@volter/world 3.0.190 → 3.0.192

package/dist/examples/customer-onboarding/README.md

@@ -13,7 +13,7 @@ You need Node 22.6+, pnpm 12.15.0, Docker Compose and registry access during ins
 Copy this starter into a new folder:
 
 ```console
-$ npx @volter/world@3.0.190 example customer-onboarding --dir onboarding
+$ npx @volter/world@3.0.192 example customer-onboarding --dir onboarding
 $ cd onboarding
 $ pnpm install
 ```

package/dist/examples/customer-onboarding/package.json

@@ -11,13 +11,13 @@
     "pg": "8.16.3"
   },
   "devDependencies": {
-    "@volter/world": "3.0.190",
-    "@volter/world-core": "3.0.164",
-    "@volter/world-runtime": "3.0.188",
-    "@volter/world-console": "3.0.160",
+    "@volter/world": "3.0.192",
+    "@volter/world-core": "3.0.165",
+    "@volter/world-runtime": "3.0.190",
+    "@volter/world-console": "3.0.161",
     "@volter/twin-stripe": "3.0.2",
     "@volter/twin-resend": "1.0.1",
-    "@volter/world-ui": "1.0.163"
+    "@volter/world-ui": "1.0.164"
   },
   "packageManager": "pnpm@12.15.0",
   "devEngines": {

package/dist/examples/integration-branches/README.md

@@ -13,7 +13,7 @@ Give two workers the same Stripe baseline, let them change different existing cu
 Use an empty parent folder. Create the baseline starter there:
 
 ```console
-$ npx @volter/world@3.0.190 example integration-branches --dir baseline
+$ npx @volter/world@3.0.192 example integration-branches --dir baseline
 $ cd baseline
 $ pnpm install
 $ ./node_modules/.bin/volter world init --name baseline --twins stripe
@@ -38,9 +38,9 @@ The stopped baseline retains its history and can supply local path remotes. Defa
 Create three more copies in the same parent folder:
 
 ```console
-$ npx @volter/world@3.0.190 example integration-branches --dir integration
-$ npx @volter/world@3.0.190 example integration-branches --dir worker-a
-$ npx @volter/world@3.0.190 example integration-branches --dir worker-b
+$ npx @volter/world@3.0.192 example integration-branches --dir integration
+$ npx @volter/world@3.0.192 example integration-branches --dir worker-a
+$ npx @volter/world@3.0.192 example integration-branches --dir worker-b
 ```
 
 In `integration`, then `worker-a`, then `worker-b`, install dependencies and initialize with the folder's name. Before a first boot or app write, link and pull the baseline:

package/dist/examples/integration-branches/package.json

@@ -9,12 +9,12 @@
     "stripe": "17.7.0"
   },
   "devDependencies": {
-    "@volter/world": "3.0.190",
-    "@volter/world-core": "3.0.164",
-    "@volter/world-runtime": "3.0.188",
-    "@volter/world-console": "3.0.160",
+    "@volter/world": "3.0.192",
+    "@volter/world-core": "3.0.165",
+    "@volter/world-runtime": "3.0.190",
+    "@volter/world-console": "3.0.161",
     "@volter/twin-stripe": "3.0.2",
-    "@volter/world-ui": "1.0.163"
+    "@volter/world-ui": "1.0.164"
   },
   "packageManager": "pnpm@12.15.0",
   "devEngines": {

package/dist/examples/workplace-agent/README.md

@@ -19,7 +19,7 @@ The catalog offers current defaults. Keep this example's manifest and installati
 together; its recorded workflow does not establish behavior for a different release.
 
 ```console
-$ npx @volter/world@3.0.190 example workplace-agent --dir workplace
+$ npx @volter/world@3.0.192 example workplace-agent --dir workplace
 $ cd workplace
 $ pnpm install
 $ ./node_modules/.bin/volter world init --name workplace --twins github,linear,slack

package/dist/examples/workplace-agent/package.json

@@ -11,14 +11,14 @@
     "@slack/web-api": "7.19.0"
   },
   "devDependencies": {
-    "@volter/world": "3.0.190",
-    "@volter/world-core": "3.0.164",
-    "@volter/world-runtime": "3.0.188",
-    "@volter/world-console": "3.0.160",
+    "@volter/world": "3.0.192",
+    "@volter/world-core": "3.0.165",
+    "@volter/world-runtime": "3.0.190",
+    "@volter/world-console": "3.0.161",
     "@volter/twin-github": "3.0.9",
     "@volter/twin-linear": "3.0.5",
     "@volter/twin-slack": "3.0.8",
-    "@volter/world-ui": "1.0.163"
+    "@volter/world-ui": "1.0.164"
   },
   "packageManager": "pnpm@12.15.0",
   "devEngines": {

