@volter/world-core 2.0.37 → 3.0.0

package/src/storage.ts

@@ -1,5 +1,5 @@
 import { dirname, isAbsolute, join, resolve } from 'node:path';
-import { assertNotBeingRemoved, withAncestryLock, withStateRemoval } from './ancestry.ts';
+import { withStateLock, withStateRemoval } from './ancestry.ts';
 import { appendParentEntry, toEntry } from './log.ts';
 import {
   GenericWorldStateSchema,
@@ -198,14 +198,14 @@ function appendJsonl(path: string, value: unknown): void {
  *  critical sections atomic. Public so world-runtime can guard concurrent `upWorld`
  *  claims of one instance dir with the SAME lock semantics the event log uses (TWIN-36). */
 export function withFileLock<T>(lockPath: string, fn: () => T): T {
-  return withAncestryLock(() => { assertNotBeingRemoved(dirname(lockPath)); return getActiveWorldStore().withLock(lockPath, fn); });
+  return withStateLock(lockPath, fn);
 }
 
 function writeJsonAtomic(path: string, value: unknown): void {
   getActiveWorldStore().writeAtomic(path, `${JSON.stringify(value, null, 2)}\n`);
 }
 
-/** The parent log as a protocol 1 pack reads it: every entry the branch inherited or landed, as
+/** The parent log as observed rows: every entry the branch inherited or landed, as
  *  observed rows (log.ts `toEvent`). A branched world sees its base world's logs to the branch
  *  position first. */
 export function listEvents(service: string, root?: string): WorldServiceEvent[] {

package/src/trace-context.ts

@@ -8,7 +8,7 @@
 // same trace-id, a new parent-id — so the app's handler continues the same trace.
 //
 // Nothing here is vendor knowledge, and nothing runs at import: the async-context store is made on
-// first use (a browser bundle of a mirror client carries the kernel and has no AsyncLocalStorage).
+// first use (a browser bundle carrying the kernel and has no AsyncLocalStorage).
 import { AsyncLocalStorage } from 'node:async_hooks';
 
 export const TRACEPARENT_HEADER = 'traceparent';

package/src/twin-fetch.ts

@@ -126,13 +126,6 @@ export interface TwinFetchAdapterConfig {
   manifest: unknown | (() => unknown);
   /** GET /twin/scenario body (thunk) — scenario-carrying packs only. */
   scenarioStatus?: () => unknown;
-  /** THE STORE DOOR (R5c, mirror purity R3): named, deterministic projections over stored
-   *  state, served at `GET /twin/store/<name>` and listed in the manifest as `stores`. A
-   *  mirror reads twin state ONLY through this door — never by importing the handler or a
-   *  `-twin-internal` module — so the vendor API lacking a listing endpoint (resend has no
-   *  list-emails) no longer breeds a bespoke `/_twin/*` route per mirror. Keyed in the skin
-   *  like every state read (only bare `GET /twin` is keyless). */
-  stores?: Record<string, () => unknown | Promise<unknown>>;
   /** Per-request vendor extras (header threading: stripe-version, notion-version, …). */
   extras?: (request: Request, url: URL) => Record<string, unknown>;
   /** Static per-instance handler options (e.g. rateLimitPerSecond). */
@@ -152,24 +145,11 @@ export function createTwinFetchFromHandler(
     const cleanPath = url.pathname.replace(/\/+$/, '') || '/';
     if (request.method === 'GET' && cleanPath === '/twin') {
       const manifest = typeof config.manifest === 'function' ? (config.manifest as () => unknown)() : config.manifest;
-      const storeNames = Object.keys(config.stores ?? {}).sort();
-      if (storeNames.length > 0 && manifest !== null && typeof manifest === 'object') {
-        const m = manifest as Record<string, unknown>;
-        const doors = m.doors !== null && typeof m.doors === 'object' ? (m.doors as Record<string, unknown>) : {};
-        // The manifest EDUCATES: it lists the store names and names the door's path.
-        return Response.json({ ...m, stores: storeNames, doors: { ...doors, store: 'GET /twin/store/<name>' } });
-      }
       return Response.json(manifest);
     }
     if (request.method === 'GET' && cleanPath === '/twin/scenario' && config.scenarioStatus !== undefined) {
       return Response.json(config.scenarioStatus());
     }
-    if (request.method === 'GET' && cleanPath.startsWith('/twin/store/')) {
-      const name = cleanPath.slice('/twin/store/'.length);
-      const store = config.stores?.[name];
-      if (store === undefined) return Response.json({ error: 'unknown store', store: name, stores: Object.keys(config.stores ?? {}).sort() }, { status: 404 });
-      return Response.json(await store()); // a projection may read through the handler (async) — the door awaits it
-    }
     const body = request.method === 'GET' || request.method === 'HEAD' ? '' : await request.text();
     const headers: Record<string, string> = {};
     request.headers.forEach((value, key) => { headers[key] = value; });

