arcane-os 0.5.0 → 0.5.2

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog
 
+## 0.5.2
+
+- Forwarded each application's existing managed browser import map into
+  isolated `arcane test` and `arcane check` files so valid `arcane/*` imports
+  resolve from the selected workspace runtime while integrated-legacy apps
+  retain their established no-map path.
+
+## 0.5.1
+
+- Separated the TWiN Cloud LLM access key from the legacy OpenAI speech
+  credential so neither provider's key is sent to the other's endpoint while
+  retaining the established `ai.license` alias for TWiN Cloud chat.
+
 ## 0.5.0
 
 - Added bounded parallel Browser-WASM model downloads across split GGUF

package/README.md

@@ -19,7 +19,7 @@ version-locked SDK runtime, while an integrated Arcane checkout uses its live
 `arcane/` runtime. Both profiles preserve the same app URLs, theme, packaging,
 event, cancellation, and browser run contracts.
 
-This checkout defines the `0.5.0` SDK contract. Applications pin one exact npm
+This checkout defines the `0.5.2` SDK contract. Applications pin one exact npm
 version and lockfile; registry state is deliberately not baked into application
 artifacts.
 
@@ -88,7 +88,10 @@ OpenAI-compatible chat-completion requests to
 `globalThis.arcane.config.twinCloud.accessKey`. The established `ai.license`
 property and internal `OPENAI` route identifier remain compatibility aliases;
 applications should present the service and credential as **TWiN Cloud** and
-**TWiN access key**.
+**TWiN access key**. The TWiN key is used only for remote LLM chat. Existing
+OpenAI speech routes remain separate and read only their legacy
+`globalThis.arcane.config.openAI.apiKey`; the SDK never sends a TWiN key to
+those speech endpoints.
 
 ## Browser-local AI
 
@@ -162,7 +165,7 @@ uses the same controller for automatic memory extraction.
 Create a new repository-shaped Arcane application with the exact stable SDK:
 
 ```bash
-npx arcane-os@0.5.0 new my-app --path ./my-app --target portable --git
+npx arcane-os@0.5.2 new my-app --path ./my-app --target portable --git
 cd my-app
 npm install
 npm run check
@@ -173,7 +176,7 @@ To enroll an existing repository, install the exact SDK and initialize only
 missing Arcane files:
 
 ```bash
-npm install --save-dev --save-exact arcane-os@0.5.0
+npm install --save-dev --save-exact arcane-os@0.5.2
 npm exec -- arcane init my-app --target portable
 ```
 
@@ -189,7 +192,7 @@ npm exec -- arcane-os targets
 No global SDK install or standalone Arcane CLI is required. The application
 repository's exact npm dependency and lockfile own the CLI and toolchain version.
 
-Use `npx arcane-os@0.5.0` for the initial bootstrap because it names this npm
+Use `npx arcane-os@0.5.2` for the initial bootstrap because it names this npm
 package explicitly; bare `npx arcane` outside an installed project could resolve
 a different package. Both installed commands invoke the same headless toolchain.
 Project-local npm scripts use the SDK pinned by that app's `package-lock.json`,
@@ -210,7 +213,7 @@ node ./bin/arcane.mjs new local-app --path ../local-app --target portable --git
 
 # From the generated app repository
 cd ../local-app
-npm install --save-dev --save-exact ../arcane-os-sdk/arcane-os-0.5.0.tgz
+npm install --save-dev --save-exact ../arcane-os-sdk/arcane-os-0.5.2.tgz
 npm run check
 npm ci
 ```
@@ -220,7 +223,7 @@ same location. The lockfile retains the selected package dependency while
 Arcane uses the installed package name and version. Local directory `file:` dependencies are not
 accepted because npm may install them as links; use a packed `.tgz`. A GitHub
 runner also needs that tarball at the locked path. After publication, replace
-the local declaration with the exact `arcane-os@0.5.0` registry package and
+the local declaration with the exact `arcane-os@0.5.2` registry package and
 commit the regenerated lock.
 
 Generated repositories use `npm ci --ignore-scripts` in CI. Run dependency
@@ -358,7 +361,7 @@ package installation, or assertions.
 
