@volter/world-core 3.0.155 → 3.0.157

package/attach.cjs

@@ -35,6 +35,8 @@ if (ref) {
       throw new Error(`[twin-attach] could not fetch the world manifest from ${url}: ${(probe.stderr || '').trim()}`);
     }
     const manifest = JSON.parse(probe.stdout);
+    if (manifest === null || typeof manifest !== 'object' || Array.isArray(manifest)) throw new Error('[twin-attach] remote world returned no manifest');
+    if (Object.hasOwn(manifest, 'requiredCredentials')) throw new Error('[twin-attach] required credential remote transport is unsupported; refusing before bridges or injection');
     const { worldAttachmentNetworkEnv, worldStrictEgress } = require('./network-policy.cjs');
     Object.assign(process.env, worldAttachmentNetworkEnv(ref, manifest.network, process.env, worldStrictEgress(manifest.env ?? {})));
     // a served World's twins as loopback listeners that add its key (./http-bridge.cjs), so a client with its own HTTP

package/capability-decision.cjs

@@ -4,7 +4,7 @@
 // scoped proxy, a tab's relay, a native image run's Seatbelt profile) enforces this answer and decides nothing itself.
 // Pure: no I/O, no environment and nothing at import. What only the substrate can observe (the twin route, the vendors
 // sharing a host, which loopback ports are the World's doors or the run's own listeners) arrives as `facts`.
-const { allowsWorldNetworkEgress, isWorldInternalHost, worldNetworkNeedsPathInspection, worldNetworkUsesPassthrough } = require('./network-policy.cjs');
+const { allowsWorldNetworkEgress, explicitlyGrantsWorldNetworkEgress, isWorldInternalHost, worldNetworkNeedsPathInspection, worldNetworkUsesPassthrough } = require('./network-policy.cjs');
 
 /** The declaration of a guest with no declaration format: an ordinary host process, which can reach what the host can.
  *  Its own loopback is what it observably opened (`facts.ownListener`). A substrate whose guest can declare never uses it. */
@@ -135,7 +135,8 @@ function unlisted(url, target, method, { declaration, grant = {} }) {
   if (grant.strict === true) return refuse(capability, target, 'grant', 'sealed', `this sandbox refuses untwinned host ${url.hostname}`, declaration);
   if (grant.unreadable) return refuse(capability, target, 'grant', 'policy-unreadable', `the World network policy is unreadable (${grant.unreadable}); refusing ${url.hostname}`, declaration);
   if (grant.policy && !allowsWorldNetworkEgress(grant.policy, url, method ?? 'GET')) {
-    return refuse(capability, target, 'grant', 'not-granted', `the World network policy does not allow ${String(method ?? 'GET').toUpperCase()} ${url.origin}`, declaration);
+    // a tunnel (CONNECT) shows no method: the refusal names what was asked, never a method nobody sent
+    return refuse(capability, target, 'grant', 'not-granted', `the World network policy does not allow ${method ? `${String(method).toUpperCase()} ` : ''}${url.origin}`, declaration);
   }
   return null;
 }
@@ -254,9 +255,10 @@ function decideRead(request, { declaration, facts = {} }) {
   return refuse(capability, path, 'declaration', 'read-undeclared', `in Docker this container cannot read ${path}: it sees its own filesystem, the World's files and its declared mounts; declare a mount`, declaration);
 }
 
-/** Whether the World's build-phase grant lists `url` itself, which then wins over a twin of its host. */
+/** Whether the World's build-phase grant lists `url` itself, which then wins over a twin of its host. The unlisted
+ *  public build reads do not: on a twinned host the twin answers them. */
 function publicBuildGrant(grant, url) {
-  return grant.strict !== true && !!grant.policy && grant.policy.phase === 'build' && allowsWorldNetworkEgress(grant.policy, url);
+  return grant.strict !== true && !!grant.policy && grant.policy.phase === 'build' && explicitlyGrantsWorldNetworkEgress(grant.policy, url);
 }
 
