@volter/world-core 3.0.142 → 3.0.144

package/dist/inject.cjs

@@ -1734,7 +1734,7 @@ function installMiniflareOutbound() {
   // A host this process maps to a twin goes through the patched fetch. Any other goes where the World routes it: through
   // its proxy (HTTPS_PROXY, trusting the World's CA), which Node's own fetch does not read, so through miniflare's undici
   // with the environment's proxy agent; loopback stays direct.
-  const outboundFor = (miniflarePath) => {
+  const outboundFor = (miniflarePath, upgradeFetch) => {
     let proxied = null;
     try {
       if (process.env.HTTPS_PROXY || process.env.HTTP_PROXY) {
@@ -1745,7 +1745,13 @@ function installMiniflareOutbound() {
     } catch { proxied = null; }
     const mapped = (request) => { try { const url = new URL(request.url); return Boolean(resolveTwin(url.hostname, MAP, url.pathname)); } catch { return false; } };
     // The Request itself is handed on: its method, headers and body are getters, which a copy of it as `init` loses.
-    return (request) => (!proxied || (installed && mapped(request)) ? globalThis.fetch(request) : proxied(request));
+    return (request) => {
+      // Node fetch cannot return an upgraded connection. Miniflare's fetch couples the socket to its response;
+      // its ws client uses Node's request/socket paths, so the same injector routing and refusals still apply.
+      if (request.method === 'GET' && request.headers.get('upgrade')?.toLowerCase() === 'websocket'
+        && typeof upgradeFetch === 'function') return upgradeFetch(request, {});
+      return !proxied || (installed && mapped(request)) ? globalThis.fetch(request) : proxied(request);
+    };
   };
   let outbound = null;
   const routed = (options) => {
@@ -1771,7 +1777,7 @@ function installMiniflareOutbound() {
     if (!outbound) {
       let at = null;
       try { at = Module._resolveFilename(request, parent); } catch { at = null; }
-      outbound = at ? outboundFor(at) : (request) => globalThis.fetch(request);
+      outbound = at ? outboundFor(at, exports.fetch) : (request) => globalThis.fetch(request);
     }
     const Original = exports.Miniflare;
     class Miniflare extends Original {

package/inject.cjs

@@ -1734,7 +1734,7 @@ function installMiniflareOutbound() {
   // A host this process maps to a twin goes through the patched fetch. Any other goes where the World routes it: through
   // its proxy (HTTPS_PROXY, trusting the World's CA), which Node's own fetch does not read, so through miniflare's undici
   // with the environment's proxy agent; loopback stays direct.
-  const outboundFor = (miniflarePath) => {
+  const outboundFor = (miniflarePath, upgradeFetch) => {
     let proxied = null;
     try {
       if (process.env.HTTPS_PROXY || process.env.HTTP_PROXY) {
@@ -1745,7 +1745,13 @@ function installMiniflareOutbound() {
     } catch { proxied = null; }
     const mapped = (request) => { try { const url = new URL(request.url); return Boolean(resolveTwin(url.hostname, MAP, url.pathname)); } catch { return false; } };
     // The Request itself is handed on: its method, headers and body are getters, which a copy of it as `init` loses.
-    return (request) => (!proxied || (installed && mapped(request)) ? globalThis.fetch(request) : proxied(request));
+    return (request) => {
+      // Node fetch cannot return an upgraded connection. Miniflare's fetch couples the socket to its response;
+      // its ws client uses Node's request/socket paths, so the same injector routing and refusals still apply.
+      if (request.method === 'GET' && request.headers.get('upgrade')?.toLowerCase() === 'websocket'
+        && typeof upgradeFetch === 'function') return upgradeFetch(request, {});
+      return !proxied || (installed && mapped(request)) ? globalThis.fetch(request) : proxied(request);
+    };
   };
   let outbound = null;
   const routed = (options) => {
@@ -1771,7 +1777,7 @@ function installMiniflareOutbound() {
     if (!outbound) {
       let at = null;
       try { at = Module._resolveFilename(request, parent); } catch { at = null; }
-      outbound = at ? outboundFor(at) : (request) => globalThis.fetch(request);
+      outbound = at ? outboundFor(at, exports.fetch) : (request) => globalThis.fetch(request);
     }
     const Original = exports.Miniflare;
     class Miniflare extends Original {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/world-core",
-  "version": "3.0.142",
+  "version": "3.0.144",
   "description": "The kernel of Volter World: one log per twin, branches as pointers, checkpoints, the fold that keeps a twin current, the head that performs a write against the vendor, references, and the git plane. A twin package builds on it; the runtime serves it.",
   "keywords": [
     "twin",