@volter/world-runtime 3.0.40 → 3.0.41

package/dist/src/catalog-index.d.ts

@@ -16,6 +16,8 @@ export type Version = {
     by: string;
     reason?: string;
     commit?: string;
+    integrity?: string;
+    submission?: string;
 };
 export type Entry = {
     vendor: string;
@@ -29,9 +31,8 @@ export declare const readSources: (index: string) => Source[];
 export declare function readVendors(index: string): Entry[];
 /** A package's vendor: `@volter/twin-<vendor>`, or the part after `twin-` in any scope. */
 export declare const vendorOf: (name: string) => string;
-/** Each vendor's default twin: its official package, else its live outside package; the
- *  highest live version of it. */
-export declare function defaults(index: string): Record<string, {
+/** An explicit recommendation, or a vendor's sole live implementation. Publisher versions are independent. */
+export declare function defaults(index: string, vendors?: Iterable<string>): Record<string, {
     name: string;
     version: string;
     source: string;

package/dist/src/catalog-index.js

@@ -1,7 +1,7 @@
 // The catalog index as the runtime reads it (docs/contributing/architecture.md, "The catalog: where twins come from"):
 // its sources, its vendors' packages and versions, and each vendor's default twin. The index is a directory of data (the
-// `volter-ai/twin-catalog` repository, published as the npm package `@volter/twin-catalog`); scripts/twin-catalog.ts
-// checks and writes it, and `init` reads the defaults from the installed package.
+// `volter-ai/twin-catalog` repository, published as the npm package `@volter/twin-catalog`). The catalog owns
+// validation and publication; `init` reads defaults from the installed artifact.
 import { existsSync, readdirSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
 /** The index as npm carries it. */
@@ -17,21 +17,30 @@ const semver = (v) => v.split(/[.-]/).slice(0, 3).map((n) => Number(n) || 0);
 const newer = (a, b) => { const x = semver(a); const y = semver(b); for (let i = 0; i < 3; i++)
     if (x[i] !== y[i])
         return x[i] - y[i]; return 0; };
-/** Each vendor's default twin: its official package, else its live outside package; the
- *  highest live version of it. */
-export function defaults(index) {
+/** An explicit recommendation, or a vendor's sole live implementation. Publisher versions are independent. */
+export function defaults(index, vendors) {
     const sources = new Map(readSources(index).map((s) => [s.name, s]));
-    const rank = (s) => (!s ? 0 : s.official ? 2 : 1);
+    const recommendationFile = join(index, 'recommendations.json');
+    const recommendations = existsSync(recommendationFile) ? JSON.parse(readFileSync(recommendationFile, 'utf8')) : {};
+    const revocationsFile = join(index, 'revocations.json');
+    const revocations = existsSync(revocationsFile) ? JSON.parse(readFileSync(revocationsFile, 'utf8')) : [];
     const out = {};
+    const requested = vendors === undefined ? undefined : new Set(vendors);
     for (const e of readVendors(index)) {
+        if (requested && !requested.has(e.vendor))
+            continue;
         const candidates = e.packages
-            .map((p) => ({ p, s: sources.get(p.source), live: p.versions.filter((v) => v.status === 'live').sort((a, b) => newer(b.version, a.version))[0] }))
-            .filter((c) => c.live && c.s)
-            .sort((a, b) => rank(b.s) - rank(a.s));
-        const best = candidates[0];
-        // an outside twin is a default only where no official twin is
-        if (best && (best.s.official || candidates.every((c) => !c.s.official)))
+            .map((p) => ({ p, s: sources.get(p.source), live: p.versions.filter((v) => v.status === 'live' && /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/.test(v.version) && !revocations.some((r) => r.package === p.name && r.version === v.version)).sort((a, b) => newer(b.version, a.version))[0] }))
+            .filter((c) => c.live && c.s);
+        const recommendation = recommendations[e.vendor];
+        const best = recommendation ? candidates.find((c) => c.p.name === recommendation) : candidates.length === 1 ? candidates[0] : undefined;
+        if (!best && (recommendation || candidates.length > 1))
+            throw new Error(`${e.vendor}: catalog needs an explicit live package recommendation; publishers' versions cannot choose it`);
+        if (best) {
+            if (!/^@[a-z0-9][a-z0-9._-]*\/[a-z0-9][a-z0-9._-]*$/.test(best.p.name) || !best.p.name.startsWith(`${best.s.scope}/`))
+                throw new Error(`${e.vendor}: invalid catalog package identity`);
             out[e.vendor] = { name: best.p.name, version: best.live.version, source: best.p.source };
+        }
     }
     return out;
 }