 /** A path the guest writes as its data (a `VOLUME`). Declared, it passes run-scoped: writable for the run, not outliving

package/dist/attach.cjs

@@ -35,6 +35,8 @@ if (ref) {
       throw new Error(`[twin-attach] could not fetch the world manifest from ${url}: ${(probe.stderr || '').trim()}`);
     }
     const manifest = JSON.parse(probe.stdout);
+    if (manifest === null || typeof manifest !== 'object' || Array.isArray(manifest)) throw new Error('[twin-attach] remote world returned no manifest');
+    if (Object.hasOwn(manifest, 'requiredCredentials')) throw new Error('[twin-attach] required credential remote transport is unsupported; refusing before bridges or injection');
     const { worldAttachmentNetworkEnv, worldStrictEgress } = require('./network-policy.cjs');
     Object.assign(process.env, worldAttachmentNetworkEnv(ref, manifest.network, process.env, worldStrictEgress(manifest.env ?? {})));
     // a served World's twins as loopback listeners that add its key (./http-bridge.cjs), so a client with its own HTTP

package/dist/capability-decision.cjs

@@ -4,7 +4,7 @@
 // scoped proxy, a tab's relay, a native image run's Seatbelt profile) enforces this answer and decides nothing itself.
 // Pure: no I/O, no environment and nothing at import. What only the substrate can observe (the twin route, the vendors
 // sharing a host, which loopback ports are the World's doors or the run's own listeners) arrives as `facts`.
-const { allowsWorldNetworkEgress, isWorldInternalHost, worldNetworkNeedsPathInspection, worldNetworkUsesPassthrough } = require('./network-policy.cjs');
+const { allowsWorldNetworkEgress, explicitlyGrantsWorldNetworkEgress, isWorldInternalHost, worldNetworkNeedsPathInspection, worldNetworkUsesPassthrough } = require('./network-policy.cjs');
 
 /** The declaration of a guest with no declaration format: an ordinary host process, which can reach what the host can.
  *  Its own loopback is what it observably opened (`facts.ownListener`). A substrate whose guest can declare never uses it. */
@@ -135,7 +135,8 @@ function unlisted(url, target, method, { declaration, grant = {} }) {
   if (grant.strict === true) return refuse(capability, target, 'grant', 'sealed', `this sandbox refuses untwinned host ${url.hostname}`, declaration);
   if (grant.unreadable) return refuse(capability, target, 'grant', 'policy-unreadable', `the World network policy is unreadable (${grant.unreadable}); refusing ${url.hostname}`, declaration);
   if (grant.policy && !allowsWorldNetworkEgress(grant.policy, url, method ?? 'GET')) {
-    return refuse(capability, target, 'grant', 'not-granted', `the World network policy does not allow ${String(method ?? 'GET').toUpperCase()} ${url.origin}`, declaration);
+    // a tunnel (CONNECT) shows no method: the refusal names what was asked, never a method nobody sent
+    return refuse(capability, target, 'grant', 'not-granted', `the World network policy does not allow ${method ? `${String(method).toUpperCase()} ` : ''}${url.origin}`, declaration);
   }
   return null;
 }
@@ -254,9 +255,10 @@ function decideRead(request, { declaration, facts = {} }) {
   return refuse(capability, path, 'declaration', 'read-undeclared', `in Docker this container cannot read ${path}: it sees its own filesystem, the World's files and its declared mounts; declare a mount`, declaration);
 }
 
-/** Whether the World's build-phase grant lists `url` itself, which then wins over a twin of its host. */
+/** Whether the World's build-phase grant lists `url` itself, which then wins over a twin of its host. The unlisted
+ *  public build reads do not: on a twinned host the twin answers them. */
 function publicBuildGrant(grant, url) {
-  return grant.strict !== true && !!grant.policy && grant.policy.phase === 'build' && allowsWorldNetworkEgress(grant.policy, url);
+  return grant.strict !== true && !!grant.policy && grant.policy.phase === 'build' && explicitlyGrantsWorldNetworkEgress(grant.policy, url);
 }
 
 /** A path the guest writes as its data (a `VOLUME`). Declared, it passes run-scoped: writable for the run, not outliving

