@volter/world-console 2.0.0

package/dist/src/console.d.ts

@@ -0,0 +1,22 @@
+export type ConsoleMount = {
+    /** `worlds`: the origin the Worlds are served at, when the console has an origin of its own; `names`: the
+     *  Worlds (`<org>/<world>`) a World token may open there, for a host that does not list its Worlds (a hosted one). */
+    handle: (request: Request, base: string, opts?: {
+        worlds?: string;
+        names?: string[];
+    }) => Promise<Response | null>;
+    /** Serve the shell with a session already in it — the platform's portal (managed mode). */
+    /** `scripts`: HTML the mount puts before the app script — the platform's identity keep-alive rides here. */
+    shell: (base: string, opts: {
+        token: string;
+        managed: boolean;
+        scripts?: string;
+    }) => Response;
+};
+/** The client, built once per process and kept (bundleClient: Bun.build under Bun, the prebuilt
+ *  dist/client/console.bundle.js under Node, written by this package's build). */
+export declare function buildConsoleClient(): Promise<string>;
+/** The console as a host mounts it: `handle(request, '/-/console')` answers the shell at `base/`,
+ *  the bundle at `base/app.js`, the styles at `base/styles.css` over the brand's at `base/brand/`, and the shell again for any deeper
+ *  path (the client routes by path: `base/<org>/<world>`), or null for a path outside `base`. */
+export declare function createConsole(): ConsoleMount;

package/dist/src/console.js

@@ -0,0 +1,57 @@
+// THE CONSOLE (apps/console/README.md, 2026-09-06): the one UI of Volter World, a PURE
+// FRONTEND the way a pack's mirror is — a React client bundled by `Bun.build` at serve time behind
+// one app shell, with no data path of its own. Every read and every write the console makes is a
+// door of the host or of a world, called from the browser with the token the person typed. The
+// host mounts it at `/-/console/` (the same origin as the doors: one origin, one token, no CORS);
+// the platform serves the same client later. This module is the shell and its assets; `handle`
+// answers a request under `base` or returns null when the path is not the console's.
+import { brandTokensResponse, bundleClient, fileResponse } from '@volter/world-core';
+const CLIENT_ENTRY = () => new URL('../client/console.tsx', import.meta.url).pathname; // lazy: never a top-level import.meta.url URL (workerd)
+const CLIENT_CSS = () => new URL('../client/console.css', import.meta.url).pathname;
+/** The brand's tokens and faces (company decision 0018), fetched at build into client/brand/ (gitignored). */
+const BRAND_DIR = () => new URL('../client/brand', import.meta.url).pathname;
+// The shell carries the base, and optionally a session and the managed flag: a host mounts the
+// console with neither (the person types a token); the platform serves it with a session token
+// (skip the sign-in) and `managed` set (a world opens on its own host, never proxied through here).
+const attr = (v) => v.replace(/&/g, '&amp;').replace(/"/g, '&quot;').replace(/</g, '&lt;');
+/** Volter World's mark, served by the brand (brand.volter.ai): the favicon. */
+const WORLD_LOGO = 'https://brand.volter.ai/logo/twin-world/svg?size=64&variant=mono';
+const SHELL = (base, opts = {}) => `<!doctype html>
+<html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
+<title>Volter World</title><link rel="icon" type="image/svg+xml" href="${WORLD_LOGO}"><link rel="stylesheet" href="${base}/brand/tokens.css"><link rel="stylesheet" href="${base}/styles.css"></head>
+<body><div id="root" data-base="${base}"${opts.worlds ? ` data-worlds="${attr(opts.worlds)}"` : ''}${opts.names?.length ? ` data-names="${attr(opts.names.join(','))}"` : ''}${opts.token ? ` data-token="${attr(opts.token)}"` : ''}${opts.managed ? ' data-managed="1"' : ''}></div>${opts.scripts ?? ''}<script type="module" src="${base}/app.js"></script></body></html>`;
+/** The client, built once per process and kept (bundleClient: Bun.build under Bun, the prebuilt
+ *  dist/client/console.bundle.js under Node, written by this package's build). */
+export function buildConsoleClient() { return bundleClient(CLIENT_ENTRY()); }
+/** The console as a host mounts it: `handle(request, '/-/console')` answers the shell at `base/`,
+ *  the bundle at `base/app.js`, the styles at `base/styles.css` over the brand's at `base/brand/`, and the shell again for any deeper
+ *  path (the client routes by path: `base/<org>/<world>`), or null for a path outside `base`. */
+export function createConsole() {
+    return {
+        async handle(request, base, opts = {}) {
+            const path = new URL(request.url).pathname;
+            if (path !== base && !path.startsWith(`${base}/`))
+                return null;
+            if (request.method !== 'GET' && request.method !== 'HEAD')
+                return null;
+            if (path === `${base}/app.js`) {
+                try {
+                    return new Response(await buildConsoleClient(), { headers: { 'content-type': 'text/javascript; charset=utf-8', 'cache-control': 'no-cache' } });
+                }
+                catch (error) {
+                    return new Response(String(error), { status: 500 });
+                }
+            }
+            if (path === `${base}/styles.css`)
+                return fileResponse(CLIENT_CSS());
+            if (path.startsWith(`${base}/brand/`))
+                return brandTokensResponse(BRAND_DIR(), path.slice(`${base}/brand/`.length));
+            if (path === base)
+                return Response.redirect(`${base}/`, 302);
+            return new Response(SHELL(base, { ...(opts.worlds ? { worlds: opts.worlds } : {}), ...(opts.names?.length ? { names: opts.names } : {}) }), { headers: { 'content-type': 'text/html; charset=utf-8', 'cache-control': 'no-cache' } });
+        },
+        shell(base, opts) {
+            return new Response(SHELL(base, opts), { headers: { 'content-type': 'text/html; charset=utf-8', 'cache-control': 'no-cache' } });
+        },
+    };
+}

