@volter/world-core 3.0.118 → 3.0.120

package/attach.cjs

@@ -35,6 +35,8 @@ if (ref) {
       throw new Error(`[twin-attach] could not fetch the world manifest from ${url}: ${(probe.stderr || '').trim()}`);
     }
     const manifest = JSON.parse(probe.stdout);
+    const { worldAttachmentNetworkEnv, worldStrictEgress } = require('./network-policy.cjs');
+    Object.assign(process.env, worldAttachmentNetworkEnv(ref, manifest.network, process.env, worldStrictEgress(manifest.env ?? {})));
     // a served World's twins as loopback listeners that add its key (./http-bridge.cjs), so a client with its own HTTP
     // stack (wrangler's undici, which neither patch reaches) reaches them as it would a local World's: the twin URLs and
     // every endpoint variable naming a twin's place point at the listener. Ports are chosen by a blocking child, the

package/dist/attach.cjs

@@ -35,6 +35,8 @@ if (ref) {
       throw new Error(`[twin-attach] could not fetch the world manifest from ${url}: ${(probe.stderr || '').trim()}`);
     }
     const manifest = JSON.parse(probe.stdout);
+    const { worldAttachmentNetworkEnv, worldStrictEgress } = require('./network-policy.cjs');
+    Object.assign(process.env, worldAttachmentNetworkEnv(ref, manifest.network, process.env, worldStrictEgress(manifest.env ?? {})));
     // a served World's twins as loopback listeners that add its key (./http-bridge.cjs), so a client with its own HTTP
     // stack (wrangler's undici, which neither patch reaches) reaches them as it would a local World's: the twin URLs and
     // every endpoint variable naming a twin's place point at the listener. Ports are chosen by a blocking child, the

package/dist/network-policy.cjs

@@ -171,6 +171,27 @@ function intersectWorldNetwork(own, ceiling) {
   return normalizeWorldNetwork({ egress, writes, phase: left.phase, passthrough, publicReads, ownLoopback });
 }
 
+/** A remote attachment changes its World reference while retaining the caller's network ceiling. */
+function worldAttachmentNetworkEnv(world, own, caller = {}, sourceStrict = false) {
+  let network = own === undefined ? undefined : normalizeWorldNetwork(own);
+  const serialized = caller[WORLD_NETWORK_POLICY_ENV];
+  if (serialized !== undefined) {
+    let ceiling;
+    try {
+      const { version, world: parent, ...permission } = parseWorldNetworkPolicy(JSON.parse(serialized));
+      ceiling = permission;
+    } catch { ceiling = { egress: [] }; }
+    network = network === undefined ? ceiling : intersectWorldNetwork(network, ceiling);
+  }
+  const strict = sourceStrict || worldStrictEgress(caller);
+  if (strict) network = network === undefined ? { egress: [] } : intersectWorldNetwork(network, { egress: [] });
+  return {
+    VOLTER_WORLD: world,
+    ...(network === undefined ? {} : { [WORLD_NETWORK_POLICY_ENV]: JSON.stringify(createWorldNetworkPolicy(world, network)) }),
+    ...(strict ? { VOLTER_TWIN_STRICT_EGRESS: '1' } : {}),
+  };
+}
+
 /** Loopback and private addresses stay inside the machine a World runs on: never refused. */
 function isWorldInternalHost(hostname) {
   const h = String(hostname || '').toLowerCase().replace(/^\[|\]$/g, '');
@@ -201,4 +222,4 @@ function worldEgressRefusal(value, env = process.env, method = 'GET') {
   return answer.outcome === 'refuse' ? `${answer.reason} (${refusalSide(answer)})` : null;
 }
 
-module.exports = { worldStrictEgress, worldGrantFromEnv, PUBLIC_BUILD_READS, READ_METHODS, intersectWorldNetwork, worldNetworkNeedsPathInspection, worldNetworkUsesPassthrough, isWorldInternalHost, worldEgressRefusal, WORLD_NETWORK_POLICY_ENV, normalizeWorldNetwork, createWorldNetworkPolicy, parseWorldNetworkPolicy, worldNetworkPolicyFromEnv, allowsWorldNetworkEgress };
+module.exports = { worldAttachmentNetworkEnv, worldStrictEgress, worldGrantFromEnv, PUBLIC_BUILD_READS, READ_METHODS, intersectWorldNetwork, worldNetworkNeedsPathInspection, worldNetworkUsesPassthrough, isWorldInternalHost, worldEgressRefusal, WORLD_NETWORK_POLICY_ENV, normalizeWorldNetwork, createWorldNetworkPolicy, parseWorldNetworkPolicy, worldNetworkPolicyFromEnv, allowsWorldNetworkEgress };