package/dist/src/catalog.js

@@ -1,15 +1,15 @@
 // The catalog — where the twins a world can run come from (docs/concepts/worlds.md
 // #the-config-and-the-running-world). Two sources answer one interface: a pack-repository CHECKOUT and an
-// INSTALLED catalog (`@volter/twin-<vendor>` packages under
+// INSTALLED catalog (independently named pack packages under
 // `node_modules`, walked up from the world root — hoisting-proof, and independent of the
 // packages' `exports` maps, which do not expose `package.json`). A world born in an app repo
 // names its twins as packages and the runtime resolves them at boot; a world born here names the
 // selected checkout paths.
 import { existsSync, readdirSync, readFileSync } from 'node:fs';
 import { spawnSync } from 'node:child_process';
-import { dirname, join, resolve } from 'node:path';
+import { join, resolve } from 'node:path';
 import { overlayPackFacts } from "./pack-facts.js";
-import { installedPackageDir, isDerivedPack, packRepository } from '@volter/world-core/runtime';
+import { installedPackageDir, installedVendorPacks, isDerivedPack, packRepository } from '@volter/world-core/runtime';
 export const TWIN_PACKAGE_PREFIX = '@volter/twin-';
 export function twinPackageName(vendor) { return `${TWIN_PACKAGE_PREFIX}${vendor}`; }
 /** A derived (Protocol 3) pack carries the surface derive-pack generated from its spec. */
@@ -56,34 +56,6 @@ export function packCli(dir) {
 }
 /** The nearest `node_modules/<name>` above `from` that holds a package.json — node's own walk. */
 export const findInstalledPackage = installedPackageDir;
-/** Every installed `@volter/twin-<vendor>` visible from `from`, nearest wins. */
-function installedTwins(from) {
-    const found = new Map();
-    let dir = resolve(from);
-    for (;;) {
-        const scope = join(dir, 'node_modules', '@volter');
-        if (existsSync(scope)) {
-            for (const entry of readdirSync(scope, { withFileTypes: true })) {
-                if (!entry.isDirectory() && !entry.isSymbolicLink())
-                    continue;
-                const name = `@volter/${entry.name}`;
-                if (name === '@volter/twin-standard')
-                    continue; // the platform's standard is tooling, not a vendor pack
-                if (!name.startsWith(TWIN_PACKAGE_PREFIX))
-                    continue; // the platform's packages are `@volter/world-*`: outside the prefix by name
-                const vendor = name.slice(TWIN_PACKAGE_PREFIX.length);
-                const packDir = join(scope, entry.name);
-                if (!found.has(vendor) && isPackDir(packDir))
-                    found.set(vendor, packDir);
-            }
-        }
-        const up = dirname(dir);
-        if (up === dir)
-            break;
-        dir = up;
-    }
-    return found;
-}
 function fnv1a(text) {
     let h = 0x811c9dc5;
     for (let i = 0; i < text.length; i += 1) {
@@ -113,7 +85,7 @@ export function checkoutCatalog(root) {
     };
 }
 export function installedCatalog(root) {
-    const twins = installedTwins(root);
+    const twins = new Map([...installedVendorPacks(root)].filter(([, dir]) => packCli(dir) !== undefined));
     return {
         kind: 'installed',
         root: resolve(root),
@@ -137,6 +109,17 @@ export function mergedCatalog(sources) {
                 chosen.set(vendor, source);
                 continue;
             }
+            const heldName = manifest(held.packDir(vendor))?.name;
+            const nextName = manifest(source.packDir(vendor))?.name;
+            if (heldName !== nextName) {
+                if (source.kindOf(vendor) === 'installed' && held.kindOf(vendor) === 'checkout') {
+                    chosen.set(vendor, source);
+                    continue;
+                }
+                if (source.kindOf(vendor) === 'checkout' && held.kindOf(vendor) === 'installed')
+                    continue;
+                throw new Error(`${vendor}: multiple package implementations (${heldName}, ${nextName}); choose one explicitly`);
+            }
             if (major(source.version(vendor)) > major(held.version(vendor)))
                 chosen.set(vendor, source);
         }

