@
         "note": "Python e2b 2.45.0 and the JS SDK read E2B_API_URL; the JS SDK reads E2B_SANDBOX_URL and sends sandbox id/port headers; vendor hosts route through the World proxy"
       },
       "credentialDoor": {
+        "account": {
+          "field": "account"
+        },
         "path": "/_twin/teams",
         "body": {
           "name": "World team"
@@ -1003,6 +1018,9 @@
         "note": "Google GenAI SDK reads this base URL; other callers retain the routed vendor host."
       },
       "credentialDoor": {
+        "account": {
+          "field": "account"
+        },
         "path": "/_twin/app-credentials",
         "body": {},
         "fill": {
@@ -1079,6 +1097,9 @@
         "app"
       ],
       "credentialDoor": {
+        "account": {
+          "field": "account"
+        },
         "path": "/_twin/app-credentials",
         "body": {},
         "fill": {
@@ -1213,6 +1234,9 @@
       ],
       "endpointEnvNone": "Google's OAuth libraries read no base-URL variable: the endpoints are the discovery document's, claimed by the host rules.",
       "credentialDoor": {
+        "account": {
+          "field": "world_account"
+        },
         "path": "/_twin/credentials",
         "body": {
           "client_email": "world@world-project.iam.gserviceaccount.com",
@@ -1657,12 +1681,30 @@
       "endpointEnv": {
         "name": "LIVEKIT_URL",
         "templates": {
-          "LIVEKIT_URL": "ws://${host}:${port}",
-          "LIVEKIT_API_KEY": "twin-livekit-key",
-          "LIVEKIT_API_SECRET": "twin-livekit-secret-for-the-worlds-own-server"
+          "LIVEKIT_URL": "ws://${host}:${port}"
         },
-        "note": "Credentials and URL are the same ones the World starts its LiveKit server with."
-      }
+        "note": "The native server uses a private key; its twin front accepts only keys issued for retained World accounts."
+      },
+      "credentialDoor": {
+        "path": "/_twin/app-credentials",
+        "body": {},
+        "account": {
+          "field": "account"
+        },
+        "fill": {
+          "LIVEKIT_API_KEY": "api_key",
+          "LIVEKIT_API_SECRET": "api_secret"
+        }
+      },
+      "sidePorts": [
+        {
+          "name": "rtc-tcp",
+          "option": "rtcTcpPort",
+          "flag": "--rtc-tcp-port",
+          "scheme": "tcp",
+          "note": "ICE/TCP media advertised on loopback at this port; the vendor binds all interfaces. Forward beside signaling for a browser on another machine."
+        }
+      ]
     },
     "merge": {
       "adoption": {
@@ -1687,6 +1729,9 @@
       "resources": [],
       "endpointEnvNone": "Open Autonomy reads MODEL_GATEWAY_URL and defaults to api-gateway.merge.dev; the World claims the host",
       "credentialDoor": {
+        "account": {
+          "field": "account"
+        },
         "path": "/_twin/organizations",
         "body": {},
         "fill": {
@@ -1725,6 +1770,9 @@
       "resources": [],
       "endpointEnvNone": "the SDKs call https://api.mistral.ai/v1 unless given a base URL in code or config; the World claims the host",
       "credentialDoor": {
+        "account": {
+          "field": "account"
+        },
         "path": "/_twin/app-credentials",
         "body": {},
         "fill": {
@@ -1799,6 +1847,9 @@
         "note": "npm and bun read the registry from npm_config_registry (and .npmrc's `registry`)."
       },
       "credentialDoor": {
+        "account": {
+          "field": "account"
+        },
         "path": "/_twin/app-credentials",
         "body": {},
         "fill": {
@@ -1862,6 +1913,9 @@
         "api_key"
       ],
       "credentialDoor": {
+        "account": {
+          "field": "account"
+        },
         "path": "/_twin/app-credentials",
         "body": {},
         "fill": {
@@ -1973,6 +2027,9 @@
         "note": "the twin's own URL; applications reach it at <region>.connect.psdb.cloud, which the injector redirects, with the password the credentialDoor issued."