package/src/vendor-call.ts

@@ -0,0 +1,41 @@
+// A TWIN'S CALL TO ANOTHER VENDOR (architecture.md, "What an author writes, and how": `ctx.vendorFetch`). A vendor's
+// service calls another vendor as part of its own behaviour — Clerk trades a Google sign-in's code for the person at
+// Google's token endpoint — and in a World that other vendor is the World's twin of it. The call is addressed as the
+// vendor's own URL and reaches that twin by the same host rules the injector routes an application by (vendor-hosts.cjs),
+// carrying the World's twins key; a vendor the World runs no twin of is refused, never reached: a twin makes no direct
+// vendor call (simulated execution is deterministic and stays inside the World). This is the one network a handler has;
+// importing this module does nothing.
+import { twinOrigins, VENDOR_HOSTS } from '../vendor-hosts.cjs';
+
+/** A call to a vendor the World runs no twin of. */
+export class VendorUnreachableError extends Error {
+  constructor(message: string) { super(message); this.name = 'VendorUnreachableError'; }
+}
+
+/** The World's twins by vendor: the instance's env (every twin's URL, whenever this process started) over this
+ *  process's own. */
+async function worldTwins(): Promise<Record<string, string>> {
+  const env = process.env;
+  let instanceEnv: Record<string, string> = {};
+  const file = env.VOLTER_WORLD_INSTANCE;
+  if (file) {
+    try {
+      const { readFile } = await import('node:fs/promises');
+      instanceEnv = (JSON.parse(await readFile(file, 'utf8')) as { env?: Record<string, string> }).env ?? {};
+    } catch { /* no instance yet: this process's env alone */ }
+  }
+  return { ...twinOrigins(env), ...twinOrigins(instanceEnv) };
+}
+
+/** `url`, a vendor's own address, answered by the World's twin of that vendor. */
+export async function vendorFetch(url: string | URL, init: RequestInit = {}): Promise<Response> {
+  const target = new URL(String(url));
+  const twins = await worldTwins();
+  const vendor = Object.keys(VENDOR_HOSTS).find((v) => twins[v] !== undefined && VENDOR_HOSTS[v]!(target.hostname, target.pathname));
+  if (vendor === undefined) throw new VendorUnreachableError(`${target.host}${target.pathname}: this World runs no twin of it, and a twin calls only the World's twins`);
+  const headers = new Headers(init.headers);
+  headers.set('x-volter-twin-original-host', target.host);
+  const key = process.env.VOLTER_TWINS_KEY;
+  if (key && !headers.has('x-twins-key')) headers.set('x-twins-key', key);
+  return fetch(`${twins[vendor]!.replace(/\/$/, '')}${target.pathname}${target.search}`, { ...init, headers });
+}

package/src/world-store.ts

@@ -10,7 +10,7 @@
 // without touching a line of twin business logic.
 //
 // The interface is SYNCHRONOUS on purpose. The kernel's internals (append-then-
-// project, read-then-append critical sections) are synchronous, and `clerk-twin.ts`'s
+// project, read-then-append critical sections) are synchronous, and a pack's
 // request handler is a pure sync function keyed by `root`. Making the store async
 // would ripple `await` through every one of those call sites and change the handler's
 // shape — precisely the blast radius this seam exists to avoid. An async backend is