package/dist/src/index.d.ts

@@ -55,3 +55,4 @@ export { assertWorldStateRemovable } from './ancestry.js';
 export { withoutVaultSignIn } from './runtime.js';
 export { errorMessage } from './error-message.js';
 export { materializeBrowserFiles, browsersDir, worldBrowser, worldBrowsers, putWorldBrowser, deleteWorldBrowser, inheritWorldBrowsers, type WorldBrowser } from './browsers.js';
+export { CATALOG_INDEX_PACKAGE, defaults as catalogDefaults } from './catalog-index.js';

package/dist/src/index.js

@@ -39,3 +39,4 @@ export { assertWorldStateRemovable } from "./ancestry.js";
 export { withoutVaultSignIn } from "./runtime.js";
 export { errorMessage } from "./error-message.js";
 export { materializeBrowserFiles, browsersDir, worldBrowser, worldBrowsers, putWorldBrowser, deleteWorldBrowser, inheritWorldBrowsers } from "./browsers.js";
+export { CATALOG_INDEX_PACKAGE, defaults as catalogDefaults } from "./catalog-index.js";

package/dist/src/init.js

@@ -38,7 +38,7 @@ import { PROTOCOL_MAJOR, stateDirName } from '@volter/world-core/runtime';
 import { dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
 import { coverWorld, detectRepoVendors, envNameVendor, formatCoverageReport, injectorEnvNameForKey, injectorVendorKeysFor, isCredentialShapedEnvName, registryAcknowledgedReason, } from "./covers.js";
 import { fakeEnvValue, isAppKeyName, isGoogleOAuthClientEnvName, isGoogleServiceAccountEnvName } from "./fixture-env.js";
-import { findInstalledPackage, packCli, packEntry, resolveCatalog, twinPackageName } from "./catalog.js";
+import { findInstalledPackage, packCli, packEntry, resolveCatalog } from "./catalog.js";
 import { CATALOG_INDEX_PACKAGE, defaults as catalogDefaults } from "./catalog-index.js";
 import { projectEnvReads, projectManifestDirs } from "./project-inspect.js";
 import { overlayEndpointEnv, packFacts } from "./pack-facts.js";
@@ -523,12 +523,6 @@ export function planWorldInit(name, repoPath, options = {}) {
     // the catalog index's defaults (the installed `@volter/twin-catalog`), which name the twin to install for a vendor
     // this catalog lacks
     const indexDir = findInstalledPackage(root, CATALOG_INDEX_PACKAGE);
-    const indexDefaults = (() => { try {
-        return indexDir === undefined ? {} : catalogDefaults(indexDir);
-    }
-    catch {
-        return {};
-    } })();
     // A pack's starters, copied VISIBLY into the world dir: the author's to edit or delete (copy = ownership; never
     // baked into the pack). Its handlers starter is the answering turns its own life scripts (journeys/scenario.json, the
     // World's handler format, its faults left out); its default data is src/semantics/seed.ts.
@@ -570,6 +564,7 @@ export function planWorldInit(name, repoPath, options = {}) {
             continue;
         }
         if (!catalog.has(vendor)) {
+            const indexDefaults = indexDir === undefined ? {} : catalogDefaults(indexDir, [vendor]);
             vendors.push({
                 vendor,
                 pack: null,
@@ -631,7 +626,7 @@ export function planWorldInit(name, repoPath, options = {}) {
         // inside this checkout it is the checkout-relative path, as the cookbook and the gates expect.
         const boot = catalogSource.kindOf(vendor) === 'installed'
             ? {
-                package: twinPackageName(vendor),
+                package: JSON.parse(readFileSync(join(packDir, 'package.json'), 'utf8')).name,
                 ...(handlersArg !== null ? { args: ['--scenario', handlersArg] } : {}),
                 ...(serveExport !== undefined ? { colocate: { export: serveExport, ...(handlersArg !== null ? { scenarioPath: handlersArg } : {}) } } : {}),
             }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/world-runtime",
-  "version": "3.0.40",
+  "version": "3.0.41",
   "description": "World configs for twins: boot named local runtimes, allocate ports, generate world.env/instance.json, and run apps against fake-key twin worlds.",
   "keywords": [
     "twin",
@@ -69,14 +69,14 @@
     "node": ">=22.3"
   },
   "peerDependencies": {
-    "@volter/world-core": "3.0.40",
-    "@volter/world-console": "3.0.35"
+    "@volter/world-core": "3.0.41",
+    "@volter/world-console": "3.0.36"
   },
   "dependencies": {
     "@electric-sql/pglite": "0.5.8",
     "@electric-sql/pglite-pgvector": "0.0.9",
     "@volter/world-access": "3.0.1",
-    "@volter/world-core": "3.0.40",
+    "@volter/world-core": "3.0.41",
     "mongodb": "~6.20.0",
     "pg-gateway": "0.3.0-beta.4",
     "smol-toml": "^1.8.0",

