@volter/world-runtime 3.0.153 → 3.0.155

package/dist/src/init.js

@@ -847,7 +847,7 @@ export function planWorldInit(name, repoPath, options = {}) {
         }
     }
     // A twinned vendor's credential the app's code reads that no example env declares (a script, an app whose keys come
-    // from a secrets manager): the SDK refuses to start without it, so it is faked as a declared one would be. Only a
+    // from a secrets manager): the SDK refuses to start without it, so it is issued or faked as a declared one would be. Only a
     // credential: a base-URL override the code reads (`OPENAI_BASE_URL`) is optional there, and a fake one would send
     // the SDK nowhere instead of through the injector; and never a framework's public name (`NEXT_PUBLIC_…`), whose
     // value the app's own env files hold for the browser, which a set variable would override
@@ -856,6 +856,12 @@ export function planWorldInit(name, repoPath, options = {}) {
             continue;
         if (/(?:^|_)(?:URL|URI|ENDPOINT|HOST|BASE|ORIGIN|DOMAIN|REGION|PORT)$/.test(name) || /^(?:NEXT_PUBLIC_|VITE_|REACT_APP_|EXPO_PUBLIC_|NUXT_PUBLIC_|PUBLIC_)/.test(name))
             continue;
+        const issuer = issuedBy.get(name);
+        if (issuer !== undefined) {
+            env[name] = `${ISSUE_ENV_PREFIX}${issuer}`;
+            envRows.push({ name, disposition: 'issued', source: readAt[0] ?? 'source', reason: `${issuer} credential read by the app's code; up asks the selected twin to issue it` });
+            continue;
+        }
         const vendor = envNameVendor(name);
         if (vendor === null || !vendors.some((entry) => entry.vendor === vendor && entry.service !== null))
             continue;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/world-runtime",
-  "version": "3.0.153",
+  "version": "3.0.155",
   "description": "World configs for twins: boot named local runtimes, allocate ports, generate world.env/instance.json, and run apps against fake-key twin worlds.",
   "keywords": [
     "twin",
@@ -71,7 +71,7 @@
   },
   "peerDependencies": {
     "@volter/world-core": "3.0.147",
-    "@volter/world-console": "3.0.147"
+    "@volter/world-console": "3.0.148"
   },
   "dependencies": {
     "@electric-sql/pglite": "0.5.8",

package/src/init.ts

@@ -1039,13 +1039,19 @@ export function planWorldInit(name: string, repoPath: string, options: InitOptio
     }
   }
   // A twinned vendor's credential the app's code reads that no example env declares (a script, an app whose keys come
-  // from a secrets manager): the SDK refuses to start without it, so it is faked as a declared one would be. Only a
+  // from a secrets manager): the SDK refuses to start without it, so it is issued or faked as a declared one would be. Only a
   // credential: a base-URL override the code reads (`OPENAI_BASE_URL`) is optional there, and a fake one would send
   // the SDK nowhere instead of through the injector; and never a framework's public name (`NEXT_PUBLIC_…`), whose
   // value the app's own env files hold for the browser, which a set variable would override
   for (const [name, readAt] of [...envReads.entries()].sort(([a], [b]) => a.localeCompare(b))) {
     if (name in env || envRows.some((row) => row.name === name) || /_TWIN_URL$/.test(name) || /^VOLTER_/.test(name) || worldInjected.has(name)) continue;
     if (/(?:^|_)(?:URL|URI|ENDPOINT|HOST|BASE|ORIGIN|DOMAIN|REGION|PORT)$/.test(name) || /^(?:NEXT_PUBLIC_|VITE_|REACT_APP_|EXPO_PUBLIC_|NUXT_PUBLIC_|PUBLIC_)/.test(name)) continue;
+    const issuer = issuedBy.get(name);
+    if (issuer !== undefined) {
+      env[name] = `${ISSUE_ENV_PREFIX}${issuer}`;
+      envRows.push({ name, disposition: 'issued', source: readAt[0] ?? 'source', reason: `${issuer} credential read by the app's code; up asks the selected twin to issue it` });
+      continue;
+    }
     const vendor = envNameVendor(name);
     if (vendor === null || !vendors.some((entry) => entry.vendor === vendor && entry.service !== null)) continue;
     env[name] = fakeEnvValue(name);