package/vendor-hosts.cjs

@@ -13,124 +13,19 @@
 //     path once the request is decrypted.
 //   • pathname supplied       ⇒  "does this vendor serve THIS path on this host?" (routing).
 //
-// Nearly every predicate ignores the second argument, because nearly every vendor owns its host
-// outright. `www.googleapis.com` is the exception: `googleauth` serves the OAuth2 token exchange
-// there and `youtube` serves the Data API v3 at /youtube/v3/*. Since `resolveTwin` returns the
-// FIRST matching vendor in insertion order, a host-only match would give whichever key is declared
-// first the entire host — silently breaking the other twin whenever both are configured in one
-// world. The two predicates below are therefore mutually exclusive on that host BY PATH.
-//
-// THE SHARED-HOST RULE (Cal.com incident, 2026-08): a shared-host predicate must claim ONLY the
-// paths its twin actually serves — never "the rest of the host". Claiming the remainder is how
-// every `@googleapis/calendar` call (all of its methods default to www.googleapis.com) was routed
-// into the googleauth/gemini twin and answered with a plausible Google-shaped 404: a mis-route
-// that fails OPEN and PLAUSIBLE, strictly worse than a coverage gap. An UNCLAIMED path on a
-// claimed host is refused LOUDLY instead (see unclaimedTwinnedHostPathMessage below): the error
-// names the host as twinned and the path as belonging to no pack in this world.
-/**
- * Does this path belong to the OAuth2 token-exchange surface the googleauth twin actually serves?
- * Exactly the routes gemini-twin.ts §googleauth models: `POST /token` (the oauth2.googleapis.com
- * path, also answered on the legacy host) and `POST /oauth2/v4/token` (the legacy
- * www.googleapis.com token path older google-auth-library versions default to). NOTHING else:
- * /calendar/v3/* (the googlecalendar pack's), /drive/v3/*, … are other Google products, and
- * claiming them would mis-route those SDKs into an auth twin that answers with vendor-shaped
- * 404s (the Cal.com incident).
- */
-// (The `googleauth` matcher itself is DATA on gemini's descriptor — packages/twin/gemini/src/index.ts.)
-
-/**
- * Does this path belong to Google's user-facing OAuth 2.0 / OIDC surface — the one the
- * `googleoauth` PACK serves?
- *
- * accounts.google.com is NOT an API host: it is Google's whole sign-in web property (the account
- * chooser, Gmail SSO, security settings, the Workspace admin login). Claiming the host outright
- * would be the Cal.com mis-route incident again in a much larger blast radius — every Google
- * sign-in a browser in the world performs would land in a twin that models one protocol. So this
- * claims EXACTLY the OAuth/OIDC paths the pack serves and refuses the rest LOUDLY
- * (unclaimedTwinnedHostPathMessage).
- */
-const isGoogleOAuthConsentPath = (p) =>
-  typeof p === 'string'
-  && (/^\/(o\/oauth2\/v2\/auth(\/oauthchooseaccount)?|o\/oauth2\/auth|o\/oauth2\/token|signin\/oauth\/error|\.well-known\/openid-configuration)\/?$/.test(p)
-    || /^\/_twin\//.test(p));
-// ANCHORED, and `/o/oauth2/auth/oauthchooseaccount` deliberately absent. The first version had no
-// terminal anchor, so `/o/oauth2/tokeninfo`, `/signin/oauth/errorPage` and
-// `/.well-known/openid-configuration.json` were all claimed and all 404 — and its alternation also
-// claimed an UN-VERSIONED chooser path the router does not serve (§9 round two). The claim set is
-// now exactly `AUTH_PATHS` + the three singles + the twin-only prefix.
-// NB `/o/oauth2/revoke` (the legacy revocation alias) is NOT claimed: the pack files it as a todo
-// and its handler 404s it. An injector entry claiming a path the twin then refuses routes real
-// traffic into a twin that cannot serve it — the Cal.com mis-route in miniature, and the reason
-// every claim here is checked against what the router actually answers.
-
-/**
- * The oauth2.googleapis.com paths the googleoauth PACK serves: the token endpoint (all three
- * spellings), revocation, and token introspection.
- */
-const isGoogleOAuthTokenPath = (p) =>
-  typeof p === 'string' && /^\/(token|oauth2\/v4\/token|revoke|tokeninfo|device\/code)\/?$/.test(p);
-// `/device/code` is a DELIBERATE exception to "never claim a path the twin refuses", and the two
-// rules genuinely collide here (§9 round two). The twin's own discovery document advertises
-// `device_authorization_endpoint` — because Google's does, and dropping it would be infidelity — so
-// a discovery-driven client WILL dial it. Unclaimed, that client escapes a sealed world and reaches
-// the real Google; claimed, it gets the twin's honest 404. Containment wins: an unmodelled
-// operation must fail LOCALLY, not succeed remotely.
-
-/**
- * The www.googleapis.com paths it serves: the v1 (PEM) and v3 (JWK) cert endpoints, the v3
- * userinfo alias, and the OAuth2 API v2's userinfo (`/oauth2/v2/userinfo` and its `/userinfo/v2/me`
- * alias, a different field set: `googleoauth.endpoints.userinfo_v2`), which `@googleapis/oauth2`
- * calls (Cal.com's Google Calendar callback). NOT `/oauth2/v2/certs`: Google publishes no v2 certs
- * endpoint at all.
- */
-const isGoogleOAuthApisPath = (p) =>
-  typeof p === 'string' && /^\/(oauth2\/(v1\/certs|v3\/(certs|userinfo)|v2\/userinfo)|userinfo\/v2\/me)\/?$/.test(p);
+// Where two packs share a host (www.googleapis.com: googleoauth's /oauth2/*, googlecalendar's
+// /calendar/v3), each claims ONLY the paths its twin serves, never "the rest of the host": a pack
+// claiming the remainder answers another product's SDK with plausible vendor-shaped 404s, a
+// mis-route that fails open and plausible, strictly worse than a coverage gap. An UNCLAIMED path on
+// a claimed host is refused LOUDLY instead: the error names the host as twinned and the path as
+// belonging to no pack in this world.
 