package/dist/network-policy.d.cts

@@ -15,3 +15,4 @@ export function worldEgressRefusal(value: string | URL, env?: Readonly<Record<st
 export function worldNetworkNeedsPathInspection(policy: WorldNetworkPolicy, value: string | URL): boolean;
 export function worldNetworkUsesPassthrough(policy: WorldNetworkPolicy, value: string | URL): boolean;
 export function intersectWorldNetwork(own: WorldNetwork, ceiling: WorldNetwork): WorldNetwork;
+export function worldAttachmentNetworkEnv(world: string, own: WorldNetwork | undefined, caller?: Readonly<Record<string, string | undefined>>, sourceStrict?: boolean): Record<string, string>;

package/network-policy.cjs

@@ -171,6 +171,27 @@ function intersectWorldNetwork(own, ceiling) {
   return normalizeWorldNetwork({ egress, writes, phase: left.phase, passthrough, publicReads, ownLoopback });
 }
 
+/** A remote attachment changes its World reference while retaining the caller's network ceiling. */
+function worldAttachmentNetworkEnv(world, own, caller = {}, sourceStrict = false) {
+  let network = own === undefined ? undefined : normalizeWorldNetwork(own);
+  const serialized = caller[WORLD_NETWORK_POLICY_ENV];
+  if (serialized !== undefined) {
+    let ceiling;
+    try {
+      const { version, world: parent, ...permission } = parseWorldNetworkPolicy(JSON.parse(serialized));
+      ceiling = permission;
+    } catch { ceiling = { egress: [] }; }
+    network = network === undefined ? ceiling : intersectWorldNetwork(network, ceiling);
+  }
+  const strict = sourceStrict || worldStrictEgress(caller);
+  if (strict) network = network === undefined ? { egress: [] } : intersectWorldNetwork(network, { egress: [] });
+  return {
+    VOLTER_WORLD: world,
+    ...(network === undefined ? {} : { [WORLD_NETWORK_POLICY_ENV]: JSON.stringify(createWorldNetworkPolicy(world, network)) }),
+    ...(strict ? { VOLTER_TWIN_STRICT_EGRESS: '1' } : {}),
+  };
+}
+
 /** Loopback and private addresses stay inside the machine a World runs on: never refused. */
 function isWorldInternalHost(hostname) {
   const h = String(hostname || '').toLowerCase().replace(/^\[|\]$/g, '');
@@ -201,4 +222,4 @@ function worldEgressRefusal(value, env = process.env, method = 'GET') {
   return answer.outcome === 'refuse' ? `${answer.reason} (${refusalSide(answer)})` : null;
 }
 
-module.exports = { worldStrictEgress, worldGrantFromEnv, PUBLIC_BUILD_READS, READ_METHODS, intersectWorldNetwork, worldNetworkNeedsPathInspection, worldNetworkUsesPassthrough, isWorldInternalHost, worldEgressRefusal, WORLD_NETWORK_POLICY_ENV, normalizeWorldNetwork, createWorldNetworkPolicy, parseWorldNetworkPolicy, worldNetworkPolicyFromEnv, allowsWorldNetworkEgress };
+module.exports = { worldAttachmentNetworkEnv, worldStrictEgress, worldGrantFromEnv, PUBLIC_BUILD_READS, READ_METHODS, intersectWorldNetwork, worldNetworkNeedsPathInspection, worldNetworkUsesPassthrough, isWorldInternalHost, worldEgressRefusal, WORLD_NETWORK_POLICY_ENV, normalizeWorldNetwork, createWorldNetworkPolicy, parseWorldNetworkPolicy, worldNetworkPolicyFromEnv, allowsWorldNetworkEgress };

package/network-policy.d.cts

@@ -15,3 +15,4 @@ export function worldEgressRefusal(value: string | URL, env?: Readonly<Record<st
 export function worldNetworkNeedsPathInspection(policy: WorldNetworkPolicy, value: string | URL): boolean;
 export function worldNetworkUsesPassthrough(policy: WorldNetworkPolicy, value: string | URL): boolean;
 export function intersectWorldNetwork(own: WorldNetwork, ceiling: WorldNetwork): WorldNetwork;
+export function worldAttachmentNetworkEnv(world: string, own: WorldNetwork | undefined, caller?: Readonly<Record<string, string | undefined>>, sourceStrict?: boolean): Record<string, string>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/world-core",
-  "version": "3.0.118",
+  "version": "3.0.120",
   "description": "The kernel of Volter World: one log per twin, branches as pointers, checkpoints, the fold that keeps a twin current, the head that performs a write against the vendor, references, and the git plane. A twin package builds on it; the runtime serves it.",
   "keywords": [
     "twin",