package/dist/src/cli.d.ts

@@ -1,2 +1,2 @@
 #!/usr/bin/env node
-export declare const HELP = "volter \u2014 run your app against a world of twins\n\nworld  \u2014 a shared simulated internet (the world of the current directory)\n  volter world init [--install] [--name <world>] [--twins a,b] [--source vendor=package] [--allow-unknown]   detect or select vendors, choose installed publishers, write .volter/world.json\n  volter world up [--sandbox] [--no-seed]                start the twins on this branch (loads the default data the first time)\n  volter world env [--template <file>]                    render deployment .env.world references into dotenv files\n  volter world run [--verbose] -- <command...>           run the app or its tests inside the world\n  volter world activate                                  eval \"$(volter world activate)\": vendor CLIs and curl in this shell reach the twins\n  volter world shell                                     a subshell with the world active\n  volter world init --bare <org>/<world> --twins a,b      a world with no app: a shared world for a team, or one standing in for a vendor\n  volter example list                                   ready application starters included in this CLI release\n  volter example <name> [--dir <path>]                    copy a cookbook starter into an empty directory; does not install or start it\n  volter world serve [--port <p>] [--console-port <c>] [--origin <url>]   serve this world on a URL under /<org>/<world>/ for apps; prints the token and the console (on loopback: view's front, no token in the browser)\n  volter world view [--port <p>] [--host <h>] [--no-open] [--no-origins] [--origin <url>]   step into this world in a browser: its twins' own UIs, timeline, clock, branches (a non-loopback --host serves them on one origin)\n  volter world console [<https://host/org/world>] [--port <p>]  the console on this machine for a World served elsewhere (default: this world's origin); needs @volter/world-console\n  volter world status                                    world, branch, origin, unpushed changes, what is running\n  volter world log [--receipts] [--json]                 every write the app made; --receipts adds each change's receipt\n  volter world diff [--json]                             what changed since the default data (or the last mark)\n  volter world seed                                      load the default data\n  volter world reset                                     back to the default data\n  volter world down [--purge]                            stop the twins (--purge forgets this branch's state)\n  volter world branch [<name>]                           list branches, or make one from here and check it out\n  volter world checkout <name>                           switch branches\n  volter world replay <changeset> --into <branch>        feed a changeset's changes into another branch's twins\n  volter world clock show | set <iso> | advance <N s|m|h|d> | shift <N s|m|h|d> | clear   the world's clock: set, not observed\n  volter world clone <url> --token <token> [--admin-token <t>]   connect this world to a remote and fetch its history (the admin token copies the whole tree at once)\n  volter world fetch                                     what the remote observed since the last fetch\n  volter world origin                                    where this world clones from and pushes to\n  volter world changeset [<name>] -m \"<message>\"         cut the unpushed changes into a reviewable changeset\n  volter world pull [--token <token>]                    fetch, then move this branch onto what came in (git's pull)\n  volter world push [<name>] [--remote <remote>] [--token <token>] [--force] send entries to the selected remote (default origin); vendor deployment follows its root policy\n  volter world rebase [<changeset>]                      rebase this branch onto its moved base, or a changeset onto the moved remote\n  volter world verify <changeset>                        run the world's checks over a changeset and record the result\n  volter world approve <changeset> --as <principal>      sign a changeset's current hash\n  volter world deploy [<changeset>]                      perform landed changes against each twin's root, by its policy\n\ntwin   \u2014 one twin: in this world, or on its own\n  volter twin submit --source <id> --vendor <vendor> --package <name> --version <exact>  prepare a catalog submission\n  volter twin <vendor>                                   the twin's URL, root, deploy policy, whether a credential is sealed\n  volter twin <vendor> root <url> [--deploy auto|gated|hold] [--scope <path>]   the vendor's real account behind this twin (--none clears it)\n  volter twin <vendor> credential                        seal a credential read from stdin beside the world; never readable back\n  volter twin <vendor> refresh                           observe the root now\n  volter twin <vendor> serve [--port <p>] [--read-only]  serve the twin; your SDK talks to it at http://127.0.0.1:<p>\n\nagents \u2014 your coding agent, driving the same verbs\n  volter agents install [--claude] [--cursor] [--vscode] [--codex] [--yes]   put the volter-world skill and the MCP server into the agents found here\n  volter mcp                                             the MCP server (stdio) an agent starts: the verbs above as tools\n\nremote \u2014 the worlds this one pushes to and fetches from, by name\n  volter login <platform url> [--token <personal token>]  sign the CLI into the hosted platform: approve it in the browser (or a token made under Account, for CI)\n  volter whoami                                          the platform the CLI is signed into, as whom, and its orgs\n  volter logout                                          revoke the CLI's token at the platform and forget it here\n  volter remote add <name> <url|path|org/world> [--token <token>] [--create]  name a remote; org/world (or world, in one org) resolves through the platform you logged into; --create makes it there from this world's twins\n  volter open [<org>/<world>] [--no-open]                a World's dashboard: a hosted one through the platform, else this world's (as view)\n  volter completion bash|zsh|fish|powershell             print a completion script for your shell\n  volter remote remove <name>                            forget it\n  volter remote list                                     every remote, with its URL and whether a token is stored\n  (the hosting product's serve answers here for one release: volter remote serve)\n\n  --world <dir>    the world root, when the cwd is not inside it\n  --branch <name>  act on that branch instead of the checked-out one\n  --json           machine-readable output where offered\n  --version        the command's version\n";
+export declare const HELP = "volter \u2014 run your app against a world of twins\n\nworld  \u2014 a shared simulated internet (the world of the current directory)\n  volter world init [--install] [--name <world>] [--twins a,b] [--source vendor=package] [--allow-unknown]   detect or select vendors, choose installed publishers, write .volter/world.json\n  volter world up [--sandbox] [--no-seed]                start the twins on this branch (loads the default data the first time)\n  volter world env [--template <file>]                    render deployment .env.world references into dotenv files\n  volter world run [--verbose] -- <command...>           run the app or its tests inside the world\n  volter world activate                                  eval \"$(volter world activate)\": vendor CLIs and curl in this shell reach the twins\n  volter world shell                                     a subshell with the world active\n  volter world init --bare <org>/<world> --twins a,b      a world with no app: a shared world for a team, or one standing in for a vendor\n  volter example list                                   ready application starters included in this CLI release\n  volter example <name> [--dir <path>]                    copy a cookbook starter into an empty directory; does not install or start it\n  volter world serve [--port <p>] [--console-port <c>] [--origin <url>]   serve this world on a URL under /<org>/<world>/ for apps; prints the token and the console (on loopback: view's front, no token in the browser)\n  volter world view [--port <p>] [--host <h>] [--no-open] [--no-origins] [--origin <url>]   step into this world in a browser: its twins' own UIs, timeline, clock, branches (a non-loopback --host serves them on one origin)\n  volter world console [<https://host/org/world>] [--port <p>]  the console on this machine for a World served elsewhere (default: this world's origin); needs @volter/world-console\n  volter world status                                    world, branch, origin, unpushed changes, what is running\n  volter world log [--receipts] [--json]                 every write the app made; --receipts adds each change's receipt\n  volter world diff [--json]                             what changed since the default data (or the last mark)\n  volter world generate                                  write seed.generated.ts from world.json's people, organizations and accounts\n  volter world browser <name> [url] [--cdp <endpoint>]   open a person's saved World browser, signed in, through the running World (--cdp loads its cookies into a browser already open)\n  volter world seed                                      load the default data\n  volter world reset                                     back to the default data\n  volter world down [--purge]                            stop the twins (--purge forgets this branch's state)\n  volter world branch [<name>]                           list branches, or make one from here and check it out\n  volter world checkout <name>                           switch branches\n  volter world replay <changeset> --into <branch>        feed a changeset's changes into another branch's twins\n  volter world clock show | set <iso> | advance <N s|m|h|d> | shift <N s|m|h|d> | clear   the world's clock: set, not observed\n  volter world clone <url> --token <token> [--admin-token <t>]   connect this world to a remote and fetch its history (the admin token copies the whole tree at once)\n  volter world fetch                                     what the remote observed since the last fetch\n  volter world origin                                    where this world clones from and pushes to\n  volter world changeset [<name>] -m \"<message>\"         cut the unpushed changes into a reviewable changeset\n  volter world pull [--token <token>]                    fetch, then move this branch onto what came in (git's pull)\n  volter world push [<name>] [--remote <remote>] [--token <token>] [--force] send entries to the selected remote (default origin); vendor deployment follows its root policy\n  volter world rebase [<changeset>]                      rebase this branch onto its moved base, or a changeset onto the moved remote\n  volter world verify <changeset>                        run the world's checks over a changeset and record the result\n  volter world approve <changeset> --as <principal>      sign a changeset's current hash\n  volter world deploy [<changeset>]                      perform landed changes against each twin's root, by its policy\n\ntwin   \u2014 one twin: in this world, or on its own\n  volter twin submit --source <id> --vendor <vendor> --package <name> --version <exact>  prepare a catalog submission\n  volter twin <vendor>                                   the twin's URL, root, deploy policy, whether a credential is sealed\n  volter twin <vendor> root <url> [--deploy auto|gated|hold] [--scope <path>]   the vendor's real account behind this twin (--none clears it)\n  volter twin <vendor> credential                        seal a credential read from stdin beside the world; never readable back\n  volter twin <vendor> refresh                           observe the root now\n  volter twin <vendor> serve [--port <p>] [--read-only]  serve the twin; your SDK talks to it at http://127.0.0.1:<p>\n\nagents \u2014 your coding agent, driving the same verbs\n  volter agents install [--claude] [--cursor] [--vscode] [--codex] [--yes]   put the volter-world skill and the MCP server into the agents found here\n  volter mcp                                             the MCP server (stdio) an agent starts: the verbs above as tools\n\nremote \u2014 the worlds this one pushes to and fetches from, by name\n  volter login <platform url> [--token <personal token>]  sign the CLI into the hosted platform: approve it in the browser (or a token made under Account, for CI)\n  volter whoami                                          the platform the CLI is signed into, as whom, and its orgs\n  volter logout                                          revoke the CLI's token at the platform and forget it here\n  volter remote add <name> <url|path|org/world> [--token <token>] [--create]  name a remote; org/world (or world, in one org) resolves through the platform you logged into; --create makes it there from this world's twins\n  volter open [<org>/<world>] [--no-open]                a World's dashboard: a hosted one through the platform, else this world's (as view)\n  volter completion bash|zsh|fish|powershell             print a completion script for your shell\n  volter remote remove <name>                            forget it\n  volter remote list                                     every remote, with its URL and whether a token is stored\n  (the hosting product's serve answers here for one release: volter remote serve)\n\n  --world <dir>    the world root, when the cwd is not inside it\n  --branch <name>  act on that branch instead of the checked-out one\n  --json           machine-readable output where offered\n  --version        the command's version\n";