 // vendor → predicate(hostname, pathname?). A vendor is only active if its twin URL is set.
 // THE HAND TABLE'S ONLY RESIDENTS: keys served by KERNEL packages (browser-assets serves
-// `browserassets` and `googlefavicon`; kernel packages carry no pack descriptor) and
-// `googleoauth`, which must precede gemini's `googleauth` key on the shared token host
-// (`resolveTwin` is first-match in insertion order, and this table is inserted before the
-// compiled descriptors below). Every vendor pack's hosts live on its descriptor as DATA —
-// host | suffix | hostPattern, pathPattern, exclude, key — compiled from pack-facts.json.
+// `browserassets` and `googlefavicon`; kernel packages carry no pack descriptor). Every vendor
+// pack's hosts live on its descriptor as DATA — host | suffix | hostPattern, pathPattern,
+// exclude, key — compiled from pack-facts.json.
 const VENDOR_HOSTS = {
-  // google-auth-library exchanges a locally-signed JWT here before ANY
-  // Vertex/GCS call — a sealed world must model the exchange or every
-  // service-account flow dies in auth before reaching a modeled API.
-  //
-  // SHARES www.googleapis.com with the `youtube` PACK (whose `hosts` declaration carries the
-  // matching pathPattern): this vendor claims
-  // ONLY the token-exchange paths its twin serves there (`/token`, `/oauth2/v4/token` —
-  // gemini-twin.ts §googleauth; the `googleauth` key on gemini's descriptor). It used to claim "everything that
-  // is not YouTube" on that host, which silently swallowed Google Calendar (`/calendar/v3/*` —
-  // `@googleapis/calendar` defaults every method to www.googleapis.com) and answered it with
-  // plausible Google-shaped 404s from the wrong pack: the Cal.com mis-route incident. Unclaimed
-  // paths on this host now refuse loudly instead (unclaimedTwinnedHostPathMessage). With no
-  // pathname it still claims the host so the ambient proxy MITMs it; the post-decrypt resolve
-  // then routes each request to the right twin — or to the loud refusal.
-  //
-  // GOOGLEOAUTH — the real PACK (@volter/twin-googleoauth), declared BEFORE `googleauth` on purpose.
-  // `resolveTwin` returns the FIRST matching vendor in insertion order, so in a world where BOTH are
-  // configured the token endpoint goes to the pack rather than to the pack-less plumbing key — which
-  // is what you want, because the pack's token endpoint is a strict SUPERSET: it serves
-  // authorization_code and refresh_token (which googleauth has no state for) AND the
-  // jwt-bearer service-account exchange googleauth exists for, with a REAL RS256 id_token instead of
-  // gemini's `alg: none` stub. A world running ONLY the gemini twin still resolves through
-  // `googleauth` below, unchanged.
-  //
-  // FOUR hosts, every one path-scoped, because Google spreads ONE product across them and shares
-  // three of them with other products:
-  //   • accounts.google.com          the consent screen, the error page, OIDC discovery. NOT claimed
-  //                                  outright: this host is Google's entire sign-in web property.
-  //   • oauth2.googleapis.com        token / revoke / tokeninfo. SHARED with `googleauth`.
-  //   • www.googleapis.com           the JWKS + legacy userinfo. SHARED with `googleauth` AND
-  //                                  `youtube`, and disambiguated from both BY PATH.
-  //   • openidconnect.googleapis.com the OIDC userinfo endpoint. Not shared.
-  googleoauth: (h, p) =>
-    (h === 'accounts.google.com' && (p === undefined || isGoogleOAuthConsentPath(p)))
-    || (h === 'oauth2.googleapis.com' && (p === undefined || isGoogleOAuthTokenPath(p)))
-    || (h === 'www.googleapis.com' && (p === undefined || isGoogleOAuthApisPath(p)))
-    || h === 'openidconnect.googleapis.com',
   googlefavicon: (h) => h === 'www.google.com' || h === 'google.com' || h === 't2.gstatic.com',
   browserassets: (h) =>
     h === 'cdnjs.cloudflare.com' ||
@@ -149,23 +44,29 @@ const VENDOR_HOSTS = {
     h === 'i.ytimg.com',
 };
 
