arcane-os 0.5.0 → 0.5.1

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.5.1
+
+- Separated the TWiN Cloud LLM access key from the legacy OpenAI speech
+  credential so neither provider's key is sent to the other's endpoint while
+  retaining the established `ai.license` alias for TWiN Cloud chat.
+
 ## 0.5.0
 
 - Added bounded parallel Browser-WASM model downloads across split GGUF

package/README.md

@@ -19,7 +19,7 @@ version-locked SDK runtime, while an integrated Arcane checkout uses its live
 `arcane/` runtime. Both profiles preserve the same app URLs, theme, packaging,
 event, cancellation, and browser run contracts.
 
-This checkout defines the `0.5.0` SDK contract. Applications pin one exact npm
+This checkout defines the `0.5.1` SDK contract. Applications pin one exact npm
 version and lockfile; registry state is deliberately not baked into application
 artifacts.
 
@@ -88,7 +88,10 @@ OpenAI-compatible chat-completion requests to
 `globalThis.arcane.config.twinCloud.accessKey`. The established `ai.license`
 property and internal `OPENAI` route identifier remain compatibility aliases;
 applications should present the service and credential as **TWiN Cloud** and
-**TWiN access key**.
+**TWiN access key**. The TWiN key is used only for remote LLM chat. Existing
+OpenAI speech routes remain separate and read only their legacy
+`globalThis.arcane.config.openAI.apiKey`; the SDK never sends a TWiN key to
+those speech endpoints.
 
 ## Browser-local AI
 
@@ -162,7 +165,7 @@ uses the same controller for automatic memory extraction.
 Create a new repository-shaped Arcane application with the exact stable SDK:
 
 ```bash
-npx arcane-os@0.5.0 new my-app --path ./my-app --target portable --git
+npx arcane-os@0.5.1 new my-app --path ./my-app --target portable --git
 cd my-app
 npm install
 npm run check
@@ -173,7 +176,7 @@ To enroll an existing repository, install the exact SDK and initialize only
 missing Arcane files:
 
 ```bash
-npm install --save-dev --save-exact arcane-os@0.5.0
+npm install --save-dev --save-exact arcane-os@0.5.1
 npm exec -- arcane init my-app --target portable
 ```
 
@@ -189,7 +192,7 @@ npm exec -- arcane-os targets
 No global SDK install or standalone Arcane CLI is required. The application
 repository's exact npm dependency and lockfile own the CLI and toolchain version.
 
-Use `npx arcane-os@0.5.0` for the initial bootstrap because it names this npm
+Use `npx arcane-os@0.5.1` for the initial bootstrap because it names this npm
 package explicitly; bare `npx arcane` outside an installed project could resolve
 a different package. Both installed commands invoke the same headless toolchain.
 Project-local npm scripts use the SDK pinned by that app's `package-lock.json`,
@@ -210,7 +213,7 @@ node ./bin/arcane.mjs new local-app --path ../local-app --target portable --git
 
 # From the generated app repository
 cd ../local-app
-npm install --save-dev --save-exact ../arcane-os-sdk/arcane-os-0.5.0.tgz
+npm install --save-dev --save-exact ../arcane-os-sdk/arcane-os-0.5.1.tgz
 npm run check
 npm ci
 ```
@@ -220,7 +223,7 @@ same location. The lockfile retains the selected package dependency while
 Arcane uses the installed package name and version. Local directory `file:` dependencies are not
 accepted because npm may install them as links; use a packed `.tgz`. A GitHub
 runner also needs that tarball at the locked path. After publication, replace
-the local declaration with the exact `arcane-os@0.5.0` registry package and
+the local declaration with the exact `arcane-os@0.5.1` registry package and
 commit the regenerated lock.
 
 Generated repositories use `npm ci --ignore-scripts` in CI. Run dependency
@@ -358,7 +361,7 @@ package installation, or assertions.
 
 ## Current target support
 
-Version `0.5.0` exposes one browser target and five explicitly paired
+Version `0.5.1` exposes one browser target and five explicitly paired
 native development targets: a non-runnable portable directory, a
 Windows x64 unsigned-local-test EXE bundle, Linux x64 and Linux ARM64
 unsigned-local-test DEBs, and an Android development-signed APK. The

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "arcane-os",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "description": "Arcane OS JavaScript SDK, project-local CLI, browser runtime, and repository-portable application packager.",
   "type": "module",
   "main": "./src/index.mjs",

package/runtime/arcane/modules/AI.js

@@ -969,16 +969,21 @@ class AI {
         return {
             OPENAI: {
                 'Content-Type': 'application/json',
-                'Authorization': `Bearer ${this.license}`
+                'Authorization': `Bearer ${this.twinKey}`
             }
         };
     }
 
+    get #legacyOpenAISpeechKey(){
+        const value=globalThis.arcane?.config?.openAI?.apiKey;
+        return typeof value==='string'?value:'';
+    }
+
     get #ttsHeaders(){
         return {
             OPENAI: {
                 'Content-Type': 'application/json',
-                'Authorization': `Bearer ${this.license}`
+                'Authorization': `Bearer ${this.#legacyOpenAISpeechKey}`
             },
             LOCAL_SPEACH: {
                 'Content-Type': 'application/json',
@@ -989,7 +994,7 @@ class AI {
     get #sttHeaders(){
         return {
             OPENAI: {
-                'Authorization': `Bearer ${this.license}`,
+                'Authorization': `Bearer ${this.#legacyOpenAISpeechKey}`,
             },
             LOCAL_SPEACH: {}
         };
@@ -1160,7 +1165,6 @@ class AI {
     get twinKey(){
         return this.#license
             ||globalThis.arcane?.config?.twinCloud?.accessKey
-            ||globalThis.arcane?.config?.openAI?.apiKey
             ||'';
     }
 
@@ -1442,7 +1446,8 @@ class AI {
             return false;
         }
         if(providerId==='OPENAI'){
-            return Boolean(this.license)&&typeof globalThis.fetch==='function';
+            return Boolean(this.#legacyOpenAISpeechKey)
+                &&typeof globalThis.fetch==='function';
         }
         if(providerId==='LOCAL_SPEACH'){
             return Boolean(this.#nativeSpeech(service,role));
@@ -1870,7 +1875,11 @@ class AI {
             throw error;
         }
 
-        if(service==='OPENAI'&&this.license){
+        if(service==='OPENAI'&&(
+            role==='llm'
+                ?Boolean(this.twinKey)
+                :Boolean(this.#legacyOpenAISpeechKey)
+        )){
             return true;
         }