package/src/catalog-index.ts

@@ -1,7 +1,7 @@
 // The catalog index as the runtime reads it (docs/contributing/architecture.md, "The catalog: where twins come from"):
 // its sources, its vendors' packages and versions, and each vendor's default twin. The index is a directory of data (the
-// `volter-ai/twin-catalog` repository, published as the npm package `@volter/twin-catalog`); scripts/twin-catalog.ts
-// checks and writes it, and `init` reads the defaults from the installed package.
+// `volter-ai/twin-catalog` repository, published as the npm package `@volter/twin-catalog`). The catalog owns
+// validation and publication; `init` reads defaults from the installed artifact.
 import { existsSync, readdirSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
 
@@ -10,7 +10,7 @@ export const CATALOG_INDEX_PACKAGE = '@volter/twin-catalog';
 
 /** A source; `workflow` is the file under `.github/workflows/` its packages are released by (release.yml unless named). */
 export type Source = { name: string; repository: string; scope: string; official: boolean; protocol: '3'; workflow?: string };
-export type Version = { version: string; status: 'live' | 'pending' | 'rejected'; at: string; by: string; reason?: string; commit?: string };
+export type Version = { version: string; status: 'live' | 'pending' | 'rejected'; at: string; by: string; reason?: string; commit?: string; integrity?: string; submission?: string };
 export type Entry = { vendor: string; packages: Array<{ name: string; source: string; versions: Version[] }> };
 
 export const readSources = (index: string): Source[] => JSON.parse(readFileSync(join(index, 'sources.json'), 'utf8')) as Source[];
@@ -24,21 +24,27 @@ export const vendorOf = (name: string): string => name.replace(/^@[^/]+\//, '').
 const semver = (v: string): number[] => v.split(/[.-]/).slice(0, 3).map((n) => Number(n) || 0);
 const newer = (a: string, b: string): number => { const x = semver(a); const y = semver(b); for (let i = 0; i < 3; i++) if (x[i] !== y[i]) return x[i]! - y[i]!; return 0; };
 
-/** Each vendor's default twin: its official package, else its live outside package; the
- *  highest live version of it. */
-export function defaults(index: string): Record<string, { name: string; version: string; source: string }> {
+/** An explicit recommendation, or a vendor's sole live implementation. Publisher versions are independent. */
+export function defaults(index: string, vendors?: Iterable<string>): Record<string, { name: string; version: string; source: string }> {
   const sources = new Map(readSources(index).map((s) => [s.name, s]));
-  const rank = (s: Source | undefined): number => (!s ? 0 : s.official ? 2 : 1);
+  const recommendationFile = join(index, 'recommendations.json');
+  const recommendations = existsSync(recommendationFile) ? JSON.parse(readFileSync(recommendationFile, 'utf8')) as Record<string, string> : {};
+  const revocationsFile = join(index, 'revocations.json');
+  const revocations = existsSync(revocationsFile) ? JSON.parse(readFileSync(revocationsFile, 'utf8')) as Array<{ package: string; version: string }> : [];
   const out: Record<string, { name: string; version: string; source: string }> = {};
+  const requested = vendors === undefined ? undefined : new Set(vendors);
   for (const e of readVendors(index)) {
+    if (requested && !requested.has(e.vendor)) continue;
     const candidates = e.packages
-      .map((p) => ({ p, s: sources.get(p.source), live: p.versions.filter((v) => v.status === 'live').sort((a, b) => newer(b.version, a.version))[0] }))
-      .filter((c) => c.live && c.s)
-      .sort((a, b) => rank(b.s) - rank(a.s));
-    const best = candidates[0];
-    // an outside twin is a default only where no official twin is
-    if (best && (best.s!.official || candidates.every((c) => !c.s!.official))) out[e.vendor] = { name: best.p.name, version: best.live!.version, source: best.p.source };
+      .map((p) => ({ p, s: sources.get(p.source), live: p.versions.filter((v) => v.status === 'live' && /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/.test(v.version) && !revocations.some((r) => r.package === p.name && r.version === v.version)).sort((a, b) => newer(b.version, a.version))[0] }))
+      .filter((c) => c.live && c.s);
+    const recommendation = recommendations[e.vendor];
+    const best = recommendation ? candidates.find((c) => c.p.name === recommendation) : candidates.length === 1 ? candidates[0] : undefined;
+    if (!best && (recommendation || candidates.length > 1)) throw new Error(`${e.vendor}: catalog needs an explicit live package recommendation; publishers' versions cannot choose it`);
+    if (best) {
+      if (!/^@[a-z0-9][a-z0-9._-]*\/[a-z0-9][a-z0-9._-]*$/.test(best.p.name) || !best.p.name.startsWith(`${best.s!.scope}/`)) throw new Error(`${e.vendor}: invalid catalog package identity`);
+      out[e.vendor] = { name: best.p.name, version: best.live!.version, source: best.p.source };
+    }
   }
   return out;
 }
-