-// descriptor-first migration (adding-a-twin.md §3): packs now declare their hosts as DATA on their descriptor
+// descriptor-first migration (architecture.md, "The descriptor"): packs now declare their hosts as DATA on their descriptor
 // (`hosts` on TwinPack), compiled into the committed pack-facts artifact — a plain JSON this
 // preloaded, dependency-free module can `require` natively. The hand table above shrinks toward
 // empty as entries move; a vendor present in both homes throws (dual declaration is the drift
 // this migration ends, and a broken checkout should refuse to inject rather than half-route).
-{
-  const { packs } = require('./generated/pack-facts.json');
+/** The keys each pack's compiled rules answer under, by vendor: a pack's own facts learned later (addPackHosts) replace
+ *  that vendor's rules, never another's. */
+const COMPILED = new Map();
+/** The hand table's keys, before any pack's rules: a pack installed later replaces its hand entry in place (keeping its
+ *  position, which decides who answers a shared host first), where the built-in facts may not declare one twice. */
+const HAND = new Set(Object.keys(VENDOR_HOSTS));
+function compilePackHosts(packs, overlay) {
   for (const vendor of Object.keys(packs)) {
     const rules = packs[vendor].hosts;
     if (!rules || rules.length === 0) continue;
-    if (VENDOR_HOSTS[vendor]) {
+    for (const key of COMPILED.get(vendor) || []) delete VENDOR_HOSTS[key];
+    COMPILED.delete(vendor);
+    if (VENDOR_HOSTS[vendor] && !(overlay && HAND.has(vendor))) {
       throw new Error(`inject: vendor "${vendor}" declares hosts on its pack descriptor AND in the hand VENDOR_HOSTS table — one home per fact; delete the hand entry.`);
     }
-    // Rules group by `key` (default: the vendor id) — an aws descriptor declares the s3 /
-    // dynamodb / … routing identities its consolidated twin answers under; gemini declares
-    // `googleauth`. A key matches when ANY include rule matches AND NO exclude rule matches
-    // (upstash: `.upstash.io` minus the vector hosts).
+    // Rules group by `key` (default: the vendor id) — aws's descriptor declares the s3 and
+    // secretsmanager routing identities its twin answers under. A key matches when ANY include
+    // rule matches AND NO exclude rule matches.
     const byKey = new Map();
     for (const rule of rules) {
       const key = rule.key === undefined ? vendor : rule.key;
@@ -173,7 +74,7 @@ const VENDOR_HOSTS = {
       byKey.get(key).push(rule);
     }
     for (const [key, keyRules] of byKey) {
-      if (VENDOR_HOSTS[key]) {
+      if (VENDOR_HOSTS[key] && !(overlay && HAND.has(key))) {
         throw new Error(`inject: key "${key}" (pack ${vendor}) is declared twice — on this descriptor and in the hand VENDOR_HOSTS table or another pack's descriptor; a key has one home.`);
       }
       const compile = (rule) => {
@@ -188,9 +89,19 @@ const VENDOR_HOSTS = {
       const includes = keyRules.filter((r) => r.exclude !== true).map(compile);
       const excludes = keyRules.filter((r) => r.exclude === true).map(compile);
       VENDOR_HOSTS[key] = (h, p) => includes.some((m) => m(h, p)) && !excludes.some((m) => m(h, p));
+      COMPILED.set(vendor, [...(COMPILED.get(vendor) || []), key]);
     }
   }
 }
+{
+  const facts = require('./pack-facts.cjs').packFacts();
+  const installed = new Set(facts.installed || []);
+  compilePackHosts(Object.fromEntries(Object.entries(facts.packs).filter(([vendor]) => !installed.has(vendor))), false);
+  compilePackHosts(Object.fromEntries(Object.entries(facts.packs).filter(([vendor]) => installed.has(vendor))), true);
+}
+/** Rules from packs' facts learned after this module loaded (a runtime told the facts of the World it boots): each
+ *  vendor's replace its earlier rules. */
+function addPackHosts(packs) { compilePackHosts(packs || {}, true); }
 