package/dist/src/cli.js

@@ -16,6 +16,7 @@ import { forgetPlatform, forgetToken, platformOrigin, storePlatform, storeToken,
 import { parseOriginUrl, World } from "./world.js";
 import { copyExample, examples } from "./examples.js";
 import { waitForServeShutdown } from "./serve-shutdown.js";
+import { openWorldBrowser } from "./world-browser.js";
 import { currentVersion, startUpdateCheck } from "./update-notice.js";
 import { withoutVaultSignIn } from '@volter/world-runtime';
 /** Open a URL in the person's browser; a machine without one only loses the convenience. */
@@ -56,6 +57,8 @@ world  — a shared simulated internet (the world of the current directory)
   volter world status                                    world, branch, origin, unpushed changes, what is running
   volter world log [--receipts] [--json]                 every write the app made; --receipts adds each change's receipt
   volter world diff [--json]                             what changed since the default data (or the last mark)
+  volter world generate                                  write seed.generated.ts from world.json's people, organizations and accounts
+  volter world browser <name> [url] [--cdp <endpoint>]   open a person's saved World browser, signed in, through the running World (--cdp loads its cookies into a browser already open)
   volter world seed                                      load the default data
   volter world reset                                     back to the default data
   volter world down [--purge]                            stop the twins (--purge forgets this branch's state)
@@ -127,7 +130,7 @@ function positionals(args, valueFlags) {
     return out;
 }
 function afterDashes(args) { const i = args.indexOf('--'); return i < 0 ? [] : args.slice(i + 1); }
-const VALUE_FLAGS = ['--world', '--branch', '--name', '--token', '--admin-token', '-m', '--message', '--base', '--org', '--vendors', '--into', '--deploy', '--as', '--note', '--port', '--twins', '--source', '--host', '--origin', '--remote', '--dir', '--scope', '--refresh', '--at-most', '--at', '--template', '--output-root', '--app', '--app-url', '--template-out'];
+const VALUE_FLAGS = ['--world', '--branch', '--name', '--token', '--admin-token', '-m', '--message', '--base', '--org', '--vendors', '--into', '--deploy', '--as', '--note', '--port', '--twins', '--source', '--host', '--origin', '--remote', '--dir', '--scope', '--refresh', '--at-most', '--at', '--template', '--output-root', '--app', '--app-url', '--template-out', '--cdp'];
 /** Help is resolved before opening a World; the child after `run --` owns its own flags. */
 function wantsHelp(noun, verb, args) {
     const boundary = args.indexOf('--');
@@ -344,6 +347,20 @@ async function worldCommand(verb, args) {
                 out(`  ${v.service}: ${v.count} change${v.count === 1 ? '' : 's'}`);
             return;
         }
+        case 'browser': {
+            const [name, url] = pos;
+            if (!name)
+                throw new Error('volter world browser <name> [url] [--cdp <endpoint>]');
+            await openWorldBrowser(world, name, url, value(args, '--cdp'), out);
+            return;
+        }
+        case 'generate': {
+            const r = world.generate();
+            out(`${r.changed ? 'wrote' : 'unchanged'}  ${relative(process.cwd(), r.path) || r.path}`);
+            if (!r.imported)
+                out('note   seed.ts beside it does not import ./seed.generated.ts, and the World runs only seed.ts');
+            return;
+        }
         case 'seed': {
             const r = await world.seed();
             out(`Loaded the default data into ${r.world}: ${Object.entries(r.observed).map(([s, n]) => `${s} ${n}`).join(', ') || 'nothing recorded'}`);
@@ -718,7 +735,7 @@ async function twinCommand(args) {
             out(t.ingest ? `${vendor}  ingest ${t.ingest}  (register it at the vendor as the webhook URL, with the signing secret sealed with the credential)` : `${vendor}  ingest: a served World's door (volter world serve, or a remote) is the webhook URL to register at the vendor`);
         return;
     }
-    const dir = resolveCatalog(process.cwd()).packDir(vendor);
+    const dir = resolveCatalog(process.cwd(), { vendors: [vendor] }).packDir(vendor);
     if (dir === undefined)
         throw new Error(`No twin "${vendor}" here — \`pnpm add -D --package-import-method=hardlink --config.nodeLinker=hoisted @volter/twin-${vendor}\`, or run from a checkout that has it`);
     if (rest.length === 0 || rest[0].startsWith('-'))

