@volter/world-core 3.0.39 → 3.0.40
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/network-policy.cjs +4 -2
- package/network-policy.cjs +4 -2
- package/package.json +1 -1
package/dist/network-policy.cjs
CHANGED
|
@@ -127,8 +127,10 @@ function allowsWorldNetworkEgress(policy, value, method = 'GET') {
|
|
|
127
127
|
|
|
128
128
|
function worldNetworkUsesPassthrough(policy, value) {
|
|
129
129
|
const to = destination(value, true);
|
|
130
|
-
|
|
131
|
-
|
|
130
|
+
if (!to || policy.phase !== 'build') return false;
|
|
131
|
+
// public build artifacts tunnel unopened: native clients (Turbopack's next/font on macOS) trust only the OS store
|
|
132
|
+
if (policy.publicReads === true && PUBLIC_BUILD_READS.includes(to.url.origin) && !granted(policy.writes ?? [], to)) return true;
|
|
133
|
+
return policy.passthrough?.includes(to.url.origin) === true && policy.egress.includes(to.url.origin);
|
|
132
134
|
}
|
|
133
135
|
|
|
134
136
|
/** This authority must be mediated per request; CONNECT is only a path to the inspector. */
|
package/network-policy.cjs
CHANGED
|
@@ -127,8 +127,10 @@ function allowsWorldNetworkEgress(policy, value, method = 'GET') {
|
|
|
127
127
|
|
|
128
128
|
function worldNetworkUsesPassthrough(policy, value) {
|
|
129
129
|
const to = destination(value, true);
|
|
130
|
-
|
|
131
|
-
|
|
130
|
+
if (!to || policy.phase !== 'build') return false;
|
|
131
|
+
// public build artifacts tunnel unopened: native clients (Turbopack's next/font on macOS) trust only the OS store
|
|
132
|
+
if (policy.publicReads === true && PUBLIC_BUILD_READS.includes(to.url.origin) && !granted(policy.writes ?? [], to)) return true;
|
|
133
|
+
return policy.passthrough?.includes(to.url.origin) === true && policy.egress.includes(to.url.origin);
|
|
132
134
|
}
|
|
133
135
|
|
|
134
136
|
/** This authority must be mediated per request; CONNECT is only a path to the inspector. */
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@volter/world-core",
|
|
3
|
-
"version": "3.0.
|
|
3
|
+
"version": "3.0.40",
|
|
4
4
|
"description": "The kernel of Volter World: one log per twin, branches as pointers, checkpoints, the fold that keeps a twin current, the head that performs a write against the vendor, references, and the git plane. A twin package builds on it; the runtime serves it.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"twin",
|