package/dist/generated/pack-facts.json

@@ -221,6 +221,50 @@
       },
       "serveExport": "createAxiomTwinServer"
     },
+    "bitly": {
+      "adoption": {
+        "sdks": [],
+        "envStems": [
+          "BITLY",
+          "BUFFER_BITLY"
+        ]
+      },
+      "hosts": [
+        {
+          "host": "api-ssl.bitly.com"
+        },
+        {
+          "host": "bitly.com",
+          "pathPattern": "^/oauth/authorize/?$"
+        }
+      ],
+      "archetype": "crud",
+      "protocol": {
+        "declared": "3",
+        "major": 3,
+        "standing": "current"
+      },
+      "transport": "rest",
+      "resources": [
+        "group",
+        "bitlink"
+      ],
+      "endpointEnvNone": "Dub uses literal vendor URLs and native fetch; the World routes them by host.",
+      "credentialDoor": {
+        "path": "/_twin/signup",
+        "body": {
+          "email": "publisher@example.test",
+          "password": "throwaway-bitly-password",
+          "login": "publisher"
+        },
+        "fill": {
+          "BITLY_CLIENT_ID": "client_id",
+          "BITLY_CLIENT_SECRET": "client_secret",
+          "BUFFER_BITLY_API_KEY": "access_token"
+        }
+      },
+      "serveExport": "createBitlyTwinServer"
+    },
     "cerebras": {
       "adoption": {
         "sdks": [
@@ -331,6 +375,65 @@
       },
       "serveExport": "createClerkTwinServer"
     },
+    "clickhouse": {
+      "adoption": {
+        "sdks": [
+          "@clickhouse/client",
+          "@clickhouse/client-web"
+        ],
+        "pypi": [
+          "clickhouse-driver",
+          "clickhouse-connect",
+          "infi-clickhouse-orm"
+        ],
+        "envStems": [
+          "CLICKHOUSE"
+        ]
+      },
+      "hostsNone": "Self-hosted database: its own declared host and allocated listener are supplied by managed infrastructure.",
+      "archetype": "crud",
+      "protocol": {
+        "declared": "3",
+        "major": 3,
+        "standing": "current"
+      },
+      "transport": "rest",
+      "resources": [
+        "database",
+        "table",
+        "row"
+      ],
+      "endpointEnv": {
+        "name": "CLICKHOUSE_URL",
+        "note": "HTTP base URL read by the documented JavaScript client."
+      },
+      "managedService": {
+        "kind": "clickhouse",
+        "scheme": "http",
+        "configurationArg": "--configuration",
+        "originalInputs": {
+          "version": 1,
+          "manifestArg": "--original-inputs",
+          "rootArg": "--original-root",
+          "digestArg": "--original-inputs-sha256",
+          "paths": [
+            "/etc/clickhouse-server",
+            "/docker-entrypoint-initdb.d",
+            "/entrypoint.sh"
+          ]
+        },
+        "note": "One HTTP8123/native9000 process and store; declared operator configuration is installed before listeners."
+      },
+      "sidePorts": [
+        {
+          "name": "native",
+          "option": "nativePort",
+          "flag": "--native-port",
+          "note": "ClickHouse native TCP protocol, normally9000, beside HTTP8123."
+        }
+      ],
+      "serveExport": "createClickhouseTwinServer"
+    },
     "cloudflare": {
       "adoption": {
         "pypi": [
@@ -538,7 +641,7 @@
       },
       "transport": "rest",
       "resources": [],
-      "endpointEnvNone": "Postiz calls https://api.deepgram.com/v1/listen; the World claims the host",
+      "endpointEnvNone": "No scanned application calls Deepgram; the World claims api.deepgram.com",
       "serveExport": "createDeepgramTwinServer"
     },
     "discord": {
@@ -786,7 +889,7 @@
       },
       "transport": "rest",
       "resources": [],
-      "endpointEnvNone": "Postiz calls https://fal.run/fal-ai/<model>; the World claims the hosts",
+      "endpointEnvNone": "the customer life calls https://fal.run/fal-ai/<model>; the World claims the hosts",
       "credentialDoor": {
         "path": "/_twin/app-credentials",
         "body": {},
@@ -956,7 +1059,7 @@
         },
         {
           "host": "github.com",
-          "pathPattern": "^/login|^/session|^/settings/|^/organizations/|^/apps/|^/[^/]+/[^/]+/(?:info/refs|git-upload-pack|git-receive-pack)$|^/[^/]+/[^/]+\\.git/"