       },
       "credentialDoor": {
+        "account": {
+          "field": "account"
+        },
         "path": "/_twin/app-credentials",
         "body": {
           "organization": "world",
@@ -2297,6 +2354,9 @@
         "received"
       ],
       "credentialDoor": {
+        "account": {
+          "field": "account"
+        },
         "path": "/_twin/app-credentials",
         "body": {},
         "fill": {
@@ -2368,6 +2428,9 @@
       ],
       "endpointEnvNone": "an SDK sends to its DSN's host and sentry-cli to SENTRY_URL (sentry.io by default); the DSN the World issues names the World's ingest host, claimed by the host rules",
       "credentialDoor": {
+        "account": {
+          "field": "account"
+        },
         "path": "/_twin/app-credentials",
         "body": {},
         "fill": {
@@ -2476,6 +2539,9 @@
         "app"
       ],
       "credentialDoor": {
+        "account": {
+          "field": "account"
+        },
         "path": "/_twin/app-credentials",
         "body": {},
         "fill": {
@@ -2593,6 +2659,9 @@
       "credentialDoor": {
         "path": "/_twin/app-credentials",
         "body": {},
+        "account": {
+          "field": "account"
+        },
         "fill": {
           "STRIPE_SECRET_KEY": "secret_key",
           "STRIPE_API_KEY": "secret_key",
@@ -2666,7 +2735,11 @@
       "managedDatabase": {
         "kind": "postgres",
         "arg": "--database",
-        "note": "the project's database is the World's managed postgres: the database the application's migrations and queries use, whose URL the credential door answers"
+        "user": "world",
+        "database": "world",
+        "clock": "wall",
+        "credentialField": "database_url",
+        "note": "the selected Supabase twin owns its private PostgreSQL data plane; the credential door answers its URL, application migrations own application tables, and SQL uses wall time"
       },
       "serveExport": "createSupabaseTwinServer"
     },
@@ -2877,6 +2950,9 @@
       ],
       "endpointEnvNone": "Tinybird's clients take the API host as configuration (@chronark/zod-bird's baseUrl, tinybird-cli's --host), defaulting to https://api.tinybird.co, which the World routes by host; no SDK reads a base-URL variable of its own",
       "credentialDoor": {
+        "account": {
+          "field": "account"
+        },
         "path": "/_twin/app-credentials",
         "body": {},
         "fill": {
@@ -3045,6 +3121,102 @@
       },
       "serveExport": "createTurbopufferTwinServer"
     },
+    "twitch": {
+      "adoption": {
+        "sdks": [],
+        "envStems": [
+          "TWITCH"
+        ]
+      },
+      "hosts": [
+        {
+          "host": "api.twitch.tv",
+          "pathPattern": "^/helix/|^/_twin/"
+        },
+        {
+          "host": "id.twitch.tv",
+          "pathPattern": "^/oauth2/|^/_twin/"
+        },
+        {
+          "host": "www.twitch.tv",
+          "pathPattern": "^/$|^/login/?$|^/popout/[A-Za-z0-9_]{1,25}/chat/?$|^/[A-Za-z0-9_]{1,25}/?$|^/_twin/"
+        },
+        {
+          "host": "twitch.tv",
+          "pathPattern": "^/$|^/login/?$|^/popout/[A-Za-z0-9_]{1,25}/chat/?$|^/[A-Za-z0-9_]{1,25}/?$|^/_twin/"
+        },
+        {
+          "host": "m.twitch.tv",
+          "pathPattern": "^/$|^/login/?$|^/popout/[A-Za-z0-9_]{1,25}/chat/?$|^/[A-Za-z0-9_]{1,25}/?$|^/_twin/"
+        },
+        {
+          "host": "dashboard.twitch.tv",
+          "pathPattern": "^/u/[A-Za-z0-9_]{1,25}/(?:stream-manager|settings/stream)/?$"
+        },
+        {
+          "host": "player.twitch.tv",
+          "pathPattern": "^/$"
+        },
+        {
+          "host": "irc-ws.chat.twitch.tv"
+        },
+        {
+          "host": "usher.ttvnw.net",
+          "pathPattern": "^/api/channel/hls/"
+        }
+      ],
+      "archetype": "crud",
+      "protocol": {
+        "declared": "3",
+        "major": 3,
+        "standing": "current"
+      },
+      "transport": "rest",
+      "resources": [
+        "user",
+        "channel",
+        "stream",
+        "chat_message",
+        "application",
+        "_token",