 /** Whether any vendor's host rule names `host` (at the host level, whatever the path), whether or not its twin runs. */
 function isVendorHost(host) {
@@ -204,7 +115,7 @@ function vendorsOfHost(host) {
   return Object.keys(VENDOR_HOSTS).filter((vendor) => VENDOR_HOSTS[vendor](h));
 }
 
-/** A vendor key's env stem: `S3_TWIN_URL` is s3's; `googleauth` → GOOGLEAUTH. */
+/** A vendor key's env stem: `S3_TWIN_URL` is s3's; `browserassets` → BROWSERASSETS. */
 function twinEnvStem(vendor) {
   return String(vendor).toUpperCase().replace(/[^A-Z0-9]/g, '_');
 }
@@ -230,4 +141,4 @@ function twinOrigins(env) {
   return map;
 }
 
-module.exports = { VENDOR_HOSTS, isVendorHost, vendorsOfHost, twinEnvStem, twinOrigins };
+module.exports = { VENDOR_HOSTS, addPackHosts, isVendorHost, vendorsOfHost, twinEnvStem, twinOrigins };

package/vendor-hosts.d.cts

@@ -0,0 +1,8 @@
+/** A vendor's host rule: whether a request to `hostname` (and, where the vendor shares a host, `pathname`) is its. */
+export type HostRule = (hostname: string, pathname?: string) => boolean;
+export const VENDOR_HOSTS: Record<string, HostRule>;
+export function isVendorHost(hostname: string): boolean;
+export function vendorsOfHost(hostname: string): string[];
+export function twinEnvStem(vendor: string): string;
+/** The vendors whose twin `env` points at, each with its origin. */
+export function twinOrigins(env: Readonly<Record<string, string | undefined>>): Record<string, string>;

package/dist/src/mirror-shell.d.ts

@@ -1,2 +0,0 @@
-/** The shell's HTML mounted at `base` (the twin's place, ending in '/'). */
-export declare function mirrorShellUnder(html: string, base: string): string;

package/dist/src/mirror-shell.js

@@ -1,13 +0,0 @@
-// A pack's mirror shell as a World serves it, at /<org>/<world>/<vendor>/mirror/ (the served World's
-// mount and the hosted supervisor's): its <base> becomes the twin's place under the World, so the
-// mirror's reads go to the World's wire; its assets stay under mirror/; and its own `#/` routes stay on
-// the shell. A mirror links its routes as href="#/…", which the browser resolves against <base> — the
-// twin's API path, not the shell — so a capture-phase handler moves the hash on the page instead.
-const HASH_LINKS = `<script>document.addEventListener('click',function(e){var a=e.target&&e.target.closest&&e.target.closest('a[href^="#"]');if(!a||e.defaultPrevented||e.button!==0||e.metaKey||e.ctrlKey||e.shiftKey||e.altKey)return;e.preventDefault();location.hash=a.getAttribute('href');},true);</script>`;
-/** The shell's HTML mounted at `base` (the twin's place, ending in '/'). */
-export function mirrorShellUnder(html, base) {
-    const mounted = html
-        .replace(/<base href="[^"]*">/, `<base href="${base}">`)
-        .replace(/(href|src)="assets\//g, '$1="mirror/assets/');
-    return mounted.includes('</head>') ? mounted.replace('</head>', `${HASH_LINKS}</head>`) : `${HASH_LINKS}${mounted}`;
-}