 ## Current target support
 
-Version `0.5.0` exposes one browser target and five explicitly paired
+Version `0.5.2` exposes one browser target and five explicitly paired
 native development targets: a non-runnable portable directory, a
 Windows x64 unsigned-local-test EXE bundle, Linux x64 and Linux ARM64
 unsigned-local-test DEBs, and an Android development-signed APK. The

package/bin/arcane-test.mjs

@@ -81,18 +81,30 @@ async function readManagedImportMapContext(source,signal,testFile){
         :context.boundary==='test'
             ?testCodeRoot
             :path.join(applicationRoot,'dist');
-    let baseInfo;
-    let canonicalBase;
-    try{
-        baseInfo=await lstat(expectedBase);
-        canonicalBase=await realpath(expectedBase);
-    }catch(error){
-        importMapFailure(`Selected ${context.boundary} application directory is unavailable: ${error.message}`);
+    const workspaceRoot=path.resolve(process.cwd());
+    const requestedBases=context.boundary==='source'&&pathInside(workspaceRoot,applicationRoot)
+        ?[expectedBase,workspaceRoot]
+        :[expectedBase];
+    let canonicalBase=null;
+    for(const requestedBase of requestedBases){
+        let baseInfo;
+        let candidate;
+        try{
+            baseInfo=await lstat(requestedBase);
+            candidate=await realpath(requestedBase);
+        }catch{
+            continue;
+        }
+        if(!baseInfo.isSymbolicLink()&&baseInfo.isDirectory()
+            &&samePath(requestedBase,candidate)&&samePath(suppliedBase,candidate)){
+            canonicalBase=candidate;
+            break;
+        }
     }
-    if(baseInfo.isSymbolicLink()||!baseInfo.isDirectory()
-        ||!samePath(expectedBase,canonicalBase)||!samePath(suppliedBase,canonicalBase)){
+    if(canonicalBase===null){
         importMapFailure(
-            `Managed import-map base URL must select this application's physical ${context.boundary} directory.`
+            `Managed import-map base URL must select this application's physical ${context.boundary} directory`
+            +(context.boundary==='source'?' or its physical workspace source directory.':'.')
         );
     }
     throwIfCancelled(signal);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "arcane-os",
-  "version": "0.5.0",
+  "version": "0.5.2",
   "description": "Arcane OS JavaScript SDK, project-local CLI, browser runtime, and repository-portable application packager.",
   "type": "module",
   "main": "./src/index.mjs",

package/runtime/arcane/modules/AI.js

@@ -969,16 +969,21 @@ class AI {
         return {
             OPENAI: {
                 'Content-Type': 'application/json',
-                'Authorization': `Bearer ${this.license}`
+                'Authorization': `Bearer ${this.twinKey}`
             }
         };
     }
 
+    get #legacyOpenAISpeechKey(){
+        const value=globalThis.arcane?.config?.openAI?.apiKey;
+        return typeof value==='string'?value:'';
+    }
+
     get #ttsHeaders(){
         return {
             OPENAI: {
                 'Content-Type': 'application/json',
-                'Authorization': `Bearer ${this.license}`
+                'Authorization': `Bearer ${this.#legacyOpenAISpeechKey}`
             },
             LOCAL_SPEACH: {
                 'Content-Type': 'application/json',
@@ -989,7 +994,7 @@ class AI {
     get #sttHeaders(){
         return {
             OPENAI: {
-                'Authorization': `Bearer ${this.license}`,
+                'Authorization': `Bearer ${this.#legacyOpenAISpeechKey}`,
             },
             LOCAL_SPEACH: {}
         };
@@ -1160,7 +1165,6 @@ class AI {
     get twinKey(){
         return this.#license
             ||globalThis.arcane?.config?.twinCloud?.accessKey
-            ||globalThis.arcane?.config?.openAI?.apiKey
             ||'';
     }
 
@@ -1442,7 +1446,8 @@ class AI {
             return false;
         }
         if(providerId==='OPENAI'){
-            return Boolean(this.license)&&typeof globalThis.fetch==='function';
+            return Boolean(this.#legacyOpenAISpeechKey)
+                &&typeof globalThis.fetch==='function';
         }
         if(providerId==='LOCAL_SPEACH'){
             return Boolean(this.#nativeSpeech(service,role));
@@ -1870,7 +1875,11 @@ class AI {
             throw error;
         }
 