+        "_authorization_code",
+        "_client_secret",
+        "_stream_key",
+        "_live",
+        "_live_segment"
+      ],
+      "endpointEnvNone": "Twitch's clients address api.twitch.tv, id.twitch.tv and irc-ws.chat.twitch.tv by their published URLs; no SDK reads a base-URL variable",
+      "credentialDoor": {
+        "path": "/_twin/console",
+        "body": {
+          "login": "worldchannel",
+          "password": "world-password",
+          "email": "worldchannel@example.com",
+          "application": {
+            "name": "World App",
+            "redirect_uris": [
+              "http://localhost:3000"
+            ]
+          }
+        },
+        "fill": {
+          "TWITCH_CLIENT_ID": "client_id",
+          "TWITCH_CLIENT_SECRET": "client_secret",
+          "TWITCH_CHANNEL": "login"
+        }
+      },
+      "sidePorts": [
+        {
+          "name": "ingest",
+          "option": "ingestPort",
+          "flag": "--ingest-port",
+          "scheme": "rtmp",
+          "path": "/app",
+          "note": "Twitch's RTMP ingest (rtmp://<ingest-server>/app/<stream-key>): OBS publishes the channel's broadcast here"
+        }
+      ],
+      "serveExport": "createTwitchTwinServer"
+    },
     "upstash": {
       "adoption": {
         "sdks": [
@@ -3100,6 +3272,9 @@
         "note": "Redis reads its REST URL; QStash and Workflow read QSTASH_URL. Direct SDK transports use the twin endpoint and issued token; other clients also use host routing."
       },
       "credentialDoor": {
+        "account": {
+          "field": "account"
+        },
         "path": "/_twin/app-credentials",
         "body": {
           "owner": "owner@world.test"
@@ -3165,6 +3340,9 @@
       ],
       "endpointEnvNone": "the applications reach api.vercel.com and the Edge Config connection string's host, which the World routes to the twin",
       "credentialDoor": {
+        "account": {
+          "field": "account"
+        },
         "path": "/_twin/app-credentials",
         "body": {
           "team": "world",
@@ -3403,6 +3581,9 @@
         "upload"
       ],
       "credentialDoor": {
+        "account": {
+          "field": "account"
+        },
         "path": "/_twin/app-credentials",
         "body": {},
         "fill": {
@@ -3441,6 +3622,9 @@
       "resources": [],
       "endpointEnvNone": "the SDK calls https://api.x.ai/v1 unless given a base URL in code; the World claims the host",
       "credentialDoor": {
+        "account": {
+          "field": "account"
+        },
         "path": "/_twin/app-credentials",
         "body": {},
         "fill": {

package/inject.cjs

@@ -358,8 +358,8 @@ function strictEgressEnabled() {
 }
 
 // THE WORLD'S DECISION (docs/contributing/architecture.md, "Capability decisions"): every seam below asks
-// capability-decision.cjs and enforces its answer. This process is a host process, whose declaration is the open one; a
-// local light guest, whose HTTP leaves through its guest listener; or a process of an image run, which carries its
+// capability-decision.cjs and enforces its answer. This process is a host process, whose declaration is the open one; or
+// a process of an image run, which carries its
 // image's declaration (VOLTER_WORLD_DECLARATION) and is confined from the host's network. What the World grants is its
 // published policy. The seams supply what they observe: the twin route, the vendors sharing a host, the World's doors.
 function worldGrant() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/world-core",
-  "version": "3.0.160",
+  "version": "3.0.162",
   "description": "The kernel of Volter World: one log per twin, branches as pointers, checkpoints, the fold that keeps a twin current, the head that performs a write against the vendor, references, and the git plane. A twin package builds on it; the runtime serves it.",
   "keywords": [
     "twin",
@@ -182,5 +182,13 @@
   },
   "optionalDependencies": {
     "@xmldom/xmldom": "0.9.12"
+  },
+  "packageManager": "pnpm@12.15.0",
+  "devEngines": {
+    "packageManager": {
+      "name": "pnpm",
+      "version": "12.15.0",
+      "onFail": "error"
+    }
   }
 }