+          "pathPattern": "^/login|^/session|^/settings/|^/organizations/|^/apps/|^/[^/]+/[^/]+/(?:info/refs|git-upload-pack|git-receive-pack)$|^/[^/]+/[^/]+\\.git/|^/[^/]+/[^/]+/?$|^/[^/]+/[^/]+/(?:issues|pulls?|blob|raw|tree|commits?|compare)(?:/|$)"
         }
       ],
       "archetype": "crud",
@@ -1014,6 +1117,55 @@
       "endpointEnvNone": "Google generated clients take rootUrl in code; the World routes the declared Calendar API paths.",
       "serveExport": "createGooglecalendarTwinServer"
     },
+    "googlefonts": {
+      "adoption": {
+        "sdks": [],
+        "envStems": [
+          "GOOGLE_FONTS"
+        ]
+      },
+      "hosts": [
+        {
+          "host": "www.googleapis.com",
+          "pathPattern": "^/webfonts/v1/webfonts$"
+        },
+        {
+          "host": "webfonts.googleapis.com",
+          "pathPattern": "^/v1/webfonts$"
+        },
+        {
+          "host": "fonts.googleapis.com",
+          "pathPattern": "^/css2?$"
+        },
+        {
+          "host": "fonts.gstatic.com",
+          "pathPattern": "^/(s/|l/font$)"
+        }
+      ],
+      "archetype": "crud",
+      "protocol": {
+        "declared": "3",
+        "major": 3,
+        "standing": "current"
+      },
+      "transport": "rest",
+      "resources": [
+        "webfont",
+        "_api_key",
+        "_font_catalog",
+        "_stylesheet",
+        "_font_file"
+      ],
+      "endpointEnvNone": "Pinned helper hardcodes the vendor API and CSS hosts, then downloads their returned gstatic URLs. Scoped host routing preserves these URLs.",
+      "credentialDoor": {
+        "path": "/_twin/app-credentials",
+        "body": {},
+        "fill": {
+          "GOOGLE_FONTS_API_KEY": "api_key"
+        }
+      },
+      "serveExport": "createGooglefontsTwinServer"
+    },
     "googleoauth": {
       "adoption": {
         "sdks": [
@@ -1516,6 +1668,38 @@
       },
       "serveExport": "createMistralTwinServer"
     },
+    "mongodb": {
+      "adoption": {
+        "sdks": [
+          "mongodb",
+          "mongoose"
+        ],
+        "envStems": [
+          "MONGODB",
+          "MONGO"
+        ]
+      },
+      "hosts": [],
+      "archetype": "crud",
+      "protocol": {
+        "declared": "3",
+        "major": 3,
+        "standing": "current"
+      },
+      "transport": "raw-tcp",
+      "resources": [
+        "collection",
+        "index",
+        "document"
+      ],
+      "endpointEnvNone": "Managed infrastructure injects the connection address from the declared mongodb service; it is a TCP endpoint, with no HTTP API host.",
+      "managedService": {
+        "kind": "mongodb",
+        "scheme": "mongodb",
+        "note": "MongoDB 7.0 wire: standalone, or a declared single-member handshake without sessions; state in the World tree"
+      },
+      "serveExport": "createMongodbTwinServer"
+    },
     "npm-registry": {
       "adoption": {
         "envStems": [
@@ -1910,6 +2094,10 @@
           "host": "reddit.com",
           "demandPathPattern": "^/api/"
         },
+        {
+          "host": "old.reddit.com",
+          "demandPathPattern": "^/api/"
+        },
         {
           "host": "reddit-uploaded-media.s3-accelerate.amazonaws.com"
         },
@@ -2566,7 +2754,7 @@
         "publish",
         "video"
       ],
-      "endpointEnvNone": "Postiz calls open.tiktokapis.com and sends people to www.tiktok.com; the World claims the hosts",
+      "endpointEnvNone": "an app calls open.tiktokapis.com and sends people to www.tiktok.com; the World claims the hosts",
       "credentialDoor": {
         "path": "/_twin/app-credentials",
         "body": {},
@@ -3149,6 +3337,18 @@
         "_code_challenge",
         "upload"
       ],
+      "credentialDoor": {
+        "path": "/_twin/app-credentials",
+        "body": {},
+        "fill": {
+          "TWITTER_API_KEY": "consumer_key",
+          "TWITTER_API_SECRET": "consumer_secret",
+          "TWITTER_ACCESS_TOKEN": "access_token",
+          "TWITTER_ACCESS_SECRET": "access_token_secret",
+          "TWITTER_CLIENT_ID": "client_id",
+          "TWITTER_CLIENT_SECRET": "client_secret"
+        }
+      },
       "serveExport": "createXTwinServer"
     },
     "xai": {