package/src/catalog.ts

@@ -1,15 +1,15 @@
 // The catalog — where the twins a world can run come from (docs/concepts/worlds.md
 // #the-config-and-the-running-world). Two sources answer one interface: a pack-repository CHECKOUT and an
-// INSTALLED catalog (`@volter/twin-<vendor>` packages under
+// INSTALLED catalog (independently named pack packages under
 // `node_modules`, walked up from the world root — hoisting-proof, and independent of the
 // packages' `exports` maps, which do not expose `package.json`). A world born in an app repo
 // names its twins as packages and the runtime resolves them at boot; a world born here names the
 // selected checkout paths.
 import { existsSync, readdirSync, readFileSync } from 'node:fs';
 import { spawnSync } from 'node:child_process';
-import { dirname, join, resolve } from 'node:path';
+import { join, resolve } from 'node:path';
 import { overlayPackFacts, type PackFacts } from './pack-facts.ts';
-import { installedPackageDir, isDerivedPack, packRepository } from '@volter/world-core/runtime';
+import { installedPackageDir, installedVendorPacks, isDerivedPack, packRepository } from '@volter/world-core/runtime';
 
 export const TWIN_PACKAGE_PREFIX = '@volter/twin-';
 
@@ -71,30 +71,6 @@ export function packCli(dir: string): string | undefined {
 /** The nearest `node_modules/<name>` above `from` that holds a package.json — node's own walk. */
 export const findInstalledPackage = installedPackageDir;
 
-/** Every installed `@volter/twin-<vendor>` visible from `from`, nearest wins. */
-function installedTwins(from: string): Map<string, string> {
-  const found = new Map<string, string>();
-  let dir = resolve(from);
-  for (;;) {
-    const scope = join(dir, 'node_modules', '@volter');
-    if (existsSync(scope)) {
-      for (const entry of readdirSync(scope, { withFileTypes: true })) {
-        if (!entry.isDirectory() && !entry.isSymbolicLink()) continue;
-        const name = `@volter/${entry.name}`;
-        if (name === '@volter/twin-standard') continue; // the platform's standard is tooling, not a vendor pack
-        if (!name.startsWith(TWIN_PACKAGE_PREFIX)) continue; // the platform's packages are `@volter/world-*`: outside the prefix by name
-        const vendor = name.slice(TWIN_PACKAGE_PREFIX.length);
-        const packDir = join(scope, entry.name);
-        if (!found.has(vendor) && isPackDir(packDir)) found.set(vendor, packDir);
-      }
-    }
-    const up = dirname(dir);
-    if (up === dir) break;
-    dir = up;
-  }
-  return found;
-}
-
 function fnv1a(text: string): string {
   let h = 0x811c9dc5;
   for (let i = 0; i < text.length; i += 1) { h ^= text.charCodeAt(i); h = Math.imul(h, 0x01000193) >>> 0; }
@@ -123,7 +99,7 @@ export function checkoutCatalog(root: string): Catalog {
 }
 