package/dist/src/world-browser.d.ts

@@ -0,0 +1,4 @@
+export declare function openWorldBrowser(world: {
+    name: string;
+    root: string;
+}, name: string, url: string | undefined, cdp: string | undefined, say: (line: string) => void): Promise<void>;

package/dist/src/world-browser.js

@@ -0,0 +1,43 @@
+// `volter world browser <name> [url] [--cdp <endpoint>]`: a person's saved World browser opened in a real browser
+// (ADR 0016, rows 3 and 4). The profile is read through the World's own record reader and the browser is routed through
+// the World's proxy with its CA trusted, as attach publishes them. Nothing is written back to the World.
+import { deriveWorldManifest, statusWorld, worldBrowser, worldBrowsers } from '@volter/world-runtime';
+export async function openWorldBrowser(world, name, url, cdp, say) {
+    const instance = statusWorld(world.name, world.root);
+    const record = worldBrowser(instance.dirs.data, name);
+    if (!record) {
+        const names = worldBrowsers(instance.dirs.data).map(row => row.name);
+        throw new Error(`World "${world.name}" has no browser "${name}" (has: ${names.join(', ') || 'none'})`);
+    }
+    const manifest = deriveWorldManifest(world.name, instance.env ?? {});
+    if (!instance.running || !manifest.browser)
+        throw new Error('the World is not running, so it has no proxy to route a browser through: start it with `volter world up`');
+    let chromium;
+    try {
+        ({ chromium } = await import('playwright'));
+    }
+    catch {
+        throw new Error('volter world browser needs playwright: npm i playwright');
+    }
+    const profile = record.state;
+    if (cdp === undefined) {
+        const browser = await chromium.launch({ headless: false, args: manifest.browser.args });
+        const closed = new Promise(resolve => browser.on('disconnected', () => resolve()));
+        const context = await browser.newContext({ ...profile.context, storageState: profile.storageState });
+        const page = await context.newPage();
+        await page.goto(url ?? 'about:blank');
+        await closed;
+        return;
+    }
+    const browser = await chromium.connectOverCDP(cdp);
+    const context = browser.contexts()[0];
+    if (!context)
+        throw new Error(`${cdp} has no default browser context to load ${name}'s cookies into`);
+    // An existing default context takes no context options (ADR 0016): its cookies are what is loaded.
+    if (Object.keys(profile.context).length)
+        say(`note   ${name}'s context options (${Object.keys(profile.context).join(', ')}) were not applied: an existing browser's default context takes none`);
+    await context.addCookies(profile.storageState.cookies);
+    const page = await context.newPage();
+    await page.goto(url ?? 'about:blank');
+    await browser.close();
+}

package/dist/src/world.d.ts

@@ -1,6 +1,6 @@
 import { renderDeploymentTemplates, type DeploymentTemplate } from '@volter/world-runtime/deployment-env';
 import { rebaseChangeset, worldBootMarker, type Changeset, type LedgerDelta, type TwinAction, type WorldMarker, type ApplyReceipt, applyTwinWrite, type TwinResource } from '@volter/world-core/runtime';
-import { approveWorldChangeset, createWorldChangeset, downWorld, fetchFromOrigin, pushWorldChangeset, rebaseWorldChangeset, replayWorldChangeset, resetWorld, seedServedWorld, seedWorld, statusWorld, statusWorldChangeset, verifyWorldChangeset, type ServedWorld, type ViewConsole, type WorldView, rootCredentialInput, type DeployTwinOutcome, type ChangesetLocation, type InitOptions, type InitResult, type WorldInstance } from '@volter/world-runtime';
+import { approveWorldChangeset, createWorldChangeset, downWorld, fetchFromOrigin, pushWorldChangeset, rebaseWorldChangeset, replayWorldChangeset, resetWorld, seedServedWorld, seedWorld, statusWorld, writeGeneratedSeed, statusWorldChangeset, verifyWorldChangeset, type ServedWorld, type ViewConsole, type WorldView, rootCredentialInput, type DeployTwinOutcome, type ChangesetLocation, type InitOptions, type InitResult, type WorldInstance } from '@volter/world-runtime';
 import { rebaseBranch, type Receipt, type RootConfig } from '@volter/world-core/runtime';
 export type WorldRef = {
     name?: string;
@@ -146,6 +146,9 @@ export declare class World {
         entry?: string;
         cwd?: string;
     }): ReturnType<typeof seedWorld>;
+    /** Write `seed.generated.ts` beside world.json from the people, organizations and accounts it declares (ADR 0033), as a
+     *  lockfile is written from its manifest: whether it changed, and whether `seed.ts`, which the World runs, imports it. */
+    generate(): ReturnType<typeof writeGeneratedSeed>;
     /** Whether this world has default data (`.volter/seed.ts`). */
     hasSeed(): boolean;
     /** Set up a served World this one is linked to from this world's seed: run there through its own twins, then marked. */