package/package.json

@@ -0,0 +1,53 @@
+{
+  "name": "@volter/world-console",
+  "version": "2.0.0",
+  "description": "The console of Volter World: one UI for a world in both modes — self-hosted, mounted by the host at /-/console/; managed, served by the platform. A pure frontend over the world's own doors.",
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/src/console.d.ts",
+      "default": "./dist/src/console.js"
+    }
+  },
+  "scripts": {
+    "test": "bun test src/*.uitest.ts",
+    "typecheck": "tsc --noEmit",
+    "build": "bun ../../scripts/brand-tokens.ts client/brand && node ../../scripts/publish/build.mjs",
+    "prepack": "bun ../../scripts/brand-tokens.ts client/brand && node ../../scripts/publish/prepare-publish.mjs prepack",
+    "postpack": "node ../../scripts/publish/prepare-publish.mjs postpack"
+  },
+  "dependencies": {
+    "react": "^19.2.7",
+    "react-dom": "^19.2.7"
+  },
+  "devDependencies": {
+    "@volter/world-host": "2.0.0",
+    "@volter/world-runtime": "2.0.0",
+    "@volter/world-tooling": "0.1.0",
+    "@types/bun": "^1.2.20",
+    "@types/node": "^24.0.0",
+    "@types/react": "^19.2.7",
+    "@types/react-dom": "^19.2.7",
+    "playwright": "^1.61.0",
+    "typescript": "^5.9.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "license": "Apache-2.0",
+  "files": [
+    "src",
+    "client",
+    "README.md",
+    "LICENSE",
+    "!**/*.test.ts",
+    "!**/*.uitest.ts",
+    "!census.json",
+    "dist"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/volter-ai/world.git",
+    "directory": "apps/console"
+  }
+}

