@volter/world-core 3.0.8 → 3.0.9

package/dist/generated/pack-facts.json

@@ -979,9 +979,16 @@
         },
         {
           "host": "github.com",
-          "pathPattern": "^/login|^/session|^/settings/|^/organizations/|^/apps/|^/[^/]+/[^/]+\\.git/"
+          "pathPattern": "^/login|^/session|^/settings/|^/organizations/|^/apps/|^/[^/]+/[^/]+\\.git/|^/[^/]+/[^/]+/settings/pages"
+        },
+        {
+          "suffix": ".github.io"
         }
       ],
+      "hostsClaimed": {
+        "door": "/_twin/hosts",
+        "note": "GitHub Pages sites: each owner's github.io and each custom domain, answered with the publishing branch's files."
+      },
       "archetype": "crud",
       "protocol": {
         "declared": "3",

package/dist/src/pack-fetch.js

@@ -331,10 +331,14 @@ export function createPackFetch(parts, options = {}) {
         // over R2's /{Bucket}/{Key}), the root workspace at the root alone
         const page = placed && ['document', 'iframe'].includes(request.headers.get('sec-fetch-dest') ?? '');
         const rooted = (x) => x.s.decl.path.replace(/\/+$/, '') === '';
+        // a request the World routed from a vendor's own hostname (its proxy, a site, a call inside the World) is answered by
+        // that host's screens alone: a page of github.com never answers at <owner>.github.io, nor Cloudflare's sign-in at a
+        // Worker's Custom Domain; a screen by its path alone is for the twin reached at its own address
+        const addressed = !placed && request.headers.has('x-volter-twin-original-host');
         const byPath = hits.find((x) => x.onHost && exact(x.s))
             ?? (page ? hits.find((x) => !rooted(x)) ?? (path === '/' ? hits.find((x) => x.s.decl.kind === 'workspace') : undefined) : undefined)
-            ?? (apiPath ? undefined : hits.find((x) => x.onHost) ?? hits.find((x) => !rooted(x))
-                ?? (placed ? hits.find((x) => x.s.decl.kind === 'workspace') : undefined));
+            ?? (apiPath ? undefined : hits.find((x) => x.onHost) ?? (addressed ? undefined : hits.find((x) => !rooted(x))
+                ?? (placed ? hits.find((x) => x.s.decl.kind === 'workspace') : undefined)));
         if (byPath) {
             if (readOnly && request.method !== 'GET' && request.method !== 'HEAD')
                 return refusedReadOnly();

package/generated/pack-facts.json

@@ -979,9 +979,16 @@
         },
         {
           "host": "github.com",
-          "pathPattern": "^/login|^/session|^/settings/|^/organizations/|^/apps/|^/[^/]+/[^/]+\\.git/"
+          "pathPattern": "^/login|^/session|^/settings/|^/organizations/|^/apps/|^/[^/]+/[^/]+\\.git/|^/[^/]+/[^/]+/settings/pages"
+        },
+        {
+          "suffix": ".github.io"
         }
       ],
+      "hostsClaimed": {
+        "door": "/_twin/hosts",
+        "note": "GitHub Pages sites: each owner's github.io and each custom domain, answered with the publishing branch's files."
+      },
       "archetype": "crud",
       "protocol": {
         "declared": "3",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/world-core",
-  "version": "3.0.8",
+  "version": "3.0.9",
   "description": "The kernel of Volter World: one log per twin, branches as pointers, checkpoints, the fold that keeps a twin current, the head that performs a write against the vendor, references, and the git plane. A twin package builds on it; the runtime serves it.",
   "keywords": [
     "twin",

package/src/pack-fetch.ts

@@ -349,10 +349,14 @@ export function createPackFetch(parts: PackParts, options: PackFetchOptions = {}
     // over R2's /{Bucket}/{Key}), the root workspace at the root alone
     const page = placed && ['document', 'iframe'].includes(request.headers.get('sec-fetch-dest') ?? '');
     const rooted = (x: (typeof hits)[number]): boolean => x.s.decl.path.replace(/\/+$/, '') === '';
+    // a request the World routed from a vendor's own hostname (its proxy, a site, a call inside the World) is answered by
+    // that host's screens alone: a page of github.com never answers at <owner>.github.io, nor Cloudflare's sign-in at a
+    // Worker's Custom Domain; a screen by its path alone is for the twin reached at its own address
+    const addressed = !placed && request.headers.has('x-volter-twin-original-host');
     const byPath = hits.find((x) => x.onHost && exact(x.s))
       ?? (page ? hits.find((x) => !rooted(x)) ?? (path === '/' ? hits.find((x) => x.s.decl.kind === 'workspace') : undefined) : undefined)
-      ?? (apiPath ? undefined : hits.find((x) => x.onHost) ?? hits.find((x) => !rooted(x))
-        ?? (placed ? hits.find((x) => x.s.decl.kind === 'workspace') : undefined));
+      ?? (apiPath ? undefined : hits.find((x) => x.onHost) ?? (addressed ? undefined : hits.find((x) => !rooted(x))
+        ?? (placed ? hits.find((x) => x.s.decl.kind === 'workspace') : undefined)));
     if (byPath) {
       if (readOnly && request.method !== 'GET' && request.method !== 'HEAD') return refusedReadOnly();
       return byPath.s.answer(await open(request, byPath.s.decl.id, request.method, byPath.s.decl.path, { ...(byPath.onHost?.params ?? {}), ...byPath.hit!.params }));