package/dist/src/world.js

@@ -7,7 +7,7 @@ import { platformPerson } from "./credentials.js";
 import { rebaseChangeset, worldBootMarker, listActions, inWorldHistory, pushablePendingActions, pendingActions, applyTwinWrite, twinResources } from '@volter/world-core/runtime';
 import { spawnSync } from 'node:child_process';
 import clockForm from '@volter/world-core/world-clock';
-import { activateScript, approveWorldChangeset, branchWorld, clockFile, checkoutWorld, createWorldChangeset, diffWorld, downWorld, fetchFromOrigin, findWorldChangeset, initWorld, listWorldChangesets, listWorldMarks, listWorlds, markWorld, pushWorldChangeset, rebaseWorldChangeset, replayWorldChangeset, resetWorld, runWithWorldEnv, seedServedWorld, seedWorld, shellWorld, materializeBrowserFiles, statusWorld, statusWorldChangeset, upWorld, verifyWorldChangeset, worldLedgers, worldOrigin, bindLegacyCredentials, deployWorld, loadWorldConfig, writeWorldConfig, readServeRecord, refreshTwin, serveWorld, serveWorldView, findInstalledPackage, rootForControlRoot, sealTwinCredential, sealedCredentialInfo, setTwinRoot, credentialPayloadFrom, rootCredentialInput, withoutVaultSignIn, materializeRoots, instanceDir, worldChangesetRules } from '@volter/world-runtime';
+import { activateScript, approveWorldChangeset, branchWorld, clockFile, checkoutWorld, createWorldChangeset, diffWorld, downWorld, fetchFromOrigin, findWorldChangeset, initWorld, listWorldChangesets, listWorldMarks, listWorlds, markWorld, pushWorldChangeset, rebaseWorldChangeset, replayWorldChangeset, resetWorld, runWithWorldEnv, seedServedWorld, seedWorld, shellWorld, materializeBrowserFiles, statusWorld, writeGeneratedSeed, statusWorldChangeset, upWorld, verifyWorldChangeset, worldLedgers, worldOrigin, bindLegacyCredentials, deployWorld, loadWorldConfig, writeWorldConfig, readServeRecord, refreshTwin, serveWorld, serveWorldView, findInstalledPackage, rootForControlRoot, sealTwinCredential, sealedCredentialInfo, setTwinRoot, credentialPayloadFrom, rootCredentialInput, withoutVaultSignIn, materializeRoots, instanceDir, worldChangesetRules } from '@volter/world-runtime';
 import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
 import { dirname, join, resolve } from 'node:path';
 import { requireToken, storeToken } from "./credentials.js";
@@ -248,6 +248,9 @@ export class World {
     // ── default data ────────────────────────────────────────────────────────────────────────
     /** Load the default data: the seed runs with every twin recording what it creates as data that was already there. */
     seed(opts = {}) { return seedWorld(this.name, { root: this.root, cwd: this.root, ...opts }); }
+    /** Write `seed.generated.ts` beside world.json from the people, organizations and accounts it declares (ADR 0033), as a
+     *  lockfile is written from its manifest: whether it changed, and whether `seed.ts`, which the World runs, imports it. */
+    generate() { return writeGeneratedSeed(worldConfigPath(this.root), this.root); }
     /** Whether this world has default data (`.volter/seed.ts`). */
     hasSeed() { return existsSync(worldSeedPath(this.root)); }
     /** Set up a served World this one is linked to from this world's seed: run there through its own twins, then marked. */

package/examples/customer-onboarding/README.md

@@ -13,7 +13,7 @@ You need Node 22.6+, pnpm 12.15.0, Docker Compose and registry access during ins
 Copy this starter into a new folder:
 
 ```console
-$ npx @volter/world@3.0.190 example customer-onboarding --dir onboarding
+$ npx @volter/world@3.0.192 example customer-onboarding --dir onboarding
 $ cd onboarding
 $ pnpm install
 ```

package/examples/customer-onboarding/package.json

@@ -11,13 +11,13 @@
     "pg": "8.16.3"
   },
   "devDependencies": {
-    "@volter/world": "3.0.190",
-    "@volter/world-core": "3.0.164",
-    "@volter/world-runtime": "3.0.188",
-    "@volter/world-console": "3.0.160",
+    "@volter/world": "3.0.192",
+    "@volter/world-core": "3.0.165",
+    "@volter/world-runtime": "3.0.190",
+    "@volter/world-console": "3.0.161",
     "@volter/twin-stripe": "3.0.2",
     "@volter/twin-resend": "1.0.1",
-    "@volter/world-ui": "1.0.163"
+    "@volter/world-ui": "1.0.164"
   },
   "packageManager": "pnpm@12.15.0",
   "devEngines": {

package/examples/integration-branches/README.md

@@ -13,7 +13,7 @@ Give two workers the same Stripe baseline, let them change different existing cu
 Use an empty parent folder. Create the baseline starter there:
 
 ```console
-$ npx @volter/world@3.0.190 example integration-branches --dir baseline
+$ npx @volter/world@3.0.192 example integration-branches --dir baseline
 $ cd baseline
 $ pnpm install
 $ ./node_modules/.bin/volter world init --name baseline --twins stripe
@@ -38,9 +38,9 @@ The stopped baseline retains its history and can supply local path remotes. Defa
 Create three more copies in the same parent folder:
 
 ```console
-$ npx @volter/world@3.0.190 example integration-branches --dir integration
-$ npx @volter/world@3.0.190 example integration-branches --dir worker-a
-$ npx @volter/world@3.0.190 example integration-branches --dir worker-b
+$ npx @volter/world@3.0.192 example integration-branches --dir integration
+$ npx @volter/world@3.0.192 example integration-branches --dir worker-a
+$ npx @volter/world@3.0.192 example integration-branches --dir worker-b
 ```
 
 In `integration`, then `worker-a`, then `worker-b`, install dependencies and initialize with the folder's name. Before a first boot or app write, link and pull the baseline:

package/examples/integration-branches/package.json

@@ -9,12 +9,12 @@
     "stripe": "17.7.0"
   },
   "devDependencies": {
-    "@volter/world": "3.0.190",
-    "@volter/world-core": "3.0.164",
-    "@volter/world-runtime": "3.0.188",
-    "@volter/world-console": "3.0.160",
+    "@volter/world": "3.0.192",
+    "@volter/world-core": "3.0.165",
+    "@volter/world-runtime": "3.0.190",
+    "@volter/world-console": "3.0.161",
     "@volter/twin-stripe": "3.0.2",
-    "@volter/world-ui": "1.0.163"
+    "@volter/world-ui": "1.0.164"
   },
   "packageManager": "pnpm@12.15.0",
   "devEngines": {

package/examples/workplace-agent/README.md

@@ -19,7 +19,7 @@ The catalog offers current defaults. Keep this example's manifest and installati
 together; its recorded workflow does not establish behavior for a different release.
 