package/src/console.ts

@@ -0,0 +1,61 @@
+// THE CONSOLE (apps/console/README.md, 2026-09-06): the one UI of Volter World, a PURE
+// FRONTEND the way a pack's mirror is — a React client bundled by `Bun.build` at serve time behind
+// one app shell, with no data path of its own. Every read and every write the console makes is a
+// door of the host or of a world, called from the browser with the token the person typed. The
+// host mounts it at `/-/console/` (the same origin as the doors: one origin, one token, no CORS);
+// the platform serves the same client later. This module is the shell and its assets; `handle`
+// answers a request under `base` or returns null when the path is not the console's.
+
+import { brandTokensResponse, bundleClient, fileResponse } from '@volter/world-core';
+const CLIENT_ENTRY = () => new URL('../client/console.tsx', import.meta.url).pathname; // lazy: never a top-level import.meta.url URL (workerd)
+const CLIENT_CSS = () => new URL('../client/console.css', import.meta.url).pathname;
+/** The brand's tokens and faces (company decision 0018), fetched at build into client/brand/ (gitignored). */
+const BRAND_DIR = () => new URL('../client/brand', import.meta.url).pathname;
+
+// The shell carries the base, and optionally a session and the managed flag: a host mounts the
+// console with neither (the person types a token); the platform serves it with a session token
+// (skip the sign-in) and `managed` set (a world opens on its own host, never proxied through here).
+const attr = (v: string): string => v.replace(/&/g, '&amp;').replace(/"/g, '&quot;').replace(/</g, '&lt;');
+/** Volter World's mark, served by the brand (brand.volter.ai): the favicon. */
+const WORLD_LOGO = 'https://brand.volter.ai/logo/twin-world/svg?size=64&variant=mono';
+const SHELL = (base: string, opts: { token?: string; managed?: boolean; scripts?: string; worlds?: string; names?: string[] } = {}): string => `<!doctype html>
+<html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
+<title>Volter World</title><link rel="icon" type="image/svg+xml" href="${WORLD_LOGO}"><link rel="stylesheet" href="${base}/brand/tokens.css"><link rel="stylesheet" href="${base}/styles.css"></head>
+<body><div id="root" data-base="${base}"${opts.worlds ? ` data-worlds="${attr(opts.worlds)}"` : ''}${opts.names?.length ? ` data-names="${attr(opts.names.join(','))}"` : ''}${opts.token ? ` data-token="${attr(opts.token)}"` : ''}${opts.managed ? ' data-managed="1"' : ''}></div>${opts.scripts ?? ''}<script type="module" src="${base}/app.js"></script></body></html>`;
+
+export type ConsoleMount = {
+  /** `worlds`: the origin the Worlds are served at, when the console has an origin of its own; `names`: the
+   *  Worlds (`<org>/<world>`) a World token may open there, for a host that does not list its Worlds (a hosted one). */
+  handle: (request: Request, base: string, opts?: { worlds?: string; names?: string[] }) => Promise<Response | null>;
+  /** Serve the shell with a session already in it — the platform's portal (managed mode). */
+  /** `scripts`: HTML the mount puts before the app script — the platform's identity keep-alive rides here. */
+  shell: (base: string, opts: { token: string; managed: boolean; scripts?: string }) => Response;
+};
+
+/** The client, built once per process and kept (bundleClient: Bun.build under Bun, the prebuilt
+ *  dist/client/console.bundle.js under Node, written by this package's build). */
+export function buildConsoleClient(): Promise<string> { return bundleClient(CLIENT_ENTRY()); }
+
+/** The console as a host mounts it: `handle(request, '/-/console')` answers the shell at `base/`,
+ *  the bundle at `base/app.js`, the styles at `base/styles.css` over the brand's at `base/brand/`, and the shell again for any deeper
+ *  path (the client routes by path: `base/<org>/<world>`), or null for a path outside `base`. */
+export function createConsole(): ConsoleMount {
+  return {
+    async handle(request, base, opts = {}) {
+      const path = new URL(request.url).pathname;
+      if (path !== base && !path.startsWith(`${base}/`)) return null;
+      if (request.method !== 'GET' && request.method !== 'HEAD') return null;
+      if (path === `${base}/app.js`) {
+        try { return new Response(await buildConsoleClient(), { headers: { 'content-type': 'text/javascript; charset=utf-8', 'cache-control': 'no-cache' } }); }
+        catch (error) { return new Response(String(error), { status: 500 }); }
+      }
+      if (path === `${base}/styles.css`) return fileResponse(CLIENT_CSS());
+      if (path.startsWith(`${base}/brand/`)) return brandTokensResponse(BRAND_DIR(), path.slice(`${base}/brand/`.length));
+      if (path === base) return Response.redirect(`${base}/`, 302);
+      return new Response(SHELL(base, { ...(opts.worlds ? { worlds: opts.worlds } : {}), ...(opts.names?.length ? { names: opts.names } : {}) }), { headers: { 'content-type': 'text/html; charset=utf-8', 'cache-control': 'no-cache' } });
+    },
+    shell(base, opts) {
+      return new Response(SHELL(base, opts), { headers: { 'content-type': 'text/html; charset=utf-8', 'cache-control': 'no-cache' } });
+    },
+  };
+}