-        if(service==='OPENAI'&&this.license){
+        if(service==='OPENAI'&&(
+            role==='llm'
+                ?Boolean(this.twinKey)
+                :Boolean(this.#legacyOpenAISpeechKey)
+        )){
             return true;
         }
 

package/src/application-tests.mjs

@@ -5,6 +5,7 @@ import {ArcaneError,ERROR_CODES,throwIfAborted} from './errors.mjs';
 import {runProcess} from './process.mjs';
 
 const TEST_RUNNER_PATH=fileURLToPath(new URL('../bin/arcane-test.mjs',import.meta.url));
+const MANAGED_IMPORT_MAP_ENV='ARCANE_TEST_IMPORT_MAP_CONTEXT';
 
 function normalizedTestOutput(value){
     return typeof value==='string'?value:'';
@@ -129,6 +130,7 @@ export async function runApplicationTests({
     workspaceMode='packager',
     appId,
     appRoot,
+    managedImportMapContext=null,
     signal,
     onEvent
 }={}){
@@ -160,6 +162,11 @@ export async function runApplicationTests({
             [TEST_RUNNER_PATH,testFile],
             {
                 cwd:workspaceRoot,
+                env:{
+                    [MANAGED_IMPORT_MAP_ENV]:managedImportMapContext===null
+                        ?''
+                        :JSON.stringify(managedImportMapContext)
+                },
                 signal,
                 onEvent,
                 allowNonzero:true

package/src/import-map.mjs

@@ -1602,6 +1602,55 @@ export async function createApplicationTestImportMapContext({
     };
 }
 
+export async function readApplicationTestImportMapContext({
+    workspaceRoot,
+    applicationRoot,
+    signal
+}={}){
+    if(typeof workspaceRoot!=='string'||workspaceRoot.trim()===''){
+        throw new TypeError('workspaceRoot must be a nonempty string.');
+    }
+    if(typeof applicationRoot!=='string'||applicationRoot.trim()===''){
+        throw new TypeError('applicationRoot must be a nonempty string.');
+    }
+    throwIfAborted(signal);
+    const resolvedWorkspaceRoot=path.resolve(workspaceRoot);
+    const resolvedApplicationRoot=path.resolve(applicationRoot);
+    await physicalDirectory(resolvedWorkspaceRoot,resolvedApplicationRoot);
+    const artifactPath=path.join(
+        resolvedApplicationRoot,
+        ...IMPORT_MAP_RELATIVE_PATH.split('/')
+    );
+    let source;
+    try{
+        source=await readPhysicalTextFile(
+            resolvedApplicationRoot,
+            artifactPath,
+            'Application test import-map artifact'
+        );
+    }catch(error){
+        if(error?.code==='ENOENT')return null;
+        throw error;
+    }
+    throwIfAborted(signal);
+    let document;
+    try{document=JSON.parse(source);}
+    catch(error){
+        fail(`Application test import-map artifact is not valid JSON: ${error.message}`);
+    }
+    if(document===null||typeof document!=='object'||Array.isArray(document)
+        ||document.imports===null||typeof document.imports!=='object'
+        ||Array.isArray(document.imports)){
+        fail('Application test import-map artifact must contain an imports object.');
+    }
+    return createApplicationTestImportMapContext({
+        applicationRoot:resolvedWorkspaceRoot,
+        boundary:'source',
+        imports:document.imports,
+        signal
+    });
+}
+
 async function generateImportMapUnlocked({
     workspaceRoot,
     appId,

package/src/toolchain.mjs

@@ -10,7 +10,7 @@ import {
 } from './workspace.mjs';
 import {loadArcaneIntegratedProvider} from './integrated-provider-loader.mjs';
 import {startDevServer} from './dev-server.mjs';
-import {generateImportMap} from './import-map.mjs';
+import {generateImportMap,readApplicationTestImportMapContext} from './import-map.mjs';
 import {withWorkspaceOperationLock} from './workspace-operation-lock.mjs';
 import {
     inspectApp as inspectPackagedApp,
@@ -389,11 +389,21 @@ export async function doctorApplication(options={}){
 
 async function runPreparedApplicationTests(prepared,options={}){
     throwIfAborted(options.signal);
+    const integratedLegacy=prepared.workspaceMode==='integrated'
+        &&prepared.validation.config.browserRuntimeLayout==='integrated-legacy';
+    const managedImportMapContext=integratedLegacy
+        ?null
+        :await readApplicationTestImportMapContext({
+            workspaceRoot:prepared.workspaceRoot,
+            applicationRoot:prepared.appRoot,
+            signal:options.signal
+        });
     return runApplicationTests({
         workspaceRoot:prepared.workspaceRoot,
         workspaceMode:prepared.workspaceMode,
         appId:prepared.appId,
         appRoot:prepared.appRoot,
+        managedImportMapContext,
         signal:options.signal,
         onEvent:options.onEvent
     });