 ```console
-$ npx @volter/world@3.0.190 example workplace-agent --dir workplace
+$ npx @volter/world@3.0.192 example workplace-agent --dir workplace
 $ cd workplace
 $ pnpm install
 $ ./node_modules/.bin/volter world init --name workplace --twins github,linear,slack

package/examples/workplace-agent/package.json

@@ -11,14 +11,14 @@
     "@slack/web-api": "7.19.0"
   },
   "devDependencies": {
-    "@volter/world": "3.0.190",
-    "@volter/world-core": "3.0.164",
-    "@volter/world-runtime": "3.0.188",
-    "@volter/world-console": "3.0.160",
+    "@volter/world": "3.0.192",
+    "@volter/world-core": "3.0.165",
+    "@volter/world-runtime": "3.0.190",
+    "@volter/world-console": "3.0.161",
     "@volter/twin-github": "3.0.9",
     "@volter/twin-linear": "3.0.5",
     "@volter/twin-slack": "3.0.8",
-    "@volter/world-ui": "1.0.163"
+    "@volter/world-ui": "1.0.164"
   },
   "packageManager": "pnpm@12.15.0",
   "devEngines": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/world",
-  "version": "3.0.190",
+  "version": "3.0.192",
   "description": "Run your app against a world of twins. `World` and `Repo` — one method per verb: init, up, run, log, diff, reset, branch, checkout, clone, fetch, changeset, push — and the `volter` command, one client of them.",
   "keywords": [
     "volter",
@@ -31,20 +31,25 @@
   ],
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.30.1",
-    "@volter/world-core": "3.0.164",
-    "@volter/world-runtime": "3.0.188",
+    "@volter/world-core": "3.0.165",
+    "@volter/world-runtime": "3.0.190",
     "zod": "^4.6.5"
   },
   "peerDependencies": {
-    "@volter/world-console": "3.0.160"
+    "@volter/world-console": "3.0.161",
+    "playwright": "^1.63.0"
   },
   "peerDependenciesMeta": {
     "@volter/world-console": {
       "optional": true
+    },
+    "playwright": {
+      "optional": true
     }
   },
   "devDependencies": {
-    "@volter/world-console": "3.0.160"
+    "@volter/twin-anthropic": "1.0.6",
+    "@volter/world-console": "3.0.161"
   },
   "bin": {
     "volter": "dist/src/cli.js"

package/src/cli.ts

@@ -16,6 +16,7 @@ import { forgetPlatform, forgetToken, platformOrigin, storePlatform, storeToken,
 import { parseOriginUrl, World } from './world.ts';
 import { copyExample, examples } from './examples.ts';
 import { waitForServeShutdown } from './serve-shutdown.ts';
+import { openWorldBrowser } from './world-browser.ts';
 import { currentVersion, startUpdateCheck } from './update-notice.ts';
 import type { ViewConsole } from '@volter/world-runtime';
 import { withoutVaultSignIn } from '@volter/world-runtime';
@@ -47,6 +48,8 @@ world  — a shared simulated internet (the world of the current directory)
   volter world status                                    world, branch, origin, unpushed changes, what is running
   volter world log [--receipts] [--json]                 every write the app made; --receipts adds each change's receipt
   volter world diff [--json]                             what changed since the default data (or the last mark)
+  volter world generate                                  write seed.generated.ts from world.json's people, organizations and accounts
+  volter world browser <name> [url] [--cdp <endpoint>]   open a person's saved World browser, signed in, through the running World (--cdp loads its cookies into a browser already open)
   volter world seed                                      load the default data
   volter world reset                                     back to the default data
   volter world down [--purge]                            stop the twins (--purge forgets this branch's state)
@@ -114,7 +117,7 @@ function positionals(args: string[], valueFlags: string[]): string[] {
   return out;
 }
 function afterDashes(args: string[]): string[] { const i = args.indexOf('--'); return i < 0 ? [] : args.slice(i + 1); }
-const VALUE_FLAGS = ['--world', '--branch', '--name', '--token', '--admin-token', '-m', '--message', '--base', '--org', '--vendors', '--into', '--deploy', '--as', '--note', '--port', '--twins', '--source', '--host', '--origin', '--remote', '--dir', '--scope', '--refresh', '--at-most', '--at', '--template', '--output-root', '--app', '--app-url', '--template-out'];
+const VALUE_FLAGS = ['--world', '--branch', '--name', '--token', '--admin-token', '-m', '--message', '--base', '--org', '--vendors', '--into', '--deploy', '--as', '--note', '--port', '--twins', '--source', '--host', '--origin', '--remote', '--dir', '--scope', '--refresh', '--at-most', '--at', '--template', '--output-root', '--app', '--app-url', '--template-out', '--cdp'];
 
 /** Help is resolved before opening a World; the child after `run --` owns its own flags. */
 function wantsHelp(noun: string | undefined, verb: string | undefined, args: string[]): boolean {
@@ -281,6 +284,18 @@ async function worldCommand(verb: string, args: string[]): Promise<void> {
       for (const v of delta.vendors) out(`  ${v.service}: ${v.count} change${v.count === 1 ? '' : 's'}`);
       return;
     }
+    case 'browser': {
+      const [name, url] = pos;
+      if (!name) throw new Error('volter world browser <name> [url] [--cdp <endpoint>]');
+      await openWorldBrowser(world, name, url, value(args, '--cdp'), out);
+      return;
+    }
+    case 'generate': {
+      const r = world.generate();
+      out(`${r.changed ? 'wrote' : 'unchanged'}  ${relative(process.cwd(), r.path) || r.path}`);
+      if (!r.imported) out('note   seed.ts beside it does not import ./seed.generated.ts, and the World runs only seed.ts');
+      return;
+    }
     case 'seed': {
       const r = await world.seed();
       out(`Loaded the default data into ${r.world}: ${Object.entries(r.observed).map(([s, n]) => `${s} ${n}`).join(', ') || 'nothing recorded'}`);
@@ -529,7 +544,7 @@ async function twinCommand(args: string[]): Promise<void> {
     if (t.root) out(t.ingest ? `${vendor}  ingest ${t.ingest}  (register it at the vendor as the webhook URL, with the signing secret sealed with the credential)` : `${vendor}  ingest: a served World's door (volter world serve, or a remote) is the webhook URL to register at the vendor`);
     return;
   }
-  const dir = resolveCatalog(process.cwd()).packDir(vendor);
+  const dir = resolveCatalog(process.cwd(), { vendors: [vendor] }).packDir(vendor);
   if (dir === undefined) throw new Error(`No twin "${vendor}" here — \`pnpm add -D --package-import-method=hardlink --config.nodeLinker=hoisted @volter/twin-${vendor}\`, or run from a checkout that has it`);
   if (rest.length === 0 || rest[0]!.startsWith('-')) throw new Error(`volter twin ${vendor}: which verb? serve | root | credential | refresh`);
   const cli = packCli(dir); if (cli === undefined) throw new Error(`No cli for twin "${vendor}" (its manifest names no bin)`);