package/dist/src/v1-removed.d.ts

@@ -1,159 +0,0 @@
-export declare function v1Reached(): string[];
-/** Run `fn` and learn which v1 names it reached (directly or through anything it awaited). */
-export declare function v1ReachedIn<T>(fn: () => Promise<T>): Promise<{
-    value: T;
-    reached: string[];
-}>;
-export declare function appendEventLocked(..._args: any[]): any;
-export declare function eventsLockPath(..._args: any[]): any;
-export declare function appendPushRecord(..._args: any[]): any;
-export declare function listPushLedger(..._args: any[]): any;
-export declare function latestPushByActionId(..._args: any[]): any;
-export declare function unconfirmedPushes(..._args: any[]): any;
-export declare function assertFastForward(..._args: any[]): any;
-export declare function pushTransaction(..._args: any[]): any;
-export declare function abandonPush(..._args: any[]): any;
-export declare function syncPull(..._args: any[]): any;
-export declare function syncPush(..._args: any[]): any;
-export declare function currentResources(..._args: any[]): any;
-export declare function isEgressEventType(..._args: any[]): any;
-export declare function recordWriteIntent(..._args: any[]): any;
-export declare function performExternalWrite(..._args: any[]): any;
-export declare function listUnreconciledWriteIntents(..._args: any[]): any;
-export declare function listEgressLedger(..._args: any[]): any;
-export declare function findWriteResultByExternal(..._args: any[]): any;
-export declare function transactionSetId(..._args: any[]): any;
-export declare function listPlanReviews(..._args: any[]): any;
-export declare function latestPlanReview(..._args: any[]): any;
-export declare function buildLocalActionPlan(..._args: any[]): any;
-export declare function recordPlanReview(..._args: any[]): any;
-export declare function approvedPendingActionSet(..._args: any[]): any;
-export declare function assertPendingActionsApproved(..._args: any[]): any;
-export declare function pendingConflicts(..._args: any[]): any;
-export declare function buildApplyPlan(..._args: any[]): any;
-export declare function writePlan(..._args: any[]): any;
-export declare function readPlan(..._args: any[]): any;
-export declare function listPlans(..._args: any[]): any;
-export declare function planRequiresApproval(..._args: any[]): any;
-export declare function applyPlan(..._args: any[]): any;
-export declare function listLeases(..._args: any[]): any;
-export declare function isLeaseActive(..._args: any[]): any;
-export declare function activeLease(..._args: any[]): any;
-export declare function acquireLease(..._args: any[]): any;
-export declare function releaseLease(..._args: any[]): any;
-export declare function reconcile(..._args: any[]): any;
-export declare function isCleanlyReconcilable(..._args: any[]): any;
-export declare function reconcileRequiresApproval(..._args: any[]): any;
-export declare function writeRemoteRef(..._args: any[]): any;
-export declare function readRemoteRef(..._args: any[]): any;
-export declare function listRemoteRefs(..._args: any[]): any;
-export declare function writeLocalRef(..._args: any[]): any;
-export declare function readLocalRef(..._args: any[]): any;
-export declare function isBaseStale(..._args: any[]): any;
-export declare function setQueueRowStatus(..._args: any[]): any;
-export declare function queueRowStatus(..._args: any[]): any;
-export declare function listQueueWithStatus(..._args: any[]): any;
-export declare function pendingQueueRows(..._args: any[]): any;
-export declare function queueCounts(..._args: any[]): any;
-export declare function commitQueueRow(..._args: any[]): any;
-export declare function ignoreQueueRow(..._args: any[]): any;
-export declare function supersedeQueueRow(..._args: any[]): any;
-export declare function poisonQueueRow(..._args: any[]): any;
-export declare function commitPendingQueue(..._args: any[]): any;
-export declare function worldStatus(..._args: any[]): any;
-export declare function formatStatus(..._args: any[]): any;
-export declare function discoverWorldServices(..._args: any[]): any;