 export function installedCatalog(root: string): Catalog {
-  const twins = installedTwins(root);
+  const twins = new Map([...installedVendorPacks(root)].filter(([, dir]) => packCli(dir) !== undefined));
   return {
     kind: 'installed',
     root: resolve(root),
@@ -145,6 +121,13 @@ export function mergedCatalog(sources: Catalog[]): Catalog {
     for (const vendor of source.vendors()) {
       const held = chosen.get(vendor);
       if (held === undefined) { chosen.set(vendor, source); continue; }
+      const heldName = manifest(held.packDir(vendor)!)?.name;
+      const nextName = manifest(source.packDir(vendor)!)?.name;
+      if (heldName !== nextName) {
+        if (source.kindOf(vendor) === 'installed' && held.kindOf(vendor) === 'checkout') { chosen.set(vendor, source); continue; }
+        if (source.kindOf(vendor) === 'checkout' && held.kindOf(vendor) === 'installed') continue;
+        throw new Error(`${vendor}: multiple package implementations (${heldName}, ${nextName}); choose one explicitly`);
+      }
       if (major(source.version(vendor)) > major(held.version(vendor))) chosen.set(vendor, source);
     }
   }

package/src/index.ts

@@ -180,3 +180,4 @@ export { withoutVaultSignIn } from './runtime.ts';
 export { errorMessage } from './error-message.ts';
 
 export { materializeBrowserFiles, browsersDir, worldBrowser, worldBrowsers, putWorldBrowser, deleteWorldBrowser, inheritWorldBrowsers, type WorldBrowser } from './browsers.ts';
+export { CATALOG_INDEX_PACKAGE, defaults as catalogDefaults } from './catalog-index.ts';

package/src/init.ts

@@ -48,7 +48,7 @@ import {
   type CoverageReport,
 } from './covers.ts';
 import { fakeEnvValue, isAppKeyName, isGoogleOAuthClientEnvName, isGoogleServiceAccountEnvName } from './fixture-env.ts';
-import { findInstalledPackage, packCli, packEntry, resolveCatalog, twinPackageName, type Catalog } from './catalog.ts';
+import { findInstalledPackage, packCli, packEntry, resolveCatalog, type Catalog } from './catalog.ts';
 import { CATALOG_INDEX_PACKAGE, defaults as catalogDefaults } from './catalog-index.ts';
 import { projectEnvReads, projectManifestDirs } from './project-inspect.ts';
 import { overlayEndpointEnv, packFacts } from './pack-facts.ts';
@@ -726,7 +726,6 @@ export function planWorldInit(name: string, repoPath: string, options: InitOptio
   // the catalog index's defaults (the installed `@volter/twin-catalog`), which name the twin to install for a vendor
   // this catalog lacks
   const indexDir = findInstalledPackage(root, CATALOG_INDEX_PACKAGE);
-  const indexDefaults = (() => { try { return indexDir === undefined ? {} : catalogDefaults(indexDir); } catch { return {}; } })();
   // A pack's starters, copied VISIBLY into the world dir: the author's to edit or delete (copy = ownership; never
   // baked into the pack). Its handlers starter is the answering turns its own life scripts (journeys/scenario.json, the
   // World's handler format, its faults left out); its default data is src/semantics/seed.ts.
@@ -765,6 +764,7 @@ export function planWorldInit(name: string, repoPath: string, options: InitOptio
       continue;
     }
     if (!catalog.has(vendor)) {
+      const indexDefaults = indexDir === undefined ? {} : catalogDefaults(indexDir, [vendor]);
       vendors.push({
         vendor,
         pack: null,
@@ -821,7 +821,7 @@ export function planWorldInit(name: string, repoPath: string, options: InitOptio
     // inside this checkout it is the checkout-relative path, as the cookbook and the gates expect.
     const boot: Pick<WorldServiceConfig, 'package' | 'command' | 'args' | 'colocate'> = catalogSource.kindOf(vendor) === 'installed'
       ? {
-          package: twinPackageName(vendor),
+          package: (JSON.parse(readFileSync(join(packDir, 'package.json'), 'utf8')) as { name: string }).name,
           ...(handlersArg !== null ? { args: ['--scenario', handlersArg] } : {}),
           ...(serveExport !== undefined ? { colocate: { export: serveExport, ...(handlersArg !== null ? { scenarioPath: handlersArg } : {}) } } : {}),
         }