package/src/handlers-in-repo.test.ts

@@ -8,7 +8,7 @@ import { afterAll, describe, expect, test } from 'bun:test';
 import { copyFileSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, symlinkSync, writeFileSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
-import { PACKS } from '../../../scripts/pack-dir.ts';
+import { installedPackageDir } from '@volter/world-core/runtime-state';
 import { World } from './index.ts';
 
 function app(): string {
@@ -19,9 +19,11 @@ function app(): string {
   writeFileSync(join(dir, '.env.example'), 'ANTHROPIC_API_KEY=\n');
   const installed = join(parent, 'node_modules', '@volter', 'twin-anthropic');
   mkdirSync(installed, { recursive: true });
-  for (const entry of readdirSync(join(PACKS, 'anthropic'))) {
-    if (entry === 'package.json') copyFileSync(join(PACKS, 'anthropic', entry), join(installed, entry));
-    else symlinkSync(join(PACKS, 'anthropic', entry), join(installed, entry));
+  // the published pack, this package's dev dependency (ADR 0034, decision 6)
+  const pack = installedPackageDir(import.meta.dir, '@volter/twin-anthropic')!;
+  for (const entry of readdirSync(pack)) {
+    if (entry === 'package.json') copyFileSync(join(pack, entry), join(installed, entry));
+    else symlinkSync(join(pack, entry), join(installed, entry));
   }
   return dir;
 }

package/src/init-selection.test.ts

@@ -11,6 +11,14 @@ import { StdioClientTransport } from '@modelcontextprotocol/sdk/client/stdio.js'
 
 const roots: string[] = [];
 afterEach(() => { for (const root of roots.splice(0)) rmSync(root, { recursive: true, force: true }); });
+/** Each fixture vendor's own facts, as its release carries them (ADR 0034, decisions 2 and 6): Protocol 3, the SDK and
+ *  env stem the app betrays it by, and the host its injector key serves. */
+const FACTS: Record<string, unknown> = {
+  stripe: { protocol: { declared: '3', major: 3, standing: 'current' }, adoption: { sdks: ['stripe'], envStems: ['STRIPE'] }, hosts: [{ host: 'api.stripe.com' }] },
+  slack: { protocol: { declared: '3', major: 3, standing: 'current' }, adoption: { sdks: ['@slack/web-api'], envStems: ['SLACK'] }, hosts: [{ host: 'slack.com' }] },
+};
+/** An app calling Stripe and Slack, the named publisher fixtures installed, each with its own facts, and a catalog index
+ *  whose captured releases (one publisher per vendor) let discovery see a vendor the selection leaves out. */
 function app(packages = ['@one/twin-stripe']): string {
   const root = mkdtempSync(join(tmpdir(), 'world-init-selection-')); roots.push(root);
   writeFileSync(join(root, 'package.json'), JSON.stringify({ name: 'selection-app', private: true, dependencies: { stripe: '17.7.0', '@slack/web-api': '7.9.2' } }));
@@ -18,9 +26,21 @@ function app(packages = ['@one/twin-stripe']): string {
   for (const name of packages) {
     const dir = join(root, 'node_modules', name);
     mkdirSync(join(dir, 'src', 'generated'), { recursive: true });
+    mkdirSync(join(dir, 'generated'), { recursive: true });
     writeFileSync(join(dir, 'package.json'), JSON.stringify({ name, version: name.startsWith('@one/') ? '1.0.0' : '9.0.0' }));
     writeFileSync(join(dir, 'src', 'cli.ts'), '// Discovery fixture: never executed.\n');
     writeFileSync(join(dir, 'src', 'generated', 'surface.gen.json'), '{}\n');
+    const vendor = /twin-([a-z]+)$/.exec(name)?.[1];
+    if (vendor) writeFileSync(join(dir, 'generated', 'pack-facts.json'), JSON.stringify({ packs: { [vendor]: FACTS[vendor] } }));
+  }
+  const index = join(root, 'node_modules', '@volter', 'twin-catalog');
+  mkdirSync(join(index, 'vendors'), { recursive: true }); mkdirSync(join(index, 'content'), { recursive: true });
+  writeFileSync(join(index, 'package.json'), JSON.stringify({ name: '@volter/twin-catalog', version: '0.0.0' }));
+  writeFileSync(join(index, 'sources.json'), JSON.stringify([{ name: 'one', scope: '@one', repository: 'one/twins', protocol: '3' }]));
+  for (const vendor of Object.keys(FACTS)) {
+    const release = { vendor, package: `@one/twin-${vendor}`, version: '1.0.0' };
+    writeFileSync(join(index, 'vendors', `${vendor}.json`), JSON.stringify({ vendor, packages: [{ name: release.package, source: 'one', versions: [{ version: '1.0.0', status: 'live' }] }] }));
+    writeFileSync(join(index, 'content', `${vendor}.json`), JSON.stringify({ schemaVersion: 1, release, facts: FACTS[vendor] }));
   }
   return root;
 }
@@ -70,9 +90,9 @@ test('SDK initialization exposes the same vendor and publisher choice', () => {
 test('an independent package name gets vendor identity from its published facts', () => {
   const root = app(['@one/twin-stripe', '@two/stripe-simulator']);
   const dir = join(root, 'node_modules', '@two', 'stripe-simulator', 'generated');
-  mkdirSync(dir);
-  const facts = JSON.parse(readFileSync(join(import.meta.dir, '../../world-core/generated/pack-facts.json'), 'utf8'));
-  writeFileSync(join(dir, 'pack-facts.json'), JSON.stringify({ packs: { stripe: facts.packs.stripe } }));
+  mkdirSync(dir, { recursive: true });
+  // the independently named publisher's own facts name its vendor (ADR 0034, decision 6)
+  writeFileSync(join(dir, 'pack-facts.json'), JSON.stringify({ packs: { stripe: FACTS.stripe } }));
   const result = init(root, '--twins', 'stripe', '--source', 'stripe=@two/stripe-simulator');
   expect(result.status).toBe(0);
   expect(document(root).services[0].source.package).toBe('@two/stripe-simulator');

package/src/journeys/kit.ts

@@ -1,4 +1,4 @@
-// What the tutorial runner and the docs' recorder share: where the commands and the twins are.
+// What the tutorial runner and the docs' recorder share: where the commands are.
 // A tutorial page is its own journey (tutorial.ts); nothing here runs a step of its own.
 import { resolve } from 'node:path';
 