-export declare function validateWorldService(..._args: any[]): any;
-export declare function summarizeWorldFindings(..._args: any[]): any;
-export declare function validateWorld(..._args: any[]): any;
-export declare function renderTwinHtml(..._args: any[]): any;
-export declare function createVisualizerServer(..._args: any[]): any;
-export declare function pushPending(..._args: any[]): any;
-export declare function pushOperationOf(..._args: any[]): any;
-export declare function pushIdempotencyKeyOf(..._args: any[]): any;
-export declare function remoteRefs(..._args: any[]): any;
-export declare function buildShadowState(..._args: any[]): any;
-export declare function recordObservedDelta(..._args: any[]): any;
-export declare function recordObservedDeltaLocked(..._args: any[]): any;
-export declare function pollCursorPath(..._args: any[]): any;
-export declare function loadPollCursor(..._args: any[]): any;
-export declare function savePollCursor(..._args: any[]): any;
-export declare function runConnectorPoll(..._args: any[]): any;
-export declare function runConnectorSweep(..._args: any[]): any;
-export declare function applyChangeset(..._args: any[]): any;
-export declare function forkDivergence(..._args: any[]): any;
-export declare function auditForkNoRealWrites(..._args: any[]): any;
-export declare function discardFork(..._args: any[]): any;
-export declare function cherryPickActions(..._args: any[]): any;
-export declare function mergeForks(..._args: any[]): any;
-export declare function resetFork(..._args: any[]): any;
-export declare function rebaseFork(..._args: any[]): any;
-export declare const WRITE_INTENT_SUFFIX = "";
-export declare const WRITE_RESULT_SUFFIX = "";
-export declare class UnreconciledPushError extends Error {
-    constructor(message?: string);
-}
-export declare class NonFastForwardPushError extends Error {
-    constructor(message?: string);
-}
-export declare class UnreconciledWriteIntentError extends Error {
-    constructor(message?: string);
-}
-export declare class LeaseHeldError extends Error {
-    constructor(message?: string);
-}
-export type PushStatus = any;
-export type WorldPushRecord = any;
-export type SyncResource = any;
-export type PullResult = any;
-export type PushItemResult = any;
-export type PushResult = any;
-export type EgressActor = any;
-export type EgressWriteRequest = any;
-export type EgressWriteOutcome = any;
-export type EgressWriteResult = any;
-export type EgressLedgerEntry = any;
-export type ProviderCall = any;
-export type WorldApplyPlan = any;
-export type PlanReviewDecision = any;
-export type PlanReviewRecord = any;
-export type LocalActionPlan = any;
-export type ApprovedPendingActionSet = any;
-export type ActionMapper = any;
-export type ApplyResult = any;
-export type WorldApplyLease = any;
-export type ReconcilePolicy = any;
-export type FieldDecision = any;
-export type SubjectReconcile = any;
-export type ReconcilePlan = any;
-export type WorldRemoteRef = any;
-export type WorldLocalRef = any;
-export type QueueRowStatus = any;
-export type QueueStatusTransition = any;
-export type QueueRowWithStatus = any;
-export type QueueCounts = any;
-export type WorldStatus = any;
-export type WorldValidationFinding = any;
-export type WorldValidationSummary = any;
-export type WorldValidationReport = any;
-export type PushReport = any;
-export type RemoteRefsMode = any;
-export type ShadowState = any;
-export type SubjectFieldExtractor = any;
-export type DeltaObservation = any;
-export type DeltaResult = any;
-export type ConnectorObservation = any;
-export type WorldConnector = any;
-export type ConnectorPollResult = any;
-export type SweepConnector = any;
-export type ConnectorSweepResult = any;
-export type CopyResult = any;
-export type ForkAudit = any;
-export type ForkDivergence = any;
-export type SubjectDivergence = any;
-export type FieldDivergence = any;
-export type ApplyTarget = any;
-export type ApplyChangesetOutcome = any;
-export type TwinProxy = any;
-export type TwinProxyOptions = any;
-export type VendorRoute = any;