@@ -6,7 +6,5 @@ import { resolve } from 'node:path';
 export const CLI = resolve(import.meta.dir, '..', 'cli.ts');
 /** The operator's `volter-world` command, which ships with @volter/world-runtime. */
 export const OPERATOR_CLI = resolve(import.meta.dir, '..', '..', '..', 'world-runtime', 'src', 'cli.ts');
-/** The twins: the pack repository beside this or the main checkout. */
-export { PACKS } from '../../../../scripts/pack-dir.ts';
 /** @volter/world itself. */
 export const SDK = resolve(import.meta.dir, '..', '..');

package/src/journeys/tutorial.ts

@@ -22,8 +22,8 @@ import { downWorld } from '@volter/world-runtime';
 import { tmpdir } from 'node:os';
 import { basename, delimiter, dirname, join, resolve } from 'node:path';
 import { randomUUID } from 'node:crypto';
-import { CLI, OPERATOR_CLI, PACKS, SDK } from './kit.ts';
-void CLI; void OPERATOR_CLI; void PACKS; void SDK;
+import { CLI, OPERATOR_CLI, SDK } from './kit.ts';
+void CLI; void OPERATOR_CLI; void SDK;
 
 export type Step =
   | { kind: 'file'; path: string; content: string; line: number }

package/src/world-browser.ts

@@ -0,0 +1,37 @@
+// `volter world browser <name> [url] [--cdp <endpoint>]`: a person's saved World browser opened in a real browser
+// (ADR 0016, rows 3 and 4). The profile is read through the World's own record reader and the browser is routed through
+// the World's proxy with its CA trusted, as attach publishes them. Nothing is written back to the World.
+import { deriveWorldManifest, statusWorld, worldBrowser, worldBrowsers } from '@volter/world-runtime';
+
+export async function openWorldBrowser(world: { name: string; root: string }, name: string, url: string | undefined, cdp: string | undefined, say: (line: string) => void): Promise<void> {
+  const instance = statusWorld(world.name, world.root);
+  const record = worldBrowser(instance.dirs.data, name);
+  if (!record) {
+    const names = worldBrowsers(instance.dirs.data).map(row => row.name);
+    throw new Error(`World "${world.name}" has no browser "${name}" (has: ${names.join(', ') || 'none'})`);
+  }
+  const manifest = deriveWorldManifest(world.name, instance.env ?? {});
+  if (!instance.running || !manifest.browser) throw new Error('the World is not running, so it has no proxy to route a browser through: start it with `volter world up`');
+  let chromium: typeof import('playwright').chromium;
+  try { ({ chromium } = await import('playwright')); }
+  catch { throw new Error('volter world browser needs playwright: npm i playwright'); }
+  const profile = record.state;
+  if (cdp === undefined) {
+    const browser = await chromium.launch({ headless: false, args: manifest.browser.args });
+    const closed = new Promise<void>(resolve => browser.on('disconnected', () => resolve()));
+    const context = await browser.newContext({ ...profile.context, storageState: profile.storageState } as Parameters<typeof browser.newContext>[0]);
+    const page = await context.newPage();
+    await page.goto(url ?? 'about:blank');
+    await closed;
+    return;
+  }
+  const browser = await chromium.connectOverCDP(cdp);
+  const context = browser.contexts()[0];
+  if (!context) throw new Error(`${cdp} has no default browser context to load ${name}'s cookies into`);
+  // An existing default context takes no context options (ADR 0016): its cookies are what is loaded.
+  if (Object.keys(profile.context).length) say(`note   ${name}'s context options (${Object.keys(profile.context).join(', ')}) were not applied: an existing browser's default context takes none`);
+  await context.addCookies(profile.storageState.cookies as Parameters<typeof context.addCookies>[0]);
+  const page = await context.newPage();
+  await page.goto(url ?? 'about:blank');
+  await browser.close();
+}

package/src/world.ts

@@ -9,7 +9,7 @@ import { spawnSync } from 'node:child_process';
 import clockForm from '@volter/world-core/world-clock';
 import {
   activateScript, approveWorldChangeset, branchWorld, clockFile, checkoutWorld, createWorldChangeset, diffWorld, downWorld, fetchFromOrigin, findWorldChangeset, initWorld, listWorldChangesets, listWorldMarks, listWorlds, markWorld, pushWorldChangeset, rebaseWorldChangeset, replayWorldChangeset, resetWorld, runWithWorldEnv, seedServedWorld, seedWorld, shellWorld,
-  materializeBrowserFiles, statusWorld, statusWorldChangeset, upWorld, verifyWorldChangeset, worldLedgers, worldOrigin,
+  materializeBrowserFiles, statusWorld, writeGeneratedSeed, statusWorldChangeset, upWorld, verifyWorldChangeset, worldLedgers, worldOrigin,
   bindLegacyCredentials, deployWorld, loadWorldConfig, writeWorldConfig, readServeRecord, refreshTwin, serveWorld, serveWorldView, findInstalledPackage, type ServedWorld, type ViewConsole, type WorldView, rootForControlRoot, sealTwinCredential, sealedCredentialInfo, setTwinRoot, credentialPayloadFrom, rootCredentialInput, withoutVaultSignIn,
   type DeployTwinOutcome, type MaterializedRoot,
   type ChangesetLocation, type InitOptions, type InitResult, type WorldInstance, materializeRoots, instanceDir, worldChangesetRules } from '@volter/world-runtime';
@@ -241,6 +241,9 @@ export class World {
   // ── default data ────────────────────────────────────────────────────────────────────────
   /** Load the default data: the seed runs with every twin recording what it creates as data that was already there. */
   seed(opts: { entry?: string; cwd?: string } = {}): ReturnType<typeof seedWorld> { return seedWorld(this.name, { root: this.root, cwd: this.root, ...opts }); }
+  /** Write `seed.generated.ts` beside world.json from the people, organizations and accounts it declares (ADR 0033), as a
+   *  lockfile is written from its manifest: whether it changed, and whether `seed.ts`, which the World runs, imports it. */
+  generate(): ReturnType<typeof writeGeneratedSeed> { return writeGeneratedSeed(worldConfigPath(this.root), this.root); }
   /** Whether this world has default data (`.volter/seed.ts`). */
   hasSeed(): boolean { return existsSync(worldSeedPath(this.root)); }
   /** Set up a served World this one is linked to from this world's seed: run there